$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4327bb41-20b7-39c4-9c16-27a7688c5659.roa File: 4327bb41-20b7-39c4-9c16-27a7688c5659.roa (raw, json) Hash identifier: ZQrhMx6t3QnR+0ZrNqrj3oZ+p8zNk4ahYmPpvUUtuYw= Subject key identifier: 1B:B6:A3:F1:D8:07:90:F3:F3:0D:62:44:DA:16:58:4D:5C:61:BF:3D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D0BC5EBB3BF6A782324475740 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4327bb41-20b7-39c4-9c16-27a7688c5659.roa Signing time: Tue 03 Mar 2026 13:14:15 +0000 ROA not before: Tue 03 Mar 2026 13:14:15 +0000 ROA not after: Mon 01 Jun 2026 12:14:15 +0000 asID: 31898 IP address blocks: 67.217.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:c5:eb:b3:bf:6a:78:23:24:47:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 3 13:14:15 2026 GMT Not After : Jun 1 12:14:15 2026 GMT Subject: CN=52edb632-28a1-4636-b24d-7728a66b4e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:8d:23:a5:53:d4:ef:50:5f:8e:4c:bf:ac: 38:26:4a:78:5a:b6:1e:d1:f9:31:a8:96:be:47:ff: 05:1a:cb:36:d7:e0:b2:0e:1c:e7:ce:e1:16:54:4b: ff:fd:82:81:50:2f:ce:ca:81:c6:d3:bf:70:51:dc: f2:77:90:53:9c:d7:91:f4:54:14:a2:44:fd:10:b1: 71:8e:67:e8:0b:55:be:76:20:b6:9f:c0:0c:f4:7f: 4e:d2:98:17:88:7e:d5:57:c2:16:32:b7:3b:e1:4f: 3d:06:d1:7c:7f:4e:a7:82:64:da:43:fa:2b:3b:5e: c1:34:24:f6:52:0a:98:82:8a:1b:72:9d:b1:5d:b2: 05:35:dc:f3:d2:94:8f:96:73:40:65:d2:43:a6:7b: 9f:1e:65:ef:b6:35:0c:45:b0:e2:59:c8:13:ee:a1: a3:eb:ab:0d:89:59:1c:07:e6:a6:95:9f:0b:fc:61: a7:dc:12:3c:50:02:87:45:6f:d3:77:ae:3e:eb:30: 22:22:49:e2:53:fd:cc:b0:79:7b:10:26:bc:c5:b2: 4c:9a:81:f2:b6:56:42:94:a5:87:45:3a:6b:82:be: 56:8a:59:a8:c4:d8:a0:5d:0f:77:43:d7:9d:21:47: 9e:15:e4:56:47:04:93:07:53:bc:72:96:53:f1:84: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B6:A3:F1:D8:07:90:F3:F3:0D:62:44:DA:16:58:4D:5C:61:BF:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4327bb41-20b7-39c4-9c16-27a7688c5659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:48:44:57:48:c7:51:78:57:49:87:1e:d3:be:06:ed:01:51: 62:5a:2f:1b:45:ad:2f:d4:fd:42:79:52:7a:fa:e0:3c:4e:cc: 69:60:fc:b0:21:ff:b0:95:00:6e:92:55:ca:b0:89:9d:df:96: 3a:6b:6b:44:e2:1c:f3:02:e6:ee:74:c2:fe:26:cc:ad:56:bb: b1:61:81:c2:a2:db:a3:fd:70:08:01:8b:26:c0:cb:33:8e:37: 2a:58:38:40:8e:ca:f2:68:53:7e:36:48:25:89:aa:45:cf:81: 56:1d:46:16:8d:df:cb:01:f4:6b:0d:27:e1:f5:0e:38:28:f0: c0:4f:84:8c:50:45:c1:1b:47:34:09:ba:fe:d3:ac:a0:e8:41: c4:4f:52:22:b0:f6:de:c9:ed:3a:ea:8a:b5:42:84:d5:84:fd: 72:a4:e8:76:5a:ad:61:85:60:1d:90:91:81:c8:da:8a:eb:32: 7b:98:2f:08:77:18:bf:66:5a:d7:27:88:87:c9:06:f4:fe:ef: dc:39:c4:b7:b0:a9:35:8e:31:d7:a1:0a:41:f7:42:01:c7:39: 26:e7:1a:3c:e5:f6:b0:7a:9e:92:cb:0f:90:74:79:9f:cc:0b: 70:35:08:e4:f3:a2:3b:e0:3c:0a:50:c6:6b:9e:f9:f9:65:f7: 4a:3d:d5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Lxeuzv2p4IyRHV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMwMzEzMTQxNVoXDTI2MDYwMTEyMTQxNVowLzEtMCsGA1UEAxMk NTJlZGI2MzItMjhhMS00NjM2LWIyNGQtNzcyOGE2NmI0ZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC6NI6VT1O9QX45Mv6w4Jkp4WrYe0fkxqJa+ R/8FGss21+CyDhznzuEWVEv//YKBUC/OyoHG079wUdzyd5BTnNeR9FQUokT9ELFx jmfoC1W+diC2n8AM9H9O0pgXiH7VV8IWMrc74U89BtF8f06ngmTaQ/orO17BNCT2 UgqYgoobcp2xXbIFNdzz0pSPlnNAZdJDpnufHmXvtjUMRbDiWcgT7qGj66sNiVkc B+amlZ8L/GGn3BI8UAKHRW/Td64+6zAiIkniU/3MsHl7ECa8xbJMmoHytlZClKWH RTprgr5WilmoxNigXQ93Q9edIUeeFeRWRwSTB1O8cpZT8YRn2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu2o/HYB5Dz8w1iRNoWWE1cYb89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDMyN2JiNDEtMjBiNy0z OWM0LTljMTYtMjdhNzY4OGM1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlIRFdIx1F4V0mHHtO+Bu0BUWJaLxtFrS/U/UJ5Unr64DxOzGlg/LAh /7CVAG6SVcqwiZ3fljpra0TiHPMC5u50wv4mzK1Wu7FhgcKi26P9cAgBiybAyzOO NypYOECOyvJoU342SCWJqkXPgVYdRhaN38sB9GsNJ+H1Djgo8MBPhIxQRcEbRzQJ uv7TrKDoQcRPUiKw9t7J7TrqirVChNWE/XKk6HZarWGFYB2QkYHI2orrMnuYLwh3 GL9mWtcniIfJBvT+79w5xLewqTWOMdehCkH3QgHHOSbnGjzl9rB6npLLD5B0eZ/M C3A1COTzojvgPApQxmue+fll90o91cA= -----END CERTIFICATE-----Generated at Tue Mar 10 22:22:52 2026 by rpki-client