$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: vH5oeSRMqgnxUq8Xh8jlG57EOt4mxoqUtJOV4rLGDoE= Subject key identifier: FC:A1:E4:25:B9:5A:E0:4C:BA:83:86:A8:08:7E:CB:E7:86:09:79:26 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584E7204C92DC42FCEC3D5979400 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c9:2d:c4:2f:ce:c3:d5:97:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=fcad48c5-aab8-4b37-9a2a-10d3fd38fa0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:ca:a5:2b:a5:04:04:59:28:89:99:e0:ae: fa:7d:e2:9b:3f:f0:76:b6:6c:80:77:4a:03:22:40: bf:82:88:31:ea:a8:fd:19:4e:07:02:86:54:86:fd: 1c:7a:4b:c1:c0:cd:b8:19:30:9b:2d:52:ff:07:d5: d4:3d:c8:6e:09:97:6e:f7:11:ca:31:ee:8b:49:ca: 58:76:b0:43:5b:02:91:8a:4c:7b:dd:48:57:5d:f2: 20:57:06:cb:60:ce:89:73:d1:53:3e:0b:45:47:10: ab:a0:c1:06:4e:14:d3:c0:05:df:a7:dc:f5:28:f0: ef:4b:42:41:5b:eb:95:21:8e:04:20:d9:2c:89:ab: a4:d3:99:e6:ab:78:4e:56:a4:c9:ba:30:3c:9e:eb: 63:48:7e:42:38:f2:2e:6a:2e:e7:cf:2a:e7:30:ea: f2:96:08:66:74:96:0e:63:5e:d4:eb:5f:cd:78:0b: 57:1b:c7:b9:1e:bd:63:62:94:9f:a2:e0:20:5b:b5: d7:04:42:d6:fb:38:6a:4a:ca:fd:fc:e3:0c:47:42: 64:40:3a:f5:e0:bf:1c:45:fe:2b:f0:68:15:23:48: 82:7d:9a:ca:11:0f:23:b2:aa:7c:d7:34:ac:71:67: 0f:a0:2b:7f:b1:d1:9e:a3:5c:a4:84:31:2a:5b:aa: b0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:E4:25:B9:5A:E0:4C:BA:83:86:A8:08:7E:CB:E7:86:09:79:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:8b:8b:9b:76:21:7f:27:b1:12:16:00:6e:ae:89:ce:d0:ac: 63:75:68:a5:36:4b:61:f0:82:a5:18:75:46:0b:26:e6:8f:59: 93:56:ac:5a:62:4d:1e:59:af:d6:2b:da:58:8b:39:fc:08:2d: de:3c:38:16:6d:20:25:48:ff:13:a4:bf:9e:2d:c4:39:6f:a3: 09:5c:31:11:6b:cc:8b:bc:83:5c:a1:48:a2:4a:a4:0f:96:94: 0b:cc:41:36:f2:16:dc:b2:fe:aa:51:b6:87:9e:f4:5b:01:7a: 48:9f:d7:e2:a0:3c:1b:ea:34:7a:4e:ed:ce:66:05:ef:d6:09: aa:64:fa:27:f9:2f:7a:08:90:c4:ee:bd:dc:0b:09:30:10:a6: 5e:34:10:c8:91:f7:cb:16:e6:2a:95:d5:c5:75:24:ef:d4:9d: 11:c2:4a:ed:7c:b9:4a:ca:a5:b5:cf:ca:4d:9c:51:5a:46:dd: f3:ea:a0:e1:31:31:0e:66:96:cf:cf:16:ae:61:e3:b5:13:20: b3:a4:06:3c:38:28:06:c3:11:8d:e5:55:ed:12:f6:4e:50:6f: 3c:75:91:49:e0:ee:b2:fe:cb:ba:65:79:68:8f:a9:f6:d9:6e: d5:cc:53:04:a1:a0:6d:ac:d5:eb:3e:ab:a2:9a:24:e3:f5:aa: ea:eb:bb:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMktxC/Ow9WXlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ZmNhZDQ4YzUtYWFiOC00YjM3LTlhMmEtMTBkM2ZkMzhmYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH3KpSulBARZKImZ4K76feKbP/B2tmyAd0oD IkC/gogx6qj9GU4HAoZUhv0cekvBwM24GTCbLVL/B9XUPchuCZdu9xHKMe6LScpY drBDWwKRikx73UhXXfIgVwbLYM6Jc9FTPgtFRxCroMEGThTTwAXfp9z1KPDvS0JB W+uVIY4EINksiauk05nmq3hOVqTJujA8nutjSH5COPIuai7nzyrnMOrylghmdJYO Y17U61/NeAtXG8e5Hr1jYpSfouAgW7XXBELW+zhqSsr9/OMMR0JkQDr14L8cRf4r 8GgVI0iCfZrKEQ8jsqp81zSscWcPoCt/sdGeo1ykhDEqW6qwfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyh5CW5WuBMuoOGqAh+y+eGCXkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOLi5t2IX8nsRIWAG6uic7QrGN1aKU2S2HwgqUYdUYLJuaPWZNWrFpi TR5Zr9Yr2liLOfwILd48OBZtICVI/xOkv54txDlvowlcMRFrzIu8g1yhSKJKpA+W lAvMQTbyFtyy/qpRtoee9FsBekif1+KgPBvqNHpO7c5mBe/WCapk+if5L3oIkMTu vdwLCTAQpl40EMiR98sW5iqV1cV1JO/UnRHCSu18uUrKpbXPyk2cUVpG3fPqoOEx MQ5mls/PFq5h47UTILOkBjw4KAbDEY3lVe0S9k5Qbzx1kUng7rL+y7pleWiPqfbZ btXMUwShoG2s1es+q6KaJOP1qurru1A= -----END CERTIFICATE-----Generated at Fri Jul 24 22:42:33 2026 by rpki-client