$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: LBuJdW1pahWATrRhTcWyO8hN0ehqKlv8OOsxB+DaFHI= Subject key identifier: D9:BF:6F:1D:76:A0:CA:B8:CD:31:BF:04:85:66:D9:D7:D8:DB:CF:9A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584FB6710D6AEFE694F45C105300 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:0d:6a:ef:e6:94:f4:5c:10:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=d1d33544-8719-4e3c-98d6-e1bb6aa01cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:42:fb:6d:62:4a:8d:50:7d:3c:25:e2:67: 51:84:63:ae:c1:0a:ed:1f:73:da:dd:a6:60:db:57: 7c:24:69:9c:f8:b4:65:67:2a:fd:1f:d8:54:fc:ee: 71:4f:42:6d:15:2e:d6:fc:06:c7:3c:83:22:a1:2d: e1:97:b8:5e:c8:19:30:ac:d4:32:dd:d7:06:fe:f8: a0:c8:76:b9:ea:b9:09:dd:7b:f7:20:d8:7f:ea:8a: f9:bb:76:3f:0a:37:50:32:0b:b9:b8:d7:40:77:ba: b1:bb:a0:35:60:df:0a:ea:ce:a2:bf:71:ee:0f:2b: e0:08:9c:22:f6:ac:63:d2:a8:31:38:ad:f7:9b:72: 73:be:df:45:19:29:f1:13:fd:b7:ea:76:c9:b9:23: 76:54:4c:83:ce:d8:53:9b:33:32:a8:1f:92:f6:94: c1:1a:ed:e7:c9:f6:a5:b1:e7:41:c0:1c:0a:20:8a: 88:d3:2d:23:4b:35:16:f4:95:b2:fd:bd:0f:a8:4b: 32:64:ef:f2:d3:76:ba:f4:65:6e:56:86:3f:4b:b1: c1:f3:cf:e6:60:46:90:24:ab:3e:9f:02:96:74:c3: 6c:ac:3b:22:1f:51:29:81:b7:ae:3b:83:54:15:bf: cd:af:c8:47:d0:a4:28:13:ee:c9:67:16:17:99:9d: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BF:6F:1D:76:A0:CA:B8:CD:31:BF:04:85:66:D9:D7:D8:DB:CF:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d3:a6:f2:c6:71:dd:a5:cd:36:e1:ec:e2:75:fb:39:d7:72: 2a:70:a6:1d:ac:38:c4:ad:3c:78:c7:aa:f6:00:17:28:04:26: 35:ac:33:73:6e:ca:7c:9a:10:a4:a2:55:8b:9c:80:34:47:a8: b7:4b:3b:8f:8f:19:f3:5d:00:e4:86:58:a2:b9:0f:bd:d1:51: d2:d0:c6:e2:6a:66:53:7d:f1:66:55:83:5c:82:b3:67:52:83: b4:0d:71:f2:ab:9c:90:30:ff:c5:ed:5c:e8:ec:0f:bc:70:3e: 01:4c:63:d0:46:3f:c8:69:3a:bd:a5:de:8a:89:2f:51:18:b3: 1d:0a:09:5b:08:26:88:cd:90:8d:84:ae:c8:f9:c7:f1:88:d6: dd:86:4b:3f:ed:69:13:7d:e3:2f:7d:64:64:a0:29:60:c7:ee: eb:f1:6c:2e:24:a3:d7:e5:04:78:5e:16:81:d4:bd:72:be:23: 22:4d:00:37:1d:b5:85:83:b1:6c:fa:e9:00:87:94:76:4c:cc: 97:a4:55:78:85:83:1f:18:b7:e2:c6:b6:31:13:82:17:87:96: 8a:d5:10:7f:3d:e5:a8:90:04:54:98:8a:ea:ad:d2:3b:02:93: 9d:af:58:ff:60:85:8f:23:7e:66:0b:d1:cf:5c:17:0e:00:60: ea:0e:74:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cQ1q7+aU9FwQUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZDFkMzM1NDQtODcxOS00ZTNjLTk4ZDYtZTFiYjZhYTAxY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/dC+21iSo1QfTwl4mdRhGOuwQrtH3Pa3aZg 21d8JGmc+LRlZyr9H9hU/O5xT0JtFS7W/AbHPIMioS3hl7heyBkwrNQy3dcG/vig yHa56rkJ3Xv3INh/6or5u3Y/CjdQMgu5uNdAd7qxu6A1YN8K6s6iv3HuDyvgCJwi 9qxj0qgxOK33m3Jzvt9FGSnxE/236nbJuSN2VEyDzthTmzMyqB+S9pTBGu3nyfal sedBwBwKIIqI0y0jSzUW9JWy/b0PqEsyZO/y03a69GVuVoY/S7HB88/mYEaQJKs+ nwKWdMNsrDsiH1EpgbeuO4NUFb/Nr8hH0KQoE+7JZxYXmZ20UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm/bx12oMq4zTG/BIVm2dfY28+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHTpvLGcd2lzTbh7OJ1+znXcipwph2sOMStPHjHqvYAFygEJjWsM3Nu ynyaEKSiVYucgDRHqLdLO4+PGfNdAOSGWKK5D73RUdLQxuJqZlN98WZVg1yCs2dS g7QNcfKrnJAw/8XtXOjsD7xwPgFMY9BGP8hpOr2l3oqJL1EYsx0KCVsIJojNkI2E rsj5x/GI1t2GSz/taRN94y99ZGSgKWDH7uvxbC4ko9flBHheFoHUvXK+IyJNADcd tYWDsWz66QCHlHZMzJekVXiFgx8Yt+LGtjETgheHlorVEH895aiQBFSYiuqt0jsC k52vWP9ghY8jfmYL0c9cFw4AYOoOdHU= -----END CERTIFICATE-----Generated at Thu Nov 5 06:06:23 2026 by rpki-client