$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa File: 43633a19-7889-3252-9f77-1300c5c82796.roa (raw, json) Hash identifier: 7Mj4KDIWhr5U9iifpuU9856jf18LUQj5tiGj7p5y530= Subject key identifier: 45:4A:1C:97:CB:99:23:0D:40:CB:5D:3C:14:01:BB:36:69:F7:28:90 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584D8EF5571BAD3C6F82FC958600 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 22612 IP address blocks: 67.223.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:57:1b:ad:3c:6f:82:fc:95:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b90381c9-fe62-47c0-bd6a-d0592efc32b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:b4:c1:1f:0f:4c:6a:5b:4d:37:71:e7:44: 97:69:ba:a5:95:53:e3:22:42:f4:ad:58:f8:82:f6: b9:f3:98:82:0b:f9:d5:c5:87:48:fd:ee:21:47:56: 84:9b:d9:ec:4a:7d:21:fb:ba:d3:40:cc:ec:6b:24: 18:04:d0:8f:bb:b2:6b:7b:cc:58:77:fc:60:99:62: 66:b6:c4:c1:f5:cb:8e:80:bf:dd:de:cf:a9:29:0c: b5:c2:9e:e7:cd:49:45:d1:af:fb:97:89:eb:ae:dc: b4:ce:9a:60:c9:d2:c3:38:ec:cb:33:20:49:9b:42: 56:ea:a9:3f:06:ad:1f:ad:1a:95:20:d3:82:53:b5: 27:70:51:67:cd:d4:8d:df:aa:62:61:38:ca:0b:12: e6:08:c6:79:ab:5e:80:b1:ae:d2:32:7e:da:45:76: 9d:6b:e3:14:db:25:05:69:7b:91:6e:95:e4:5d:75: ef:9b:7b:97:2f:be:00:fe:32:f8:4b:ad:76:e5:00: 67:f8:77:d7:26:f6:9e:e6:b9:54:b6:15:3b:16:81: 59:8f:5b:3d:1d:66:1c:2a:c6:ee:75:0b:ad:cc:bc: ee:e1:07:cf:80:61:3f:6a:aa:a2:cc:13:16:f2:73: a2:c6:b4:40:2e:b8:0c:f5:3a:77:18:46:8a:a2:46: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4A:1C:97:CB:99:23:0D:40:CB:5D:3C:14:01:BB:36:69:F7:28:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 67.223.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0f:95:d6:4c:4f:c7:a3:a2:97:07:4e:d2:ba:ca:4d:b3:ec: ba:83:5d:a4:41:7d:01:c5:bb:ae:af:85:3d:d1:6f:00:64:a3: 0f:e0:9b:37:b7:12:5b:1b:8f:42:22:53:87:dd:f5:ab:72:e2: 17:79:d2:be:60:8d:37:db:2f:3a:ec:60:b5:3b:45:29:03:4d: 8c:0b:13:37:fb:70:88:2f:40:d5:99:e3:dc:f3:6a:b5:56:19: 95:5a:e9:ca:b4:62:f4:a9:3e:d0:9d:6f:e1:e1:c2:59:3c:3b: 2e:0d:d8:4e:57:c7:5a:9c:af:7d:ae:3d:d0:96:47:fd:2a:33: 0e:8a:e2:9b:68:8f:92:a0:28:79:0a:38:48:87:ee:fd:d2:34: 7e:51:89:48:20:9f:9b:3f:b5:4d:03:2a:18:32:4f:cf:96:1e: 4d:57:13:b2:0f:ad:61:67:27:b3:65:44:ce:79:b4:22:28:15: cd:44:ce:3f:98:ca:f1:b7:70:08:76:80:df:90:75:5e:7d:86: 1e:6c:21:27:79:2f:01:1b:26:c8:da:b6:5b:b1:6d:04:13:ce: 1b:f7:c3:96:39:4a:a7:84:2e:aa:86:f8:1b:18:b9:e0:5a:69: d5:4e:22:5b:e1:5d:3f:71:d2:2c:d1:31:c2:8b:55:42:1b:d3: f2:2a:60:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VcbrTxvgvyVhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjkwMzgxYzktZmU2Mi00N2MwLWJkNmEtZDA1OTJlZmMzMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQy0wR8PTGpbTTdx50SXabqllVPjIkL0rVj4 gva585iCC/nVxYdI/e4hR1aEm9nsSn0h+7rTQMzsayQYBNCPu7Jre8xYd/xgmWJm tsTB9cuOgL/d3s+pKQy1wp7nzUlF0a/7l4nrrty0zppgydLDOOzLMyBJm0JW6qk/ Bq0frRqVINOCU7UncFFnzdSN36piYTjKCxLmCMZ5q16Asa7SMn7aRXada+MU2yUF aXuRbpXkXXXvm3uXL74A/jL4S6125QBn+HfXJvae5rlUthU7FoFZj1s9HWYcKsbu dQutzLzu4QfPgGE/aqqizBMW8nOixrRALrgM9Tp3GEaKokajmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVKHJfLmSMNQMtdPBQBuzZp9yiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvNDM2MzNhMTktNzg4OS0z MjUyLTlmNzctMTMwMGM1YzgyNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ990MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcPldZMT8ejopcHTtK6yk2z7LqDXaRBfQHFu66vhT3RbwBkow/gmze3 Elsbj0IiU4fd9aty4hd50r5gjTfbLzrsYLU7RSkDTYwLEzf7cIgvQNWZ49zzarVW GZVa6cq0YvSpPtCdb+Hhwlk8Oy4N2E5Xx1qcr32uPdCWR/0qMw6K4ptoj5KgKHkK OEiH7v3SNH5RiUggn5s/tU0DKhgyT8+WHk1XE7IPrWFnJ7NlRM55tCIoFc1Ezj+Y yvG3cAh2gN+QdV59hh5sISd5LwEbJsjatluxbQQTzhv3w5Y5SqeELqqG+BsYueBa adVOIlvhXT9x0izRMcKLVUIb0/IqYEs= -----END CERTIFICATE-----Generated at Wed May 13 16:02:38 2026 by rpki-client