$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa File: 89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa (raw, json) Hash identifier: wkqkEdXYrTBAkxxrmdDvaAXOdVzgWHBAjH6e9W08kBo= Subject key identifier: A5:D7:F7:49:7D:BB:30:95:30:3F:0B:7F:62:3B:35:42:FF:2B:6A:F4 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B0746BABE38C322413569B440 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 67.217.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:ba:be:38:c3:22:41:35:69:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=bc762312-88a2-4932-aa43-872080761ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:4c:d6:f3:62:ff:73:1b:94:f9:45:c5:5d: 66:eb:e3:83:eb:e5:75:6c:fe:2c:d8:ca:1d:74:8a: 2e:fa:ab:16:ea:6a:4b:f1:8f:bd:f0:fe:22:65:60: 8a:15:7e:f4:4f:27:15:d5:d5:1f:79:e9:90:76:cb: cf:33:cf:9f:78:6a:30:bc:3e:e8:2a:91:d4:57:b9: f7:d9:f6:03:5d:f1:28:aa:4a:88:a5:c4:da:ff:5e: 08:50:dc:56:18:96:2e:c1:51:72:1c:78:cb:35:8a: 80:dc:1d:20:e8:ee:ce:3e:8b:1a:8f:28:f5:ed:84: e0:79:31:8f:a8:b3:b1:7c:50:cc:2f:a6:dc:45:ba: 73:2d:be:2e:18:65:50:95:e7:9a:a0:64:61:f0:71: c1:df:01:65:d5:88:aa:87:0b:c5:d2:0b:ca:65:57: fb:7e:24:03:60:8c:5d:14:31:11:42:82:fa:64:c4: 46:28:30:c4:2e:88:66:60:72:5d:14:d8:80:02:8c: a8:0e:f4:ee:0d:81:6f:4f:26:61:f5:9d:b1:a8:dd: 45:83:e4:c3:d3:d3:8e:88:da:de:d0:1c:83:0b:86: 7e:23:c6:54:8a:30:bc:dd:8c:9d:71:f0:2b:a4:dd: e8:e9:7c:9b:c1:5f:54:66:b4:77:6f:47:f5:8d:39: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:F7:49:7D:BB:30:95:30:3F:0B:7F:62:3B:35:42:FF:2B:6A:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:aa:dd:5b:f1:e7:73:fd:54:94:4a:d2:5b:a8:77:f5:95:d7: 8c:d6:78:ed:f2:99:3d:14:76:93:cd:ff:01:0d:36:8b:d7:b5: 6e:dc:87:38:bb:7d:52:f6:ed:2b:c3:5c:48:e5:61:ce:7a:88: 03:ea:18:f8:e1:33:8e:b7:86:c7:0f:18:ac:cf:cb:2b:28:97: 51:94:2d:82:c9:67:d7:b4:1d:35:b3:bf:01:78:80:20:47:e2: c3:28:60:89:25:5f:2b:32:7d:c1:1d:df:60:56:a4:48:fe:03: 03:58:d7:c0:3e:60:1f:dc:87:2e:10:e7:ea:62:8c:6e:0e:05: 07:5a:d3:2b:d5:8b:40:52:72:6a:01:27:a5:86:46:89:ee:07: de:84:2b:22:6e:a4:71:8a:27:b3:01:14:34:ac:24:1e:e8:f8: b2:ba:82:3e:d5:4e:c2:1d:6f:75:49:7e:ea:5e:19:00:69:31: 82:b5:c8:bd:6a:2f:b6:18:82:87:e5:34:97:79:3c:45:6a:f6: 22:24:4c:bd:30:86:81:f3:ce:b5:7f:6f:ee:70:75:c7:7b:b3: 05:59:ab:e0:d4:c0:64:b1:e6:67:e8:f7:d4:41:13:e0:33:0e: ab:fc:df:c0:ee:8d:c5:eb:76:cb:2c:3e:90:cb:7b:51:2f:e0: 8f:15:14:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrq+OMMiQTVptEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YmM3NjIzMTItODhhMi00OTMyLWFhNDMtODcyMDgwNzYxY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MxM1vNi/3MblPlFxV1m6+OD6+V1bP4s2Mod dIou+qsW6mpL8Y+98P4iZWCKFX70TycV1dUfeemQdsvPM8+feGowvD7oKpHUV7n3 2fYDXfEoqkqIpcTa/14IUNxWGJYuwVFyHHjLNYqA3B0g6O7OPosajyj17YTgeTGP qLOxfFDML6bcRbpzLb4uGGVQleeaoGRh8HHB3wFl1YiqhwvF0gvKZVf7fiQDYIxd FDERQoL6ZMRGKDDELohmYHJdFNiAAoyoDvTuDYFvTyZh9Z2xqN1Fg+TD09OOiNre 0ByDC4Z+I8ZUijC83YydcfArpN3o6XybwV9UZrR3b0f1jTkcewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXX90l9uzCVMD8Lf2I7NUL/K2r0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODliMTNmMjctNTViMy0z YzA2LTllY2UtY2ExYWE2OWNhMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGq3Vvx53P9VJRK0luod/WV14zWeO3ymT0UdpPN/wENNovXtW7chzi7 fVL27SvDXEjlYc56iAPqGPjhM463hscPGKzPyysol1GULYLJZ9e0HTWzvwF4gCBH 4sMoYIklXysyfcEd32BWpEj+AwNY18A+YB/chy4Q5+pijG4OBQda0yvVi0BScmoB J6WGRonuB96EKyJupHGKJ7MBFDSsJB7o+LK6gj7VTsIdb3VJfupeGQBpMYK1yL1q L7YYgoflNJd5PEVq9iIkTL0whoHzzrV/b+5wdcd7swVZq+DUwGSx5mfo99RBE+Az Dqv838DujcXrdsssPpDLe1Ev4I8VFDc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:01 2025 by rpki-client