$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa File: af6da1df-6310-375d-ba7f-a2f60512f77a.roa (raw, json) Hash identifier: 0qbACg/a1U2K/F+CX1x/qS7fCZ1k7L0r6wzOUNOshrM= Subject key identifier: 2B:72:7D:6D:40:15:4C:13:36:05:62:B7:1D:95:78:5F:B2:36:3F:2C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F4277F6D91DC2CF7FEDD6AE00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 67.217.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f6:d9:1d:c2:cf:7f:ed:d6:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=6a452c86-259d-4ee9-980f-bf3b6e24c892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:ba:47:b0:9d:20:f6:7f:35:17:d2:b1:cc: 67:e4:d6:2a:05:fd:b2:f1:f8:5e:c0:c0:d2:53:94: 5d:76:5c:df:95:1d:4a:a7:2d:b3:cd:7f:5e:9a:30: 56:c8:77:fb:99:cf:8c:1a:6e:61:eb:ad:f2:cc:08: 41:c0:f9:14:82:11:05:ec:93:28:fe:aa:93:cf:38: 7f:60:71:a8:1e:17:0d:e4:c7:21:3a:e7:59:68:90: 19:98:a4:18:66:d0:59:b2:14:c3:ee:d8:e5:ce:2f: 66:bf:1e:8b:85:87:4e:6a:a0:5b:e3:2d:3c:2c:b0: 4f:5c:87:d4:45:fd:5d:76:85:87:fe:7a:e0:e0:a4: 1e:1c:e3:e8:a9:f4:bb:04:d2:8f:6d:a6:a1:c9:bb: 2d:09:d2:50:39:7f:a7:48:a3:8a:87:3e:3b:4c:b0: 52:38:29:fe:2e:9b:a9:b4:7b:f2:99:bf:43:7c:3d: 4a:ac:30:aa:d7:27:c4:25:32:93:41:fc:a0:65:2a: ee:67:a6:30:da:f9:76:72:aa:82:46:12:48:0b:22: 8a:53:fa:3a:4c:bd:0e:b8:86:a1:a5:6e:f8:0b:bf: 7e:45:13:56:4f:05:96:78:67:94:9b:b4:af:b3:5c: ae:15:6d:f7:3d:42:12:ec:5f:7e:69:00:55:3c:bd: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:7D:6D:40:15:4C:13:36:05:62:B7:1D:95:78:5F:B2:36:3F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:49:c3:1a:73:65:2b:51:f7:13:f1:17:59:74:18:14:4f:f9: e7:8e:07:79:b3:02:76:9f:49:77:e6:f7:b6:6b:b8:53:ef:05: bb:1d:50:77:c1:20:b7:56:3a:b8:30:88:c8:99:06:9f:91:78: a6:8f:b0:15:05:5e:50:5a:90:5c:d0:e1:74:f2:77:cc:bc:a9: 77:0d:e8:ae:9c:3a:3f:dc:0b:8b:41:b8:48:dd:5f:ee:53:67: 79:35:0b:4f:2a:70:00:24:2c:f2:f6:e0:77:1c:48:74:12:13: 9f:e3:00:eb:91:4d:37:0e:ff:d3:56:19:42:06:f7:b9:6f:b1: 03:ab:b2:ad:81:5f:fc:9c:6f:ef:5c:35:eb:ca:47:5c:e8:0a: b6:d6:cf:08:85:bf:b1:a1:ba:92:ad:2d:c1:d7:c0:80:ae:65: c5:44:d8:93:d2:e6:8b:c5:c2:ca:07:d5:13:76:32:af:f0:f5: e3:0e:82:89:ec:10:ad:ff:c3:22:e3:d3:e0:94:5e:89:1e:95: cc:2c:fb:d2:94:6b:70:5a:12:c0:9c:5f:4a:e2:8d:de:6d:48: 07:6d:c3:dd:b6:0d:c2:58:96:df:fc:68:3a:ac:4a:be:70:96: 93:2d:11:a0:e4:22:39:28:ef:db:5c:0f:2b:5d:00:91:a4:ec: c2:79:02:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/bZHcLPf+3WrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NmE0NTJjODYtMjU5ZC00ZWU5LTk4MGYtYmYzYjZlMjRjODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBq6R7CdIPZ/NRfSscxn5NYqBf2y8fhewMDS U5RddlzflR1Kpy2zzX9emjBWyHf7mc+MGm5h663yzAhBwPkUghEF7JMo/qqTzzh/ YHGoHhcN5MchOudZaJAZmKQYZtBZshTD7tjlzi9mvx6LhYdOaqBb4y08LLBPXIfU Rf1ddoWH/nrg4KQeHOPoqfS7BNKPbaahybstCdJQOX+nSKOKhz47TLBSOCn+Lpup tHvymb9DfD1KrDCq1yfEJTKTQfygZSruZ6Yw2vl2cqqCRhJICyKKU/o6TL0OuIah pW74C79+RRNWTwWWeGeUm7Svs1yuFW33PUIS7F9+aQBVPL0EpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtyfW1AFUwTNgVitx2VeF+yNj8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWY2ZGExZGYtNjMxMC0z NzVkLWJhN2YtYTJmNjA1MTJmNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9ldMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZJwxpzZStR9xPxF1l0GBRP+eeOB3mzAnafSXfm97ZruFPvBbsdUHfB ILdWOrgwiMiZBp+ReKaPsBUFXlBakFzQ4XTyd8y8qXcN6K6cOj/cC4tBuEjdX+5T Z3k1C08qcAAkLPL24HccSHQSE5/jAOuRTTcO/9NWGUIG97lvsQOrsq2BX/ycb+9c NevKR1zoCrbWzwiFv7GhupKtLcHXwICuZcVE2JPS5ovFwsoH1RN2Mq/w9eMOgons EK3/wyLj0+CUXokelcws+9KUa3BaEsCcX0rijd5tSAdtw922DcJYlt/8aDqsSr5w lpMtEaDkIjko79tcDytdAJGk7MJ5Arc= -----END CERTIFICATE-----Generated at Tue Sep 29 04:25:20 2026 by rpki-client