$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa File: cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa (raw, json) Hash identifier: MKjQY1cSr2BFw9OU/ZwswoX+5AnGNL0gs09QYkCRQkI= Subject key identifier: F4:21:20:C1:2B:09:BE:A5:71:B9:E4:7B:AB:D6:3C:AF:7E:73:A5:F9 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F14679325A2E64F8063F27660 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:93:25:a2:e6:4f:80:63:f2:76:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=582230fa-52fc-4a5a-a62e-98b90ce6a8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:12:0e:9a:a6:c5:75:de:1d:a6:ba:b9:f0: c9:51:ed:cc:81:88:ee:63:7f:06:a9:1f:92:a9:e7: 06:24:b4:79:11:df:b5:e5:3e:52:44:bc:37:f8:bf: 48:8f:83:48:a7:3a:32:1b:b4:48:37:e9:bb:bc:ed: 2a:c1:53:1e:42:64:18:6c:c1:23:93:da:41:fd:b1: 7a:ad:27:c6:23:35:77:69:99:43:77:f2:41:09:15: 28:28:aa:49:d4:69:6d:35:6b:07:2a:19:4b:b7:0e: 59:69:fb:74:d8:10:6d:ec:9e:24:be:05:97:5d:79: 5c:34:fe:00:fd:bf:af:e0:c5:6b:d4:8b:10:e1:47: 2b:1f:49:cf:dc:a8:a6:83:aa:70:81:02:44:43:32: af:70:ab:fc:ab:d9:a9:71:57:dd:28:a9:93:14:bf: 3b:46:73:5f:ec:3d:51:ee:78:52:f4:40:1c:8a:2a: bf:e0:83:5e:5a:19:24:2f:1d:01:31:4f:b1:13:00: 5c:60:f1:46:f2:e3:aa:46:7f:5c:72:87:c8:ca:af: 57:aa:35:18:4b:d9:c7:c7:32:4f:a7:f9:38:73:0f: 29:e6:be:21:a3:ea:2f:e4:b0:ef:60:ee:26:42:87: 9f:12:f2:b2:35:09:29:10:fb:f0:62:a2:55:0d:ec: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:21:20:C1:2B:09:BE:A5:71:B9:E4:7B:AB:D6:3C:AF:7E:73:A5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6e:32:34:2e:13:1e:05:93:09:3d:91:c9:a5:a5:05:50:aa: 87:23:74:fa:c3:95:d6:78:5a:4a:41:d7:b7:4f:08:36:06:d6: 36:7a:69:e8:15:69:a8:e0:cb:df:04:d6:6c:f3:a9:e0:12:76: 6a:b1:b7:bd:48:f6:e9:0b:6a:7b:87:81:44:be:6c:d3:01:2c: 1d:55:4c:f7:47:03:bc:20:c0:1a:27:6c:eb:53:c6:f6:91:ee: bb:2b:a4:d6:cc:a9:41:8b:09:61:49:02:32:75:e7:54:d9:e8: 5d:9f:57:3a:08:74:21:1c:a2:bf:da:27:c1:c3:34:9a:f1:99: c2:42:2a:30:33:dc:37:86:4c:27:97:18:66:f9:38:30:a6:71: 2f:81:bb:c8:c5:ab:5c:a8:10:70:94:26:f8:90:05:09:96:fa: 1a:33:a8:bb:ff:73:ba:62:fd:14:13:71:06:6c:04:0c:1a:82: 61:a8:bb:30:83:fd:94:f2:9d:d5:32:01:d4:59:bd:6c:b6:8a: 2a:34:ef:e0:44:54:94:2c:04:0f:fc:d6:fe:c2:0b:61:c7:eb: 3e:e8:84:50:93:9a:e9:58:cb:6c:5d:7c:d2:59:4e:5f:77:ec: 7b:a4:5f:92:e4:73:3d:28:7c:7e:3a:45:f1:7f:d2:75:34:93: 1c:a2:5d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5MlouZPgGPydmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NTgyMjMwZmEtNTJmYy00YTVhLWE2MmUtOThiOTBjZTZhOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApigSDpqmxXXeHaa6ufDJUe3MgYjuY38GqR+S qecGJLR5Ed+15T5SRLw3+L9Ij4NIpzoyG7RIN+m7vO0qwVMeQmQYbMEjk9pB/bF6 rSfGIzV3aZlDd/JBCRUoKKpJ1GltNWsHKhlLtw5Zaft02BBt7J4kvgWXXXlcNP4A /b+v4MVr1IsQ4UcrH0nP3Kimg6pwgQJEQzKvcKv8q9mpcVfdKKmTFL87RnNf7D1R 7nhS9EAciiq/4INeWhkkLx0BMU+xEwBcYPFG8uOqRn9ccofIyq9XqjUYS9nHxzJP p/k4cw8p5r4ho+ov5LDvYO4mQoefEvKyNQkpEPvwYqJVDewgzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQhIMErCb6lcbnke6vWPK9+c6X5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2Y0YjdkYzUtMjMzOC0z NjA3LTg3ZWUtMGZhN2UxYzQ4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5uMjQuEx4Fkwk9kcmlpQVQqocjdPrDldZ4WkpB17dPCDYG1jZ6aegV aajgy98E1mzzqeASdmqxt71I9ukLanuHgUS+bNMBLB1VTPdHA7wgwBonbOtTxvaR 7rsrpNbMqUGLCWFJAjJ151TZ6F2fVzoIdCEcor/aJ8HDNJrxmcJCKjAz3DeGTCeX GGb5ODCmcS+Bu8jFq1yoEHCUJviQBQmW+hozqLv/c7pi/RQTcQZsBAwagmGouzCD /ZTyndUyAdRZvWy2iio07+BEVJQsBA/81v7CC2HH6z7ohFCTmulYy2xdfNJZTl93 7HukX5Lkcz0ofH46RfF/0nU0kxyiXdc= -----END CERTIFICATE-----Generated at Tue Oct 6 13:54:44 2026 by rpki-client