$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa File: cb1dba05-4578-34bd-8538-27f1ec0c698f.roa (raw, json) Hash identifier: 7SgrcYdkE+DzvGiKS7rh6exfv6NYxC9VcBY65svLYCs= Subject key identifier: 96:49:44:07:5D:77:A9:74:CF:A2:6F:EA:38:3F:FE:1A:2B:7D:CC:A7 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D1F4A45C64B1ECE19AC9F06A0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 67.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:45:c6:4b:1e:ce:19:ac:9f:06:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=d77f9969-f2fb-4d82-b2f5-b5569748f59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:5a:f8:ff:4a:f4:db:af:de:77:14:98:2d: a0:49:01:e8:24:77:de:bd:5e:23:6d:c2:a1:c6:93: 33:b2:99:96:56:ae:9e:56:7a:43:5c:84:40:38:80: 0f:a8:42:63:20:8d:21:b5:12:54:56:0a:c9:82:b3: ad:e8:df:37:84:96:8b:9a:10:b0:b6:eb:2f:18:7e: 7d:60:96:33:d0:6a:c5:9d:37:0d:ae:e4:aa:c1:11: 96:0c:db:ea:f2:d3:13:11:4d:bb:6e:0d:89:d8:ad: 20:b6:7d:d7:74:06:3b:06:cd:24:01:de:35:02:9a: a9:e0:29:64:bf:97:64:14:fc:07:e4:39:77:ab:23: cb:0d:6e:9d:49:98:6b:3d:db:0e:27:a0:b5:25:65: cd:53:3b:ff:5d:56:b9:d9:5f:12:95:93:46:07:9c: 3e:fe:5c:74:8f:3a:55:e5:80:5c:62:b0:39:d0:6f: 7b:bf:04:dc:1b:96:79:6c:4c:68:59:ad:51:ad:63: 51:cb:36:21:cd:88:92:b7:5f:8f:bf:4b:dc:be:6c: a8:5e:18:cb:d7:24:aa:f9:03:c7:6d:db:a6:7b:f0: 6a:3a:37:70:42:f9:74:fe:ea:87:52:f5:22:71:13: 57:6a:2b:12:c9:62:cb:3a:21:12:1c:ac:22:5e:c3: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:49:44:07:5D:77:A9:74:CF:A2:6F:EA:38:3F:FE:1A:2B:7D:CC:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:af:23:e6:9c:60:c9:ee:05:70:66:31:c5:d5:5c:de:61:37: 59:4d:f4:c8:21:4e:ed:82:a9:9c:58:f4:f8:ae:dd:af:f8:9b: a0:e2:26:e1:83:2d:eb:4e:f3:6a:ca:8d:17:a1:95:e0:35:bc: 43:c6:b6:a2:4e:76:a4:08:99:d9:1b:55:f3:7c:39:14:5c:04: 81:d1:45:16:2f:6a:66:5c:93:db:5e:a9:cc:58:48:80:c6:1e: 75:da:f3:af:d5:65:df:73:6a:4b:ae:f2:1d:7c:f1:c7:19:b3: 3a:05:7e:a9:ec:6d:99:38:cc:00:e9:92:b9:8a:cc:ee:97:d3: 6d:c4:45:fe:b8:f7:1e:8a:5b:75:fa:1f:59:80:c0:e9:17:ab: 7f:44:71:7c:07:b5:e4:fb:d8:36:a9:64:b2:6e:a9:27:db:78: 8d:9a:d7:45:ae:60:cb:32:50:80:01:7f:42:1e:bd:a6:38:0d: 30:23:8b:1c:b8:64:69:81:21:1a:9c:a9:31:d3:5e:76:ef:6f: 7f:09:7f:74:19:10:39:32:47:aa:80:a7:a7:fb:b9:ae:4a:ca: 8d:38:28:de:71:a4:a0:32:a6:3e:4b:53:ec:a1:a0:4e:83:24: f1:2b:82:e6:84:3e:8f:33:3a:3f:db:69:cf:a2:b8:2e:87:b3: 5f:31:26:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkXGSx7OGayfBqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZDc3Zjk5NjktZjJmYi00ZDgyLWIyZjUtYjU1Njk3NDhmNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TVa+P9K9Nuv3ncUmC2gSQHoJHfevV4jbcKh xpMzspmWVq6eVnpDXIRAOIAPqEJjII0htRJUVgrJgrOt6N83hJaLmhCwtusvGH59 YJYz0GrFnTcNruSqwRGWDNvq8tMTEU27bg2J2K0gtn3XdAY7Bs0kAd41Apqp4Clk v5dkFPwH5Dl3qyPLDW6dSZhrPdsOJ6C1JWXNUzv/XVa52V8SlZNGB5w+/lx0jzpV 5YBcYrA50G97vwTcG5Z5bExoWa1RrWNRyzYhzYiSt1+Pv0vcvmyoXhjL1ySq+QPH bdume/BqOjdwQvl0/uqHUvUicRNXaisSyWLLOiESHKwiXsMpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZJRAddd6l0z6Jv6jg//horfcynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2IxZGJhMDUtNDU3OC0z NGJkLTg1MzgtMjdmMWVjMGM2OThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKvI+acYMnuBXBmMcXVXN5hN1lN9MghTu2CqZxY9Piu3a/4m6DiJuGD LetO82rKjRehleA1vEPGtqJOdqQImdkbVfN8ORRcBIHRRRYvamZck9teqcxYSIDG HnXa86/VZd9zakuu8h188ccZszoFfqnsbZk4zADpkrmKzO6X023ERf649x6KW3X6 H1mAwOkXq39EcXwHteT72DapZLJuqSfbeI2a10WuYMsyUIABf0IevaY4DTAjixy4 ZGmBIRqcqTHTXnbvb38Jf3QZEDkyR6qAp6f7ua5Kyo04KN5xpKAypj5LU+yhoE6D JPErguaEPo8zOj/bac+iuC6Hs18xJhg= -----END CERTIFICATE-----Generated at Tue Mar 10 22:26:21 2026 by rpki-client