$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ff4ec268-08b0-3230-947c-0849e42ce702.roa File: ff4ec268-08b0-3230-947c-0849e42ce702.roa (raw, json) Hash identifier: 93dboiRlwpljOKNPJNsQBrnqnBoirAfdMu5x9ef45G0= Subject key identifier: 1C:20:78:03:65:9E:1E:4E:B7:53:D3:6C:E5:42:C5:16:C9:94:CD:BC Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F4973A204CAEAD82A448C21E0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ff4ec268-08b0-3230-947c-0849e42ce702.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 67.217.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a2:04:ca:ea:d8:2a:44:8c:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5dc2cd77-0197-4ff0-af34-4e8fa56d32a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:6e:bf:b8:8f:fc:f1:81:a6:00:23:fc:d0: cd:3a:a0:20:1d:85:07:ae:a7:54:c4:85:e1:8a:aa: e6:c8:1a:ac:c2:4e:47:49:11:1c:cd:5c:82:46:04: 1d:45:8e:72:ed:e0:0e:5a:f2:ae:5e:89:bb:23:f9: c6:15:61:6d:fa:35:27:0c:1f:5e:18:a4:13:2b:e7: 3a:25:17:ba:0a:6a:3e:cd:fb:e4:92:68:80:75:64: 9b:d2:13:87:41:5a:5a:dd:05:fe:4b:97:33:ac:86: f3:81:6a:ab:d4:b1:a5:06:7b:23:22:1a:07:82:81: a8:80:12:91:22:82:00:6a:f8:eb:9a:08:3c:70:44: 03:58:84:3e:9f:92:29:5b:c4:ea:55:e0:aa:7a:82: aa:1d:ab:d2:73:cd:ce:ed:3a:1d:24:88:7b:0c:92: 58:90:d6:91:c9:99:f8:79:b0:90:7c:65:b5:dd:59: 71:25:1b:7a:73:75:13:e2:47:95:2d:68:de:42:23: 92:af:27:97:38:1e:8a:04:41:86:f1:7f:42:39:9f: f0:e9:39:27:a2:8e:8c:4b:b4:21:ac:9a:e0:3c:81: f8:c2:69:b2:6d:5f:14:17:5c:0f:8e:0b:f9:c9:31: a0:18:e9:a4:4d:a9:62:84:8e:63:dd:be:1c:d3:10: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:20:78:03:65:9E:1E:4E:B7:53:D3:6C:E5:42:C5:16:C9:94:CD:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ff4ec268-08b0-3230-947c-0849e42ce702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e7:d7:44:0d:6a:34:3d:85:d8:23:94:2c:f0:91:2a:48:ef: db:1c:08:92:d4:9e:15:a1:da:88:43:c0:84:51:a0:90:bb:6e: d1:05:8d:c6:fc:45:39:22:4e:cb:26:d2:68:bd:91:61:e9:b4: 2f:14:07:d3:19:53:ef:45:21:9d:22:1b:6e:27:f1:cb:05:4c: 2a:42:d5:9a:79:be:86:fc:fe:2f:8c:4c:6e:0b:02:cc:17:10: 10:2a:69:92:36:a0:38:46:cd:7a:29:39:c7:07:07:b6:20:0e: 9c:02:e9:71:fd:11:b7:0f:3e:c1:fb:47:a9:c0:84:4d:fd:cb: a7:d0:1c:ab:00:08:ac:9b:4f:87:af:86:c4:30:04:e5:a7:2d: 09:4d:ae:31:f1:67:0c:85:23:45:e3:e2:64:bc:d3:45:6a:3f: 28:f7:75:2b:31:9a:45:52:4a:28:34:8d:a3:9e:ab:8d:7c:2d: c8:a0:3d:68:e1:5f:6a:a2:8c:bc:e2:e7:bb:2c:cb:ab:0c:50: a0:4e:e1:f4:96:f6:85:bc:05:d7:f2:75:44:40:60:14:79:cb: 16:31:7d:e5:3d:e5:00:f7:15:82:8a:65:be:60:85:48:b3:51: cb:52:e4:4b:d4:91:9d:ad:43:ac:59:87:bf:15:cf:77:08:41: 01:3b:41:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6IEyurYKkSMIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWRjMmNkNzctMDE5Ny00ZmYwLWFmMzQtNGU4ZmE1NmQzMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzhuv7iP/PGBpgAj/NDNOqAgHYUHrqdUxIXh iqrmyBqswk5HSREczVyCRgQdRY5y7eAOWvKuXom7I/nGFWFt+jUnDB9eGKQTK+c6 JRe6Cmo+zfvkkmiAdWSb0hOHQVpa3QX+S5czrIbzgWqr1LGlBnsjIhoHgoGogBKR IoIAavjrmgg8cEQDWIQ+n5IpW8TqVeCqeoKqHavSc83O7TodJIh7DJJYkNaRyZn4 ebCQfGW13VlxJRt6c3UT4keVLWjeQiOSryeXOB6KBEGG8X9COZ/w6Tknoo6MS7Qh rJrgPIH4wmmybV8UF1wPjgv5yTGgGOmkTalihI5j3b4c0xByzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwgeANlnh5Ot1PTbOVCxRbJlM28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmY0ZWMyNjgtMDhiMC0z MjMwLTk0N2MtMDg0OWU0MmNlNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHn10QNajQ9hdgjlCzwkSpI79scCJLUnhWh2ohDwIRRoJC7btEFjcb8 RTkiTssm0mi9kWHptC8UB9MZU+9FIZ0iG24n8csFTCpC1Zp5vob8/i+MTG4LAswX EBAqaZI2oDhGzXopOccHB7YgDpwC6XH9EbcPPsH7R6nAhE39y6fQHKsACKybT4ev hsQwBOWnLQlNrjHxZwyFI0Xj4mS800VqPyj3dSsxmkVSSig0jaOeq418LcigPWjh X2qijLzi57ssy6sMUKBO4fSW9oW8BdfydURAYBR5yxYxfeU95QD3FYKKZb5ghUiz UctS5EvUkZ2tQ6xZh78Vz3cIQQE7QVQ= -----END CERTIFICATE-----Generated at Sun Oct 11 16:37:19 2026 by rpki-client