$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: hP/cSHUdJukBqVR4lf2KbJp4StXYjJUY/m6YkROs+GU= Subject key identifier: 70:A1:D9:B9:67:CE:25:2B:E9:CF:D2:CC:6F:26:7D:84:6A:5B:54:54 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D91C00745D8EC7FD7A7568A60 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:07:45:d8:ec:7f:d7:a7:56:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=c627bada-4811-4903-b703-fbd28236d0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:1f:aa:34:26:3a:89:06:a5:ea:34:6a:29: 5c:cb:41:d0:17:6e:04:71:69:6f:ab:63:fe:b4:96: 17:a9:c5:20:95:0e:46:81:fb:11:d7:c2:23:20:29: 66:09:c8:53:de:2d:7d:20:5c:f2:d5:b1:31:a6:3a: ed:0e:32:3d:8c:c1:67:dd:cc:7f:55:a4:31:47:48: 7b:d8:47:13:a3:fa:2e:36:88:6e:f0:f1:fa:d0:f2: 7f:1e:b7:e1:13:3f:f4:28:e8:02:c6:f1:68:58:78: 35:fb:25:9c:33:61:6c:38:37:41:e6:aa:ca:ff:6d: 35:d6:40:63:6c:8b:11:89:6d:f3:83:11:ab:b6:d3: 5d:6b:08:d3:7f:1c:c2:60:3e:4f:c0:a2:6b:b0:4b: fa:67:35:58:dd:66:df:1b:34:cc:ae:c4:2a:d7:e1: 57:f0:12:cd:a2:3c:c1:a1:be:cd:f8:6c:4c:c0:84: 68:75:eb:1a:f9:de:29:75:49:8d:f7:00:83:5d:8d: 81:83:19:d4:1f:fa:bc:66:67:c8:14:77:72:7d:4a: a1:ee:39:fa:8e:d1:bf:f4:b2:5c:4f:66:d9:dd:a6: 71:ce:02:14:a0:a6:eb:8f:95:f2:52:90:8a:f6:f4: 8c:f6:4a:b2:02:df:2f:8a:db:5a:25:c9:9c:43:1a: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A1:D9:B9:67:CE:25:2B:E9:CF:D2:CC:6F:26:7D:84:6A:5B:54:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ac:34:9f:11:58:2d:0f:5b:8a:52:f2:1b:f3:e5:4e:58:3e: 9c:55:e6:fb:58:1b:b7:34:b9:f2:5b:59:e2:e6:2a:ec:05:d7: b9:64:06:b1:ef:80:f2:86:62:b0:74:76:bd:42:4f:b6:90:b4: 9d:8c:d6:8c:60:15:69:61:e3:da:78:f5:15:3d:12:31:be:6c: bf:2b:c7:71:a5:52:c2:d1:52:1c:56:7b:54:bf:5b:86:08:2e: af:65:cc:4e:a4:8d:1c:8b:2d:76:e4:cf:30:3d:91:14:f1:31: 0b:cd:a8:32:48:3d:31:b8:0c:c6:de:20:0b:3e:cd:b0:f5:59: 34:c2:6c:75:f3:f5:d6:ab:9c:ab:8d:16:2b:1a:81:ec:22:69: 8d:77:a4:cd:20:af:3e:34:19:bd:c1:ea:36:3a:88:38:97:7c: 0c:5d:42:c3:4f:ff:b9:30:c6:62:f0:33:f7:cf:0c:e4:e0:4d: e7:22:51:90:8a:48:7e:21:c7:83:d4:4d:ec:82:82:91:d1:74: 7a:c0:ef:fa:83:75:8e:e7:04:32:a1:48:9e:5f:40:38:f6:bf: af:82:8b:9c:7c:5c:a1:79:77:27:37:fe:c5:50:75:70:8d:63: 62:c3:fc:e5:3c:34:4b:30:70:18:8a:71:53:ce:d0:ef:d6:67: 22:57:98:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAdF2Ox/16dWimAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YzYyN2JhZGEtNDgxMS00OTAzLWI3MDMtZmJkMjgyMzZkMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAircfqjQmOokGpeo0ailcy0HQF24EcWlvq2P+ tJYXqcUglQ5GgfsR18IjIClmCchT3i19IFzy1bExpjrtDjI9jMFn3cx/VaQxR0h7 2EcTo/ouNohu8PH60PJ/HrfhEz/0KOgCxvFoWHg1+yWcM2FsODdB5qrK/2011kBj bIsRiW3zgxGrttNdawjTfxzCYD5PwKJrsEv6ZzVY3WbfGzTMrsQq1+FX8BLNojzB ob7N+GxMwIRodesa+d4pdUmN9wCDXY2BgxnUH/q8ZmfIFHdyfUqh7jn6jtG/9LJc T2bZ3aZxzgIUoKbrj5XyUpCK9vSM9kqyAt8vittaJcmcQxotZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCh2blnziUr6c/SzG8mfYRqW1RUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSsNJ8RWC0PW4pS8hvz5U5YPpxV5vtYG7c0ufJbWeLmKuwF17lkBrHv gPKGYrB0dr1CT7aQtJ2M1oxgFWlh49p49RU9EjG+bL8rx3GlUsLRUhxWe1S/W4YI Lq9lzE6kjRyLLXbkzzA9kRTxMQvNqDJIPTG4DMbeIAs+zbD1WTTCbHXz9darnKuN FisagewiaY13pM0grz40Gb3B6jY6iDiXfAxdQsNP/7kwxmLwM/fPDOTgTeciUZCK SH4hx4PUTeyCgpHRdHrA7/qDdY7nBDKhSJ5fQDj2v6+Ci5x8XKF5dyc3/sVQdXCN Y2LD/OU8NEswcBiKcVPO0O/WZyJXmIY= -----END CERTIFICATE-----Generated at Sun May 3 16:16:09 2026 by rpki-client