$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa File: 9a747c3b-3fd9-3e48-a4c5-c02174460043.roa (raw, json) Hash identifier: QSyiUibU/yY9jyQSGNDpz+kooT9Y/Lhgv8RXiuQ3TAA= Subject key identifier: 32:85:0A:A1:06:B9:3F:48:5A:16:A2:EA:AF:F3:42:8D:9F:25:61:7E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B76F22850F1F997794D0FDD40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 31898 IP address blocks: 67.217.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:28:50:f1:f9:97:79:4d:0f:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d9519cb2-2fc9-43f8-8fd4-e36e06aa691c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:d5:87:2a:05:62:f5:e5:b3:94:16:25:02: f2:1f:20:a8:d0:41:31:43:2e:34:52:99:70:f3:f3: f4:bb:12:de:c6:ac:a0:53:e5:3f:d3:aa:a4:bc:58: 35:91:59:7b:92:4a:b9:11:ae:1b:85:1d:50:cc:91: 59:4e:16:b1:11:58:59:b6:ab:b7:63:5b:10:e8:27: fd:61:7d:de:42:5d:4d:1a:65:68:ee:4a:e2:af:73: 78:4b:b6:96:e7:8b:27:21:3b:da:7b:01:9f:55:26: 4f:58:48:b8:7b:3c:28:ff:8c:06:8e:0c:5b:b7:1e: 59:42:94:7e:60:cf:36:a3:c8:db:ab:b8:cb:ab:0b: 77:84:84:bc:ca:9f:42:25:53:bb:50:88:0d:54:25: 29:55:bd:0c:b9:f2:14:1b:ad:9f:28:fe:28:6d:f1: f8:c3:5a:81:fb:ec:33:a9:0f:e6:9d:6d:a0:00:bb: 75:8a:a0:65:bb:23:73:20:09:7a:20:ad:57:41:b9: 1a:e9:f2:d6:1c:c6:b6:e7:6e:b4:de:07:7c:16:08: aa:42:14:63:94:68:5b:fa:e9:ed:3f:ac:1c:b9:52: 17:a9:5f:11:98:b9:37:ad:c6:33:e6:54:72:6d:f6: 27:8e:30:5c:4b:e7:02:6f:11:d5:95:db:5e:7d:a9: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:85:0A:A1:06:B9:3F:48:5A:16:A2:EA:AF:F3:42:8D:9F:25:61:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:cd:0b:3a:d6:3e:3f:5e:d1:de:9e:3b:34:f6:fb:45:32:db: 68:54:71:89:80:b0:24:90:c2:f6:9a:e6:ee:b8:a3:ef:00:fd: c3:b9:96:a6:2b:b4:fa:31:0e:94:92:ea:eb:e9:0c:f2:1a:d7: 43:55:3b:9b:18:44:a4:40:f4:e5:64:19:f7:ac:91:17:de:9e: 5d:5c:b5:73:0c:b6:1f:fe:22:e8:35:b1:c7:05:85:57:19:e6: f8:fe:2b:32:2b:ef:3a:2c:6e:7f:55:95:57:5c:f5:a3:b4:81: 7a:ce:d0:dc:43:b2:5b:34:30:80:23:ed:6c:97:40:ff:91:00: db:1f:e9:6b:da:a1:c6:89:e7:bf:3c:e5:9d:90:e8:03:19:f1: 7e:ff:3c:90:58:e1:92:83:76:7b:7d:96:24:9b:3b:2b:14:23: af:dc:f4:bd:a7:5d:8f:4c:85:11:57:0c:b4:00:2c:0e:8a:c4: 79:0a:9e:fc:71:4c:0d:1c:3b:89:ab:cb:41:73:37:64:3f:f0: 2d:77:69:ca:65:47:f9:97:53:98:bf:80:f1:20:79:ac:f8:2a: 80:f1:26:fc:bc:24:f5:8a:f6:99:f7:28:24:25:9e:53:5a:79: b1:dd:21:8b:8f:f5:8b:c7:3e:0e:50:4a:a2:6e:37:a8:87:87: 9d:25:ca:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ihQ8fmXeU0P3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDk1MTljYjItMmZjOS00M2Y4LThmZDQtZTM2ZTA2YWE2OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUbVhyoFYvXls5QWJQLyHyCo0EExQy40Uplw 8/P0uxLexqygU+U/06qkvFg1kVl7kkq5Ea4bhR1QzJFZThaxEVhZtqu3Y1sQ6Cf9 YX3eQl1NGmVo7krir3N4S7aW54snITvaewGfVSZPWEi4ezwo/4wGjgxbtx5ZQpR+ YM82o8jbq7jLqwt3hIS8yp9CJVO7UIgNVCUpVb0MufIUG62fKP4obfH4w1qB++wz qQ/mnW2gALt1iqBluyNzIAl6IK1XQbka6fLWHMa252603gd8FgiqQhRjlGhb+unt P6wcuVIXqV8RmLk3rcYz5lRybfYnjjBcS+cCbxHVldtefanuYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKFCqEGuT9IWhai6q/zQo2fJWF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOWE3NDdjM2ItM2ZkOS0z ZTQ4LWE0YzUtYzAyMTc0NDYwMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrNCzrWPj9e0d6eOzT2+0Uy22hUcYmAsCSQwvaa5u64o+8A/cO5lqYr tPoxDpSS6uvpDPIa10NVO5sYRKRA9OVkGfeskRfenl1ctXMMth/+Iug1sccFhVcZ 5vj+KzIr7zosbn9VlVdc9aO0gXrO0NxDsls0MIAj7WyXQP+RANsf6WvaocaJ5788 5Z2Q6AMZ8X7/PJBY4ZKDdnt9liSbOysUI6/c9L2nXY9MhRFXDLQALA6KxHkKnvxx TA0cO4mry0FzN2Q/8C13acplR/mXU5i/gPEgeaz4KoDxJvy8JPWK9pn3KCQlnlNa ebHdIYuP9YvHPg5QSqJuN6iHh50lyi4= -----END CERTIFICATE-----Generated at Sun Oct 19 23:51:55 2025 by rpki-client