$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa File: 9a747c3b-3fd9-3e48-a4c5-c02174460043.roa (raw, json) Hash identifier: lVHFkYlkCvLVfo1/b2h6BrWrH177zDE1IaXY60LFEf0= Subject key identifier: A3:C4:5F:C1:B5:19:69:8D:39:A8:36:0D:8D:61:72:DD:CF:C3:7B:3C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F5A32DA0F9B64EAD33CEA0F00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 67.217.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:da:0f:9b:64:ea:d3:3c:ea:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=bb5f2b6a-ee51-4ef2-ab1d-a3e101116130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:88:7c:b2:42:22:38:a9:93:d9:38:4c:a4: b6:b1:5b:aa:81:bc:be:67:c4:2d:46:5d:19:ba:da: e3:4c:c0:96:46:a3:c0:4e:0a:7a:7f:cb:b8:20:28: d0:df:a3:5f:1b:65:31:79:22:23:22:84:02:8a:22: d7:48:74:c6:7b:c5:97:b1:c4:7a:ad:01:dc:a8:90: 21:80:2c:51:0c:3d:68:05:85:17:1f:d2:10:f9:02: f5:ca:52:80:04:24:31:5b:78:f6:2c:21:3a:b2:8d: a1:70:6d:2a:08:59:9a:64:b2:12:df:f5:1b:3a:0c: 07:77:10:86:4b:ff:c5:1c:27:3b:05:b9:35:54:63: 45:73:b3:a8:db:c1:8d:ce:ce:3a:0a:18:fa:1c:0c: fc:70:70:83:29:45:e3:53:3b:ba:f8:80:c7:62:c3: 8a:7c:32:ac:67:30:b4:b2:a5:90:9b:98:99:9a:1d: ad:13:26:1f:2e:7e:76:23:b3:c1:1a:94:f6:e1:49: 74:71:49:8a:09:fc:86:b1:83:2f:5b:1f:e9:0a:c0: fd:ce:1e:b1:d6:96:b2:4c:ce:66:8c:fb:98:9c:af: 2b:b2:ca:1e:19:69:70:df:38:55:45:b2:04:0f:d7: 3e:6b:fa:4a:db:6e:5b:2a:7e:f5:1c:8a:52:c2:f4: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C4:5F:C1:B5:19:69:8D:39:A8:36:0D:8D:61:72:DD:CF:C3:7B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e2:1c:3f:c6:9a:65:b9:e2:c9:8a:48:8b:12:fe:74:53:de: a5:b2:2e:1c:2e:03:99:10:a5:10:7f:8c:75:9d:f7:39:d0:9b: f4:6a:8c:e8:8d:a9:7c:1e:1e:b1:f3:b8:22:a8:cf:7e:2d:15: f2:03:33:a4:79:c0:d1:85:30:e0:54:bc:e5:7c:78:a2:04:ce: 20:c1:f3:c9:fc:b7:60:61:ba:93:b8:ed:38:3e:e0:02:b7:3f: 0e:59:c7:16:1f:3c:dc:f1:4b:f6:ed:dc:00:98:90:85:45:33: 2c:49:d3:09:d4:a4:40:3c:7d:b3:46:c0:cc:b1:8f:bb:d9:59: f9:21:a6:dc:62:e3:e7:3c:11:b5:93:1d:b8:98:dc:6c:af:73: 9b:90:78:41:66:1c:a0:c9:90:e1:48:27:77:71:93:85:d9:da: fc:a7:bc:19:f3:6b:d3:0c:c4:35:76:06:04:d3:02:89:fd:e3: b8:a4:d5:6c:3a:09:60:77:99:1c:48:f4:ab:46:76:7b:e3:9f: 45:79:87:05:45:9b:c4:1a:e9:48:ae:ce:78:d1:57:90:53:f1: 55:ac:53:df:dd:ab:2f:3b:d7:c9:d9:af:8e:d4:0a:e4:0e:7a: 61:59:77:42:f9:d9:ce:3e:da:d1:75:b9:cc:2f:27:ae:af:16: c8:55:af:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtoPm2Tq0zzqDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YmI1ZjJiNmEtZWU1MS00ZWYyLWFiMWQtYTNlMTAxMTE2MTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RaIfLJCIjipk9k4TKS2sVuqgby+Z8QtRl0Z utrjTMCWRqPATgp6f8u4ICjQ36NfG2UxeSIjIoQCiiLXSHTGe8WXscR6rQHcqJAh gCxRDD1oBYUXH9IQ+QL1ylKABCQxW3j2LCE6so2hcG0qCFmaZLIS3/UbOgwHdxCG S//FHCc7Bbk1VGNFc7Oo28GNzs46Chj6HAz8cHCDKUXjUzu6+IDHYsOKfDKsZzC0 sqWQm5iZmh2tEyYfLn52I7PBGpT24Ul0cUmKCfyGsYMvWx/pCsD9zh6x1payTM5m jPuYnK8rssoeGWlw3zhVRbIED9c+a/pK225bKn71HIpSwvQyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPEX8G1GWmNOag2DY1hct3Pw3s8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOWE3NDdjM2ItM2ZkOS0z ZTQ4LWE0YzUtYzAyMTc0NDYwMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATiHD/GmmW54smKSIsS/nRT3qWyLhwuA5kQpRB/jHWd9znQm/RqjOiN qXweHrHzuCKoz34tFfIDM6R5wNGFMOBUvOV8eKIEziDB88n8t2BhupO47Tg+4AK3 Pw5ZxxYfPNzxS/bt3ACYkIVFMyxJ0wnUpEA8fbNGwMyxj7vZWfkhptxi4+c8EbWT HbiY3Gyvc5uQeEFmHKDJkOFIJ3dxk4XZ2vynvBnza9MMxDV2BgTTAon947ik1Ww6 CWB3mRxI9KtGdnvjn0V5hwVFm8Qa6UiuznjRV5BT8VWsU9/dqy8718nZr47UCuQO emFZd0L52c4+2tF1ucwvJ66vFshVr3U= -----END CERTIFICATE-----Generated at Wed Oct 14 03:52:20 2026 by rpki-client