$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa File: 4418db0a-1628-3c5d-b614-7de117f0a9fd.roa (raw, json) Hash identifier: z6tK69TSgy/qvPYqgzSC1n0R/tbDJjrZx94znJNFccE= Subject key identifier: 79:33:16:C2:55:41:C7:01:EE:CD:4F:47:30:9D:66:84:60:8B:F7:24 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EF717600B25D3D0E560799400 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 21866 IP address blocks: 67.217.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:60:0b:25:d3:d0:e5:60:79:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=0ba1dfad-a379-4eb7-b35a-ae4ff67f1524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:7c:4a:1a:ad:01:fe:f0:e6:75:60:0a:98: 66:03:b8:11:81:f0:21:65:24:54:89:3e:f2:b8:28: 17:a1:bb:13:83:5d:47:77:2c:41:f7:88:08:f5:1b: 31:ea:9d:22:e2:a3:89:4c:09:27:a8:76:c4:31:3a: 93:f9:be:21:ba:e1:f5:28:a9:96:f0:9c:8d:88:46: d5:d3:66:d7:38:d3:88:92:32:f4:7b:f2:cd:cf:52: 2c:79:91:01:9d:8b:b3:41:10:97:90:e2:47:00:de: 08:ee:c5:e8:4d:07:ec:1a:f6:e8:f9:cd:f2:ab:27: ad:bd:79:25:b7:ae:ee:64:f3:f1:da:d1:b1:df:2f: 61:91:6a:7c:44:96:c0:b2:44:36:90:a1:5b:43:84: c6:ad:1f:39:e3:59:a5:18:12:f8:8b:52:4c:d6:89: c8:9a:f0:6f:74:9e:0c:86:1f:af:a8:9e:3c:10:d9: b2:79:75:d4:cb:74:91:f6:90:ee:72:69:b9:67:a7: 8a:b9:98:13:53:67:2d:e2:f2:cc:e4:0b:84:e3:84: 1b:ce:c3:c7:17:99:0e:8f:2c:7d:91:4b:50:8c:80: 1f:12:9f:bd:2d:1d:c6:95:ad:05:ce:de:52:09:40: 6e:4c:ea:39:3c:6d:e4:e4:fc:a4:77:e7:95:16:4f: 23:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:16:C2:55:41:C7:01:EE:CD:4F:47:30:9D:66:84:60:8B:F7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f7:d4:a2:47:72:d6:02:fe:01:32:8b:32:35:fd:3a:ac:42: e9:78:d9:fe:f4:cb:62:3b:9a:b1:bd:fb:d7:c2:9c:a0:04:04: a7:5a:51:5f:a7:14:fd:02:d0:33:88:6c:ca:7a:7b:2e:b2:1e: b2:d0:6e:f4:4f:f2:53:3a:42:ca:12:af:d1:a5:71:b0:53:42: 85:95:27:d4:f4:32:fe:8e:38:22:15:b1:0a:0b:7b:ab:fa:8c: e7:a8:d5:1f:c2:87:ed:8a:fc:e8:03:2a:57:9d:bf:c2:d5:38: 1b:fb:cf:6e:8c:38:f5:c2:0c:04:1d:e2:f4:9e:33:0f:db:ae: 30:f7:8b:cf:20:9e:b0:3c:bb:9b:26:84:ab:06:82:b2:d4:90: fa:52:b0:10:93:f1:cc:01:07:ad:55:4f:70:3e:e3:b6:e4:83: 5f:eb:07:19:bc:2d:b1:ec:b0:c5:af:ed:3e:a8:e5:6d:ee:71: af:23:8f:06:b0:5b:dd:29:c6:27:87:9e:44:94:de:9f:b9:ce: a9:ac:ce:3c:8c:dd:a7:45:d7:5a:9a:cc:58:0a:71:2f:8d:2d: ee:a6:a7:7c:15:45:71:d5:c9:79:c2:8a:4f:2a:55:92:ae:3f: d1:2f:8e:c0:6b:9c:35:49:fb:48:56:01:31:af:96:c8:fe:38: 9c:01:07:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2ALJdPQ5WB5lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MGJhMWRmYWQtYTM3OS00ZWI3LWIzNWEtYWU0ZmY2N2YxNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G98ShqtAf7w5nVgCphmA7gRgfAhZSRUiT7y uCgXobsTg11HdyxB94gI9Rsx6p0i4qOJTAknqHbEMTqT+b4huuH1KKmW8JyNiEbV 02bXONOIkjL0e/LNz1IseZEBnYuzQRCXkOJHAN4I7sXoTQfsGvbo+c3yqyetvXkl t67uZPPx2tGx3y9hkWp8RJbAskQ2kKFbQ4TGrR8541mlGBL4i1JM1onImvBvdJ4M hh+vqJ48ENmyeXXUy3SR9pDucmm5Z6eKuZgTU2ct4vLM5AuE44QbzsPHF5kOjyx9 kUtQjIAfEp+9LR3Gla0Fzt5SCUBuTOo5PG3k5Pykd+eVFk8jXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkzFsJVQccB7s1PRzCdZoRgi/ckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDQxOGRiMGEtMTYyOC0z YzVkLWI2MTQtN2RlMTE3ZjBhOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9laMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH31KJHctYC/gEyizI1/TqsQul42f70y2I7mrG9+9fCnKAEBKdaUV+n FP0C0DOIbMp6ey6yHrLQbvRP8lM6QsoSr9GlcbBTQoWVJ9T0Mv6OOCIVsQoLe6v6 jOeo1R/Ch+2K/OgDKledv8LVOBv7z26MOPXCDAQd4vSeMw/brjD3i88gnrA8u5sm hKsGgrLUkPpSsBCT8cwBB61VT3A+47bkg1/rBxm8LbHssMWv7T6o5W3uca8jjwaw W90pxieHnkSU3p+5zqmszjyM3adF11qazFgKcS+NLe6mp3wVRXHVyXnCik8qVZKu P9EvjsBrnDVJ+0hWATGvlsj+OJwBBw0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:40:23 2026 by rpki-client