$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa File: 89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa (raw, json) Hash identifier: CArXGqtl1OU6VxC0yCk5hqKtVr4UUDUbi087dLZovP4= Subject key identifier: 35:79:AD:A0:DC:65:92:C5:60:90:39:41:21:B8:C0:39:B1:97:20:0D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584DA81580E81DAD15B5A7BA5000 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 67.217.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:80:e8:1d:ad:15:b5:a7:ba:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=7223c6df-d34b-4138-b09f-7b4c91309217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:d7:94:9b:8d:2a:55:84:a3:9c:aa:ba:de: 02:7f:b3:e2:68:2a:7f:fe:fe:07:c1:4d:cc:b2:6b: 90:10:c4:c3:ad:49:09:c4:95:0b:45:64:84:16:17: f5:16:17:87:4e:37:7b:67:eb:48:d1:1f:63:60:1c: e5:fa:9d:0c:5e:ae:26:0e:42:a9:30:0b:1d:83:ed: c2:a4:66:0d:7f:53:f7:5d:c5:42:da:d9:d8:b8:99: a9:f7:04:b1:0e:d5:57:c2:c7:cd:5e:9c:41:05:1a: 69:3e:39:cf:67:ee:95:5f:79:ff:a9:c1:6d:76:6d: 58:01:4d:f6:9a:94:d3:68:f3:1a:0b:c6:ba:35:3a: f8:5d:1c:38:f0:46:2d:92:08:51:5b:b6:d1:37:b8: 6d:26:93:a7:06:62:6e:6a:19:8d:f8:0c:95:a9:1d: aa:f1:8c:0e:63:09:8c:94:4e:f1:9e:41:c1:c3:95: 29:d3:f5:ce:e9:67:16:55:47:7b:c0:c2:7c:56:e7: 8e:22:46:9a:65:92:c0:ac:60:25:1e:13:06:ad:52: 7e:d7:3b:b6:c9:fb:0c:6e:87:50:09:25:74:e5:91: 93:8b:76:0a:a3:b7:5b:47:24:f2:ec:31:b0:dc:89: f3:06:0f:e6:06:52:fb:92:0b:d9:96:e0:27:76:7f: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:AD:A0:DC:65:92:C5:60:90:39:41:21:B8:C0:39:B1:97:20:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/89b13f27-55b3-3c06-9ece-ca1aa69ca33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c0:77:c2:ef:59:5f:96:a4:41:96:c7:ac:23:2f:e4:a1:ff: 9b:25:39:0c:36:35:1e:34:09:e3:ed:ae:52:db:8e:e4:90:bc: 08:aa:b8:bf:26:c1:41:bb:8b:b4:98:65:f1:c8:d7:ac:28:f4: 8f:b5:c3:f1:dd:ec:ed:43:19:32:49:16:0d:01:de:db:13:7f: 8a:e4:5d:92:3e:b0:57:c6:cd:4e:c4:92:70:67:70:6b:be:c0: 41:bf:45:2e:0e:ac:84:6e:ca:5e:8b:07:af:b0:52:4f:0f:bb: a4:3d:dc:f9:59:f3:2e:f5:24:25:d8:a2:ee:98:49:17:8b:71: 2e:88:b3:f5:c7:19:fe:c9:eb:71:9d:ff:5a:f0:c6:1d:69:17: bb:3d:e2:ff:32:8f:be:05:5a:36:ea:1a:b4:35:9d:42:3d:0a: d7:4d:f5:f3:de:63:b4:48:eb:f9:67:dd:60:cc:64:1b:49:c6: c9:7a:2c:68:38:0a:6f:69:e8:16:8f:9d:70:8e:9c:f3:cd:42: fe:4b:4c:25:e4:b7:98:1a:0c:a2:11:d7:a8:8f:21:2f:3c:85: 03:19:7f:7c:16:69:a4:af:ee:db:11:91:23:c6:24:83:e8:94: a9:66:a0:33:dd:9e:e8:5d:4d:88:3b:1b:89:6e:54:68:27:1a: d2:ff:60:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYDoHa0Vtae6UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NzIyM2M2ZGYtZDM0Yi00MTM4LWIwOWYtN2I0YzkxMzA5MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC/XlJuNKlWEo5yqut4Cf7PiaCp//v4HwU3M smuQEMTDrUkJxJULRWSEFhf1FheHTjd7Z+tI0R9jYBzl+p0MXq4mDkKpMAsdg+3C pGYNf1P3XcVC2tnYuJmp9wSxDtVXwsfNXpxBBRppPjnPZ+6VX3n/qcFtdm1YAU32 mpTTaPMaC8a6NTr4XRw48EYtkghRW7bRN7htJpOnBmJuahmN+AyVqR2q8YwOYwmM lE7xnkHBw5Up0/XO6WcWVUd7wMJ8VueOIkaaZZLArGAlHhMGrVJ+1zu2yfsMbodQ CSV05ZGTi3YKo7dbRyTy7DGw3InzBg/mBlL7kgvZluAndn+3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV5raDcZZLFYJA5QSG4wDmxlyANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODliMTNmMjctNTViMy0z YzA2LTllY2UtY2ExYWE2OWNhMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTAd8LvWV+WpEGWx6wjL+Sh/5slOQw2NR40CePtrlLbjuSQvAiquL8m wUG7i7SYZfHI16wo9I+1w/Hd7O1DGTJJFg0B3tsTf4rkXZI+sFfGzU7EknBncGu+ wEG/RS4OrIRuyl6LB6+wUk8Pu6Q93PlZ8y71JCXYou6YSReLcS6Is/XHGf7J63Gd /1rwxh1pF7s94v8yj74FWjbqGrQ1nUI9CtdN9fPeY7RI6/ln3WDMZBtJxsl6LGg4 Cm9p6BaPnXCOnPPNQv5LTCXkt5gaDKIR16iPIS88hQMZf3wWaaSv7tsRkSPGJIPo lKlmoDPdnuhdTYg7G4luVGgnGtL/YKA= -----END CERTIFICATE-----Generated at Sun May 3 16:16:11 2026 by rpki-client