$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: GAXkURcGXE8Jh5bPmXy181GDuzvFpoIYLfydbPyfFIM= Subject key identifier: 96:6A:D0:07:F5:A5:33:63:C1:BE:2D:59:47:00:59:28:C5:28:EE:D1 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F146796C0D66A00A92DA69800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:96:c0:d6:6a:00:a9:2d:a6:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=02928ec5-ad58-49a3-b379-42c37e35d956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:8b:75:80:0f:56:22:67:53:ac:40:2a:87: 3b:7c:6e:a7:7a:7a:33:f1:be:72:7c:80:3e:2f:ed: 41:05:68:cf:51:9b:b5:02:97:7e:e4:66:3a:0c:8b: d8:26:bc:7b:a2:a3:d0:0f:4e:65:bd:83:38:5f:0a: f3:5c:29:d0:42:d6:42:3b:17:15:27:01:2b:d3:a2: 56:cf:f4:d9:13:5a:de:69:a2:8f:2e:6a:0b:91:f2: 4e:37:cd:a2:0a:7e:cf:b0:6b:53:a5:bc:e7:18:24: 82:c8:f4:aa:a7:ce:b8:73:bf:fc:1e:e0:af:36:77: c0:63:a7:96:c2:1c:c3:94:09:c4:d7:ff:0e:f5:cf: a1:89:67:ca:2a:3a:bd:0f:11:85:fd:b5:61:28:d5: 6f:dc:9f:29:85:cd:87:12:68:2f:bb:ea:2f:1c:73: 74:25:01:ed:c0:73:7b:77:2f:e0:19:57:df:35:9b: d4:d5:a6:c2:0a:af:07:3c:97:90:f1:41:15:85:d9: 63:c2:60:61:4a:d7:5e:22:ed:6e:0c:b2:33:61:72: 06:5f:ff:7b:e4:2e:6a:09:1d:1d:90:95:83:b3:16: d1:7f:d6:94:bc:c2:64:a7:b8:d3:78:05:04:0b:bf: 38:a0:da:28:ef:47:4c:19:5d:cc:b2:31:28:ea:9e: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:D0:07:F5:A5:33:63:C1:BE:2D:59:47:00:59:28:C5:28:EE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e2:84:db:bd:0f:9c:d4:df:20:91:0a:d8:f3:36:b1:a9:e1: 32:de:92:8d:ce:3c:b4:10:25:e6:23:97:2e:be:28:00:de:61: 67:63:cf:46:fd:7a:d2:af:90:92:e0:7a:73:f7:6e:08:9a:19: 9a:dd:f5:dc:58:98:4b:40:0c:1d:89:18:35:b2:43:ae:72:fe: e9:84:f0:6a:de:a8:62:66:6c:3f:bf:b9:a2:2c:3c:a1:0d:6a: 3d:b1:ed:33:77:1f:d2:c5:3a:be:9c:68:5d:6a:9e:f0:b7:cf: 73:a4:30:b9:65:05:33:3c:22:0c:f1:92:ee:e1:7f:74:9d:91: aa:a3:e0:54:6b:a2:08:8b:29:45:43:27:b5:61:a0:bc:04:94: 26:a9:29:96:26:b3:7b:d2:28:67:48:a2:77:ca:7b:53:3c:e1: 16:44:36:b3:32:d2:82:25:7c:07:d5:53:d6:9d:b5:7a:42:0d: a7:82:1b:94:22:ab:f1:a9:79:84:59:09:c7:f1:89:e7:3e:a8: 00:a4:42:91:24:66:4f:40:17:05:f8:5e:29:bb:75:e3:ef:19: de:9e:4e:5c:62:a7:19:4f:8f:ed:a6:d2:7c:8b:95:ef:83:51: 42:e8:d2:4b:48:eb:af:67:73:a0:f2:f2:38:31:96:b3:61:ab: 4c:23:ed:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5bA1moAqS2mmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MDI5MjhlYzUtYWQ1OC00OWEzLWIzNzktNDJjMzdlMzVkOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFSLdYAPViJnU6xAKoc7fG6nenoz8b5yfIA+ L+1BBWjPUZu1Apd+5GY6DIvYJrx7oqPQD05lvYM4XwrzXCnQQtZCOxcVJwEr06JW z/TZE1reaaKPLmoLkfJON82iCn7PsGtTpbznGCSCyPSqp864c7/8HuCvNnfAY6eW whzDlAnE1/8O9c+hiWfKKjq9DxGF/bVhKNVv3J8phc2HEmgvu+ovHHN0JQHtwHN7 dy/gGVffNZvU1abCCq8HPJeQ8UEVhdljwmBhStdeIu1uDLIzYXIGX/975C5qCR0d kJWDsxbRf9aUvMJkp7jTeAUEC784oNoo70dMGV3MsjEo6p4YlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZq0Af1pTNjwb4tWUcAWSjFKO7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArihNu9D5zU3yCRCtjzNrGp4TLeko3OPLQQJeYjly6+KADeYWdjz0b9 etKvkJLgenP3bgiaGZrd9dxYmEtADB2JGDWyQ65y/umE8GreqGJmbD+/uaIsPKEN aj2x7TN3H9LFOr6caF1qnvC3z3OkMLllBTM8Igzxku7hf3Sdkaqj4FRrogiLKUVD J7VhoLwElCapKZYms3vSKGdIonfKe1M84RZENrMy0oIlfAfVU9adtXpCDaeCG5Qi q/GpeYRZCcfxiec+qACkQpEkZk9AFwX4Xim7dePvGd6eTlxipxlPj+2m0nyLle+D UULo0ktI669nc6Dy8jgxlrNhq0wj7Uc= -----END CERTIFICATE-----Generated at Sat Sep 19 22:39:15 2026 by rpki-client