$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa File: cbf96851-ba9e-38bf-a963-da65f7f37210.roa (raw, json) Hash identifier: enPiMNrduUUd8bNL89p/3E40KcGCuq1K8j2gRY+ABFw= Subject key identifier: C0:33:72:1A:ED:D3:C2:72:FC:39:20:1C:D7:0D:89:85:22:4A:5F:AB Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F2D87C7A0FD513B842FE34240 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 67.217.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c7:a0:fd:51:3b:84:2f:e3:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=88cab672-e280-4e5c-a09f-ce08a7b48bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:78:91:1f:b2:76:65:e5:a5:d0:96:15:56: b8:fe:09:15:35:78:5f:40:91:e1:a1:7c:10:eb:55: a8:b1:37:15:a4:ce:f8:2d:07:a7:97:a7:ca:90:7d: 39:54:2f:54:7a:49:71:79:f2:b7:87:d9:55:86:62: a2:42:73:ee:b8:7e:ef:45:79:07:04:ff:9a:05:3b: 70:bd:11:9e:37:0d:7e:de:c6:b3:3b:83:84:df:41: 43:62:f7:73:5c:07:87:08:b8:2a:bf:db:68:29:43: 93:07:e9:41:2d:39:45:a1:33:66:39:57:26:2c:1a: 3d:ee:7b:e2:15:42:ce:d4:76:c2:0c:37:bd:fb:eb: c7:a6:f6:1f:10:9a:5d:e8:d1:ef:41:7c:72:c6:6e: 56:4e:18:fd:a1:e8:3a:23:fe:ec:d2:1e:fe:72:43: 63:3f:6f:57:35:44:b3:ba:c3:c0:cc:2f:78:b5:df: 66:2f:b6:23:79:56:e2:66:44:48:0d:bd:c4:c5:a3: 20:d0:13:37:38:93:5e:47:73:fd:a4:76:1d:62:87: a5:b3:02:5f:5d:77:51:b2:0e:bb:c1:fc:33:f3:df: 3b:65:bd:5e:53:d8:35:5d:98:76:b6:26:88:b3:52: 82:eb:4f:8d:1c:81:a1:84:90:06:47:84:4e:6a:e5: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:72:1A:ED:D3:C2:72:FC:39:20:1C:D7:0D:89:85:22:4A:5F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e3:9f:c8:4a:7c:c6:0b:28:09:e9:2c:51:d6:cf:ab:82:eb: 41:2e:bf:bd:7c:bf:12:54:33:54:15:dc:29:56:e0:3a:12:8a: 9d:95:c2:a0:6b:89:74:b5:3e:71:e1:32:18:85:4d:7e:5c:8b: 9a:00:f2:f4:2f:67:b6:fe:9f:43:2c:29:ad:ca:33:92:5d:03: 91:99:44:36:7f:ea:17:96:ab:76:14:1f:35:c0:6b:52:ed:48: ba:0b:07:47:d4:4e:0d:d7:c2:ad:12:3a:e3:46:95:36:e8:b6: 19:3a:fc:7a:5c:aa:ab:f2:1c:6f:88:97:34:5c:81:97:61:e1: 7b:89:1e:44:4f:db:d1:80:98:46:44:ad:a3:3b:39:33:30:3d: fa:78:5e:e1:90:db:13:05:64:d4:a1:7f:9a:b2:d5:ca:68:12: ac:d9:96:f3:00:5f:f2:f1:31:b3:70:68:74:34:3d:bd:45:c8: 8f:ab:11:d5:f5:a5:f8:8d:93:25:e5:83:ca:8c:52:9a:c2:e9: b6:cc:8c:9e:c4:94:b4:e5:cb:be:d7:25:02:68:7e:74:13:ce: d9:84:82:84:7b:c0:35:b2:02:84:09:e0:a2:b7:4e:98:c3:34: 44:a1:6b:b2:64:8f:1d:f7:69:74:8e:2c:7e:eb:4e:c8:d5:83: 8e:98:51:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th8eg/VE7hC/jQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk ODhjYWI2NzItZTI4MC00ZTVjLWEwOWYtY2UwOGE3YjQ4YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tB4kR+ydmXlpdCWFVa4/gkVNXhfQJHhoXwQ 61WosTcVpM74LQenl6fKkH05VC9UeklxefK3h9lVhmKiQnPuuH7vRXkHBP+aBTtw vRGeNw1+3sazO4OE30FDYvdzXAeHCLgqv9toKUOTB+lBLTlFoTNmOVcmLBo97nvi FULO1HbCDDe9++vHpvYfEJpd6NHvQXxyxm5WThj9oeg6I/7s0h7+ckNjP29XNUSz usPAzC94td9mL7YjeVbiZkRIDb3ExaMg0BM3OJNeR3P9pHYdYoelswJfXXdRsg67 wfwz8987Zb1eU9g1XZh2tiaIs1KC60+NHIGhhJAGR4ROauVGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAzchrt08Jy/DkgHNcNiYUiSl+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2JmOTY4NTEtYmE5ZS0z OGJmLWE5NjMtZGE2NWY3ZjM3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrjn8hKfMYLKAnpLFHWz6uC60Euv718vxJUM1QV3ClW4DoSip2VwqBr iXS1PnHhMhiFTX5ci5oA8vQvZ7b+n0MsKa3KM5JdA5GZRDZ/6heWq3YUHzXAa1Lt SLoLB0fUTg3Xwq0SOuNGlTbothk6/HpcqqvyHG+IlzRcgZdh4XuJHkRP29GAmEZE raM7OTMwPfp4XuGQ2xMFZNShf5qy1cpoEqzZlvMAX/LxMbNwaHQ0Pb1FyI+rEdX1 pfiNkyXlg8qMUprC6bbMjJ7ElLTly77XJQJofnQTztmEgoR7wDWyAoQJ4KK3TpjD NESha7Jkjx33aXSOLH7rTsjVg46YUWI= -----END CERTIFICATE-----Generated at Sat Sep 19 22:39:26 2026 by rpki-client