$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa File: 67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa (raw, json) Hash identifier: AQYYJhkKfjkxTpv6SQ8Ca1pgQ2FOEm3BNQMbCHYJIM0= Subject key identifier: BA:C4:89:6A:41:6B:B9:66:5E:8D:15:84:91:9E:6B:8D:1D:20:6D:47 Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Certificate serial: 010D0C9F4328584CF85240B8B187E02B4018BF80 Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 19381 IP address blocks: 67.212.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:40:b8:b1:87:e0:2b:40:18:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=dcbb395e-ad6d-40c4-b5a6-668037967bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:83:77:e8:d4:7a:1a:f8:93:12:f6:8e:66: 61:16:9e:05:ea:e7:9e:fe:99:f2:ed:e4:92:11:11: 2a:c5:37:42:1a:d6:65:fc:b9:6b:79:bc:c5:a8:eb: 58:a7:ee:c9:83:e4:3c:d6:db:a7:56:e7:78:1e:a2: 55:2c:02:55:3e:8f:f3:cb:a6:35:40:d7:24:d8:96: 66:aa:5a:87:6d:d7:51:bf:7e:99:3c:34:de:5d:f1: e4:32:03:f0:ec:dc:2f:01:8e:ce:b6:f6:fe:ea:cd: b0:09:17:c7:b7:bf:cf:dc:ec:cd:59:9d:1a:c2:21: 3d:df:3f:fb:f0:45:88:a1:b4:9d:2f:a6:f8:2c:0f: 53:64:3d:19:0b:55:cc:ad:60:d6:a5:7b:b1:6c:af: f3:20:90:c8:3c:ae:4f:04:f3:02:08:b5:a0:23:d3: 1b:08:90:5f:7e:10:be:f7:5e:ab:26:07:14:80:d4: 13:55:06:99:6e:60:44:b1:98:05:06:56:19:82:0d: 90:fe:88:2b:39:33:c8:a2:9f:82:8c:a1:fb:20:dc: 35:3d:d8:c9:b9:76:8e:05:2e:a0:9d:df:db:a8:f7: c5:fe:66:96:0e:da:6e:d6:90:ef:c9:9f:67:cb:9d: ce:55:29:72:28:db:0a:76:b1:5f:32:72:a3:b1:54: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C4:89:6A:41:6B:B9:66:5E:8D:15:84:91:9E:6B:8D:1D:20:6D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl X509v3 Authority Key Identifier: keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer sbgp-ipAddrBlock: critical IPv4: 67.212.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:66:ad:5a:07:b4:9a:06:4a:1c:d2:82:92:81:f1:88:cf:ef: ba:42:19:3d:57:fb:53:c3:3d:16:3f:b6:c8:1f:9a:0c:94:f0: ce:41:ba:40:9d:02:ff:18:04:3a:c0:14:9d:98:0f:68:f5:34: 90:3c:d0:cb:46:1e:c7:93:3a:8f:9f:38:71:ee:ef:12:32:a5: 56:b6:d7:a5:68:36:57:4a:49:9b:cc:f3:fb:62:0f:70:fb:38: f7:c2:5f:bb:ec:ff:13:6d:09:8e:e2:0f:5e:fe:92:a9:a0:0a: f1:0a:1e:d8:98:35:c1:83:b4:03:16:8f:55:a2:85:3b:f6:1b: 1e:ad:0e:58:6c:fe:c0:e7:b0:68:68:b1:eb:29:36:e9:0c:04: 10:71:54:b2:c9:a3:ae:71:af:35:f3:a8:07:cc:41:19:0c:67: ee:81:3d:52:d0:81:c5:1e:70:6b:de:1b:62:06:fa:90:5d:36: be:07:ad:18:3e:04:e7:17:c4:96:b4:e6:3c:b6:e1:f0:8a:7c: d9:23:a1:bf:c5:36:dd:2b:14:9a:92:4c:bc:93:a0:97:5f:f1: d4:33:44:6c:7b:0f:c6:8a:4c:cd:e2:fa:3d:30:7f:d0:e3:6d: b5:62:41:82:4c:94:67:04:c7:dd:39:56:fd:1c:17:8e:e8:7a: c7:d0:43:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkC4sYfgK0AYv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl Njc0MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk ZGNiYjM5NWUtYWQ2ZC00MGM0LWI1YTYtNjY4MDM3OTY3YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTyDd+jUehr4kxL2jmZhFp4F6uee/pny7eSS EREqxTdCGtZl/LlrebzFqOtYp+7Jg+Q81tunVud4HqJVLAJVPo/zy6Y1QNck2JZm qlqHbddRv36ZPDTeXfHkMgPw7NwvAY7Otvb+6s2wCRfHt7/P3OzNWZ0awiE93z/7 8EWIobSdL6b4LA9TZD0ZC1XMrWDWpXuxbK/zIJDIPK5PBPMCCLWgI9MbCJBffhC+ 916rJgcUgNQTVQaZbmBEsZgFBlYZgg2Q/ogrOTPIop+CjKH7INw1PdjJuXaOBS6g nd/bqPfF/maWDtpu1pDvyZ9ny53OVSlyKNsKdrFfMnKjsVTMAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrEiWpBa7lmXo0VhJGea40dIG1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvNjdlZTFhZmQtMTQzNC0z YTBmLThhYzYtNTUyNGY2ODk1Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2 ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1 NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9TAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRmrVoHtJoGShzSgpKB8YjP77pCGT1X+1PDPRY/tsgfmgyU8M5BukCd Av8YBDrAFJ2YD2j1NJA80MtGHseTOo+fOHHu7xIypVa216VoNldKSZvM8/tiD3D7 OPfCX7vs/xNtCY7iD17+kqmgCvEKHtiYNcGDtAMWj1WihTv2Gx6tDlhs/sDnsGho sespNukMBBBxVLLJo65xrzXzqAfMQRkMZ+6BPVLQgcUecGveG2IG+pBdNr4HrRg+ BOcXxJa05jy24fCKfNkjob/FNt0rFJqSTLyToJdf8dQzRGx7D8aKTM3i+j0wf9Dj bbViQYJMlGcEx905Vv0cF47oesfQQ4o= -----END CERTIFICATE-----Generated at Mon Mar 2 21:26:04 2026 by rpki-client