$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: D1eT92tm7IIvVKg1HyWOfXrBmzVLa2j5rKevIlHMK0U= Subject key identifier: 26:DF:E2:F5:48:A3:DB:E1:76:18:FD:38:1B:9F:8F:54:CD:BF:62:1B Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AF0F138A0532B079FF8311B00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:38:a0:53:2b:07:9f:f8:31:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ad3f31f4-bdb3-49d6-8aa8-a2497a1b183e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:d0:32:2e:cf:68:c4:21:4d:fc:d8:fb:0d: 9e:f5:36:ce:d4:e5:48:05:db:71:1e:ec:e6:ca:e4: 50:38:70:1d:d1:95:16:83:9c:40:54:95:7b:56:41: ce:c7:b1:e1:a4:28:aa:b4:a6:83:04:d9:d1:17:da: a5:43:ca:64:cb:b2:73:a2:87:e5:b4:8b:7d:d5:9b: 70:14:92:26:a1:4f:7c:d4:6e:c4:f9:31:74:6c:db: e9:f4:ff:28:c2:0a:62:a1:57:1a:d8:e4:ea:67:dd: 95:47:1f:29:2b:c0:c8:15:ae:dc:7d:9c:50:b4:09: 73:34:38:4d:f2:75:eb:e0:28:d9:e3:ff:ea:87:40: 95:5d:e9:04:3e:b3:1c:8a:f3:24:be:a9:28:74:e5: ad:63:b8:d7:2a:92:a5:90:e4:36:99:3d:0f:0a:a5: 80:3e:a0:5e:a5:fb:4d:54:8f:00:30:27:b1:aa:0e: 33:a7:15:d3:0b:ac:80:3d:a2:6c:6d:89:8f:72:2b: 6f:ab:60:74:07:03:41:9e:be:ce:7b:34:0b:f4:5f: e5:ae:9a:80:3a:22:aa:ac:2b:a4:83:4a:19:5c:c9: 83:92:9f:27:24:1c:45:8b:d0:a6:c2:8e:2f:4c:a4: 23:16:95:27:00:9f:88:5c:af:c1:e1:0d:4d:f2:12: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DF:E2:F5:48:A3:DB:E1:76:18:FD:38:1B:9F:8F:54:CD:BF:62:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:95:e1:e7:ce:64:91:45:c8:ca:f9:e3:9d:ba:8a:21:3c:f5: 17:be:b8:02:94:99:b0:93:6f:f3:98:df:fe:db:58:13:92:65: ad:16:68:17:d6:36:c0:2b:43:4c:0d:50:ab:74:dc:26:c6:69: e6:0c:cb:c0:8d:d3:0a:35:8f:20:d5:5a:5e:8c:17:0d:a8:ce: 2e:b6:84:1f:c9:b5:ac:09:0f:27:98:08:12:74:47:37:fa:93: 33:d0:96:9c:59:4a:20:61:6c:dc:7a:7f:7f:04:2a:8d:d1:af: 02:01:59:18:f7:28:2b:31:b8:e5:a8:03:08:3f:b3:32:70:79: 8b:ba:55:81:d2:92:c5:5f:d0:5a:d9:bf:2c:08:c6:f2:54:d0: 66:27:67:47:20:92:60:0f:b5:b2:b9:f6:15:87:dd:0e:b9:44: 05:24:85:75:c2:71:93:dc:b9:43:cb:da:33:6b:f4:8d:e1:9a: e1:66:24:f5:6e:ac:01:b9:fd:cf:05:53:71:9d:0a:1d:cd:99: f8:83:13:2c:85:c6:f4:72:34:ed:39:1b:6f:3b:2e:c5:84:bb: 7f:aa:0b:53:15:94:d1:24:54:2a:fd:7f:0d:ad:ef:ea:3e:79: 90:ba:3c:7a:28:01:33:90:3d:79:96:f4:78:a1:5b:a2:e1:fe: 6a:b2:c6:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TigUysHn/gxGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YWQzZjMxZjQtYmRiMy00OWQ2LThhYTgtYTI0OTdhMWIxODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqfQMi7PaMQhTfzY+w2e9TbO1OVIBdtxHuzm yuRQOHAd0ZUWg5xAVJV7VkHOx7HhpCiqtKaDBNnRF9qlQ8pky7JzoofltIt91Ztw FJImoU981G7E+TF0bNvp9P8owgpioVca2OTqZ92VRx8pK8DIFa7cfZxQtAlzNDhN 8nXr4CjZ4//qh0CVXekEPrMcivMkvqkodOWtY7jXKpKlkOQ2mT0PCqWAPqBepftN VI8AMCexqg4zpxXTC6yAPaJsbYmPcitvq2B0BwNBnr7OezQL9F/lrpqAOiKqrCuk g0oZXMmDkp8nJBxFi9Cmwo4vTKQjFpUnAJ+IXK/B4Q1N8hIs6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbf4vVIo9vhdhj9OBufj1TNv2IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANyV4efOZJFFyMr54526iiE89Re+uAKUmbCTb/OY3/7bWBOSZa0WaBfW NsArQ0wNUKt03CbGaeYMy8CN0wo1jyDVWl6MFw2ozi62hB/JtawJDyeYCBJ0Rzf6 kzPQlpxZSiBhbNx6f38EKo3RrwIBWRj3KCsxuOWoAwg/szJweYu6VYHSksVf0FrZ vywIxvJU0GYnZ0cgkmAPtbK59hWH3Q65RAUkhXXCcZPcuUPL2jNr9I3hmuFmJPVu rAG5/c8FU3GdCh3NmfiDEyyFxvRyNO05G287LsWEu3+qC1MVlNEkVCr9fw2t7+o+ eZC6PHooATOQPXmW9HihW6Lh/mqyxvM= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:32 2025 by rpki-client