$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/435f3b79-2350-3854-92dd-22666096fb1d.roa File: 435f3b79-2350-3854-92dd-22666096fb1d.roa (raw, json) Hash identifier: /Zv9ZR6vdMyobqtTjMOCbNvwtN7RjHt4QWlXzwRD8ck= Subject key identifier: 68:FD:C9:48:C2:6B:1A:40:F6:E8:34:28:AA:38:CF:35:84:29:1C:5D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D300A53DF5C106815AE097500 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/435f3b79-2350-3854-92dd-22666096fb1d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 67.217.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:53:df:5c:10:68:15:ae:09:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a159676e-814b-45ef-9104-14d45de35987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:ca:78:b7:43:e1:d3:39:22:ea:6d:2e:cf: f9:84:7e:4f:61:9c:cc:ab:ba:a0:36:13:43:ad:32: 27:11:53:d5:ac:1a:a3:c1:19:4f:06:40:4e:06:c9: b2:1d:15:fd:38:f0:9c:fd:47:4e:ff:e4:53:e0:3f: 38:a3:18:5b:73:c4:ad:97:d7:bc:c1:13:85:b8:80: 4c:20:7d:7b:83:d4:13:c1:67:b0:76:3e:08:65:51: e5:9f:16:2a:0c:4d:0a:52:05:ad:bd:31:96:71:7f: 78:f6:98:be:f3:80:e6:fa:bb:37:2f:03:43:c4:b4: da:a9:ab:e8:34:a0:1f:5a:4d:7e:ef:9b:78:15:10: 72:40:b8:2e:53:fb:56:1e:09:dc:08:89:5c:41:9e: ad:83:0c:26:70:fb:b0:0e:df:96:f5:57:86:06:2f: cf:5c:83:36:cc:67:c2:d6:5a:94:06:20:68:f0:1a: 40:58:34:90:8e:63:ae:d5:5d:fa:e0:d4:60:06:05: 1c:33:f8:38:75:08:10:30:f5:65:58:8b:aa:69:a6: 1c:b0:50:4d:4c:49:33:61:b4:95:87:67:1c:af:59: a9:aa:cc:56:60:0f:27:e5:64:b9:7f:dd:72:98:7c: d4:64:73:28:ee:14:69:74:03:91:0f:97:9d:18:d3: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:C9:48:C2:6B:1A:40:F6:E8:34:28:AA:38:CF:35:84:29:1C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/435f3b79-2350-3854-92dd-22666096fb1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:1b:ed:30:84:be:10:d4:a1:0c:2a:b8:ef:2f:d1:69:a3:4f: c6:56:07:e0:98:5f:b8:76:bc:5d:99:57:10:36:ef:04:45:83: c1:86:51:6e:c3:56:70:55:d1:54:fe:ee:96:60:c1:7e:8f:fa: 29:6f:7b:8e:70:ff:6e:ea:90:ce:79:58:40:ba:ea:c9:12:66: cb:8f:18:ae:68:ed:a3:c0:d7:1c:a7:79:3a:9a:eb:0f:3b:21: b1:98:81:3e:e8:f3:2c:c8:f4:6c:cb:a6:a8:ea:f1:6b:73:8f: 33:86:e2:c1:af:70:a7:a1:9c:50:97:c3:c7:df:bb:83:e9:92: ce:ae:ca:00:bd:12:f8:9d:f6:fb:1a:6b:20:b8:db:03:3b:a9: 3b:88:83:7c:30:6c:f2:f8:64:9a:74:55:2f:f2:a8:3e:3c:8b: 4f:dc:8b:5d:0c:14:ad:eb:94:da:fe:48:43:9d:07:39:ed:59: 9d:fb:6c:97:2c:f0:ee:ac:d8:82:1b:21:a8:48:c4:4f:72:a9: fa:f8:ce:23:f0:2d:a2:52:3b:cc:6c:6e:fa:44:3d:2b:b6:f6: 1b:9b:df:dd:33:50:75:d1:fd:26:fd:08:07:33:b5:f6:dc:33: e3:7e:1f:04:05:fa:f1:aa:fb:50:ea:74:ab:ad:6b:3b:d9:db: 46:ae:55:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClPfXBBoFa4JdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTE1OTY3NmUtODE0Yi00NWVmLTkxMDQtMTRkNDVkZTM1OTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWHKeLdD4dM5IuptLs/5hH5PYZzMq7qgNhND rTInEVPVrBqjwRlPBkBOBsmyHRX9OPCc/UdO/+RT4D84oxhbc8Stl9e8wROFuIBM IH17g9QTwWewdj4IZVHlnxYqDE0KUgWtvTGWcX949pi+84Dm+rs3LwNDxLTaqavo NKAfWk1+75t4FRByQLguU/tWHgncCIlcQZ6tgwwmcPuwDt+W9VeGBi/PXIM2zGfC 1lqUBiBo8BpAWDSQjmOu1V364NRgBgUcM/g4dQgQMPVlWIuqaaYcsFBNTEkzYbSV h2ccr1mpqsxWYA8n5WS5f91ymHzUZHMo7hRpdAORD5edGNMbuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj9yUjCaxpA9ug0KKo4zzWEKRxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDM1ZjNiNzktMjM1MC0z ODU0LTkyZGQtMjI2NjYwOTZmYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOIb7TCEvhDUoQwquO8v0WmjT8ZWB+CYX7h2vF2ZVxA27wRFg8GGUW7D VnBV0VT+7pZgwX6P+ilve45w/27qkM55WEC66skSZsuPGK5o7aPA1xyneTqa6w87 IbGYgT7o8yzI9GzLpqjq8WtzjzOG4sGvcKehnFCXw8ffu4Ppks6uygC9Evid9vsa ayC42wM7qTuIg3wwbPL4ZJp0VS/yqD48i0/ci10MFK3rlNr+SEOdBzntWZ37bJcs 8O6s2IIbIahIxE9yqfr4ziPwLaJSO8xsbvpEPSu29hub390zUHXR/Sb9CAcztfbc M+N+HwQF+vGq+1DqdKutazvZ20auVR4= -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:12 2026 by rpki-client