$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa File: cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa (raw, json) Hash identifier: qggix0Q0ZR+lcFMD2swUpC+4McB1UgVC18QhcUkptmM= Subject key identifier: 10:24:9F:63:26:1F:E9:5A:2B:B3:2F:68:D7:AE:92:85:47:4E:6B:A8 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D91C00226829070163A00CD40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 14618 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:02:26:82:90:70:16:3a:00:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=49cfb67b-da6c-4786-8796-175e0cd65de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:16:b6:1b:be:bb:8d:3f:fd:da:13:f6:72: 13:e1:da:e1:6d:2b:00:4d:29:8f:75:85:10:f0:d9: 31:94:81:79:38:c7:3f:a9:a4:7a:c6:39:9e:fc:c4: 46:9e:19:e3:8c:ed:7c:63:27:b0:0f:06:64:e6:1e: dd:89:38:44:93:2f:05:c7:42:80:74:41:58:cd:11: 09:3e:58:f3:ab:d4:dc:38:87:4c:ad:be:b0:93:56: 5a:d0:75:ff:e6:65:22:c9:59:d9:83:59:ae:73:1b: e6:63:b4:40:f7:e6:6e:35:41:e1:5f:2e:52:86:2c: 01:12:a9:b7:48:e5:0b:6f:ab:ec:da:78:e5:d1:65: f8:51:a4:60:19:3e:cb:eb:29:49:dd:81:a4:b9:74: 5e:c5:40:b1:3a:a3:05:f6:27:88:31:e1:60:91:aa: 9b:b2:33:41:f3:19:ad:b6:94:ca:af:e4:32:aa:04: 37:c2:13:9b:8d:84:e4:8d:eb:a3:e2:ef:1d:fc:91: a1:0e:7e:d8:86:d0:da:3c:3b:b1:e3:25:d9:7f:c2: c9:27:48:02:b6:5c:b4:99:8a:4f:17:0d:72:4b:b8: 8c:48:79:cc:6a:1f:e0:ad:84:0c:50:f4:0d:8e:c3: 79:1c:fb:27:95:d4:20:25:04:24:86:aa:15:df:87: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:24:9F:63:26:1F:E9:5A:2B:B3:2F:68:D7:AE:92:85:47:4E:6B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a0:1c:c7:63:58:a7:d0:e2:08:35:2e:b0:09:73:42:14:a0: 84:06:b7:e4:95:16:e2:cc:08:9f:83:b0:72:4e:5b:f2:6b:4d: f0:a0:aa:e0:cc:25:30:77:a2:ad:fc:a6:2f:6e:8d:3e:ba:84: e7:64:62:f6:ff:68:58:be:59:91:11:9e:fb:ee:1d:7c:32:de: 6f:9a:6d:d5:19:13:d5:d5:9b:ed:97:8f:44:27:93:0c:52:35: 64:12:c3:3c:d3:97:f6:9a:e0:81:e7:a0:03:ec:e1:42:c7:76: 19:fb:a8:e3:00:c7:8e:45:3a:0d:ca:a3:21:73:ba:10:19:e8: c7:87:51:41:de:b8:c0:ac:1e:e8:89:7d:13:d0:c2:01:de:d7: 90:e7:70:97:41:1a:61:2a:7a:53:e1:5a:a6:d9:df:80:a4:7d: 78:5b:ac:12:cf:65:00:7b:c9:a2:a7:9b:c7:68:f5:2a:9b:62: 26:a0:ce:87:50:c6:d1:19:95:16:a8:99:35:da:3e:3b:e3:d3: a1:98:98:15:8c:71:21:b7:ee:a6:c9:a0:e6:85:05:55:09:6d: 3f:4b:a6:94:e8:57:ae:dc:d2:e8:b4:1b:29:91:a6:86:5b:89: 02:36:c5:13:1d:97:89:f6:25:dd:cf:96:01:9d:80:7b:08:cf: f9:9b:ee:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAImgpBwFjoAzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NDljZmI2N2ItZGE2Yy00Nzg2LTg3OTYtMTc1ZTBjZDY1ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y4Wthu+u40//doT9nIT4drhbSsATSmPdYUQ 8NkxlIF5OMc/qaR6xjme/MRGnhnjjO18YyewDwZk5h7diThEky8Fx0KAdEFYzREJ Pljzq9TcOIdMrb6wk1Za0HX/5mUiyVnZg1mucxvmY7RA9+ZuNUHhXy5ShiwBEqm3 SOULb6vs2njl0WX4UaRgGT7L6ylJ3YGkuXRexUCxOqMF9ieIMeFgkaqbsjNB8xmt tpTKr+QyqgQ3whObjYTkjeuj4u8d/JGhDn7YhtDaPDux4yXZf8LJJ0gCtly0mYpP Fw1yS7iMSHnMah/grYQMUPQNjsN5HPsnldQgJQQkhqoV34ec6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAkn2MmH+laK7MvaNeukoVHTmuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2Y0YjdkYzUtMjMzOC0z NjA3LTg3ZWUtMGZhN2UxYzQ4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOgHMdjWKfQ4gg1LrAJc0IUoIQGt+SVFuLMCJ+DsHJOW/JrTfCgquDM JTB3oq38pi9ujT66hOdkYvb/aFi+WZERnvvuHXwy3m+abdUZE9XVm+2Xj0QnkwxS NWQSwzzTl/aa4IHnoAPs4ULHdhn7qOMAx45FOg3KoyFzuhAZ6MeHUUHeuMCsHuiJ fRPQwgHe15DncJdBGmEqelPhWqbZ34CkfXhbrBLPZQB7yaKnm8do9SqbYiagzodQ xtEZlRaomTXaPjvj06GYmBWMcSG37qbJoOaFBVUJbT9LppToV67c0ui0GymRpoZb iQI2xRMdl4n2Jd3PlgGdgHsIz/mb7jA= -----END CERTIFICATE-----Generated at Wed May 13 17:02:14 2026 by rpki-client