$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa File: cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa (raw, json) Hash identifier: u869cMLXEsN02toWSx5D9avJE8/wmxq6BI483oa82dM= Subject key identifier: 3D:4C:3B:0D:A3:59:4C:2C:D6:A4:99:A1:16:64:56:3E:72:31:58:15 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CB121BA8079B3287D983FD63C Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:ba:80:79:b3:28:7d:98:3f:d6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=ae83f5c3-fa7a-42ef-a2b1-c7e4f84c61e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:74:0e:29:9f:41:ae:e4:22:61:76:c8:37: ab:d8:b5:2c:37:63:20:48:31:4e:b1:b9:1b:35:8d: 45:1c:23:85:cd:d6:67:ab:83:ee:a6:c1:d5:67:8b: 01:b0:1d:ed:f1:9b:9a:3b:63:d7:24:7c:38:ab:60: 95:40:00:32:95:a4:c9:13:3f:e3:f3:e3:f0:d5:a7: 92:d5:53:ba:e8:f4:f9:04:82:8d:9a:c4:21:95:9b: 2d:f0:8f:bd:33:e2:68:aa:88:f0:78:3b:15:77:21: 47:cc:ea:cd:17:b0:77:aa:f1:07:c8:66:60:41:07: d5:1d:6f:12:6a:9b:af:78:35:0e:e8:49:d0:43:d1: 21:f2:e8:28:b0:57:4d:41:df:04:0e:ed:53:47:c4: 73:2a:e5:05:09:12:76:8b:01:a4:65:5f:82:e1:7a: 67:3c:3b:8e:92:d8:49:e7:fa:b5:aa:63:d9:d8:ad: c8:71:02:61:d1:58:f4:68:5c:f3:84:b0:b4:5e:1e: 1f:18:a7:3b:f9:a2:d3:d4:1c:25:24:c9:ab:bb:0d: d3:85:e0:38:70:c2:62:d4:25:a1:66:f0:af:1e:97: a2:7b:72:f7:83:03:a4:fd:c3:28:e1:3a:e7:24:6a: 75:13:98:15:99:ab:73:88:e5:c8:ad:51:3f:26:fc: d4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4C:3B:0D:A3:59:4C:2C:D6:A4:99:A1:16:64:56:3E:72:31:58:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c6:37:4c:97:20:12:b6:3f:c3:d8:7c:58:2b:32:15:67:61: d0:b0:f4:a4:36:a4:69:90:11:0c:b6:10:64:5d:66:de:c6:02: 15:fe:60:c1:87:a6:19:98:74:03:ea:d7:d8:fd:89:5d:d1:1a: 72:5d:47:28:af:ae:71:b5:2d:7e:48:6f:dd:22:4a:7c:9b:20: bb:8a:e8:b1:6e:8c:3f:ed:82:34:fd:97:d4:0c:ad:37:46:a5: e4:cf:0f:39:77:7c:c6:10:f5:82:a7:69:97:ba:d5:dc:9d:a7: 81:48:3c:12:e4:0f:fe:a5:65:1d:d1:95:c8:7b:43:40:76:4f: cc:62:1e:46:2c:12:18:7e:cb:3a:77:15:5e:f6:b4:0b:ad:b4: 0e:d4:44:c3:58:19:48:b2:7d:80:90:52:65:d4:37:4d:52:6a: 70:9b:5f:1e:39:f4:a6:df:40:c2:6b:09:2b:7a:8f:6e:47:c5: 1a:24:46:d0:da:b6:87:fa:85:e8:da:d4:1b:cf:e6:e5:4f:e7: dc:89:40:73:fe:2e:3c:b2:12:6e:41:58:a2:3e:e0:37:48:fa: 3b:57:2a:20:b6:82:bc:3f:1f:67:50:a8:68:27:9d:2c:75:25: 50:9d:ac:2a:88:33:82:95:58:ef:0e:ff:dd:4d:38:76:42:1a: 09:5c:17:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIbqAebMofZg/1jwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWU4M2Y1YzMtZmE3YS00MmVmLWEyYjEtYzdlNGY4NGM2MWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNl0DimfQa7kImF2yDer2LUsN2MgSDFOsbkb NY1FHCOFzdZnq4PupsHVZ4sBsB3t8ZuaO2PXJHw4q2CVQAAylaTJEz/j8+Pw1aeS 1VO66PT5BIKNmsQhlZst8I+9M+JoqojweDsVdyFHzOrNF7B3qvEHyGZgQQfVHW8S apuveDUO6EnQQ9Eh8ugosFdNQd8EDu1TR8RzKuUFCRJ2iwGkZV+C4XpnPDuOkthJ 5/q1qmPZ2K3IcQJh0Vj0aFzzhLC0Xh4fGKc7+aLT1BwlJMmruw3TheA4cMJi1CWh ZvCvHpeie3L3gwOk/cMo4TrnJGp1E5gVmatziOXIrVE/JvzU+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1MOw2jWUws1qSZoRZkVj5yMVgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2Y0YjdkYzUtMjMzOC0z NjA3LTg3ZWUtMGZhN2UxYzQ4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzGN0yXIBK2P8PYfFgrMhVnYdCw9KQ2pGmQEQy2EGRdZt7GAhX+YMGH phmYdAPq19j9iV3RGnJdRyivrnG1LX5Ib90iSnybILuK6LFujD/tgjT9l9QMrTdG peTPDzl3fMYQ9YKnaZe61dydp4FIPBLkD/6lZR3Rlch7Q0B2T8xiHkYsEhh+yzp3 FV72tAuttA7URMNYGUiyfYCQUmXUN01SanCbXx459KbfQMJrCSt6j25HxRokRtDa tof6heja1BvP5uVP59yJQHP+LjyyEm5BWKI+4DdI+jtXKiC2grw/H2dQqGgnnSx1 JVCdrCqIM4KVWO8O/91NOHZCGglcFxA= -----END CERTIFICATE-----Generated at Sat Feb 21 04:54:26 2026 by rpki-client