$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa File: 924d1aed-b12e-3c24-a9a0-b65a8555a333.roa (raw, json) Hash identifier: whc8VHp5JEzgilnpHzWEawvKKCOXaMrmKmH0iO4G11Q= Subject key identifier: 65:C1:CA:52:AE:86:12:6F:BD:FD:74:B9:81:93:31:6E:B7:EC:1C:DB Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F4328584CF9B78511A7CFCC2258BE1740 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 32592 IP address blocks: 67.217.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:85:11:a7:cf:cc:22:58:be:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=56d28865-bb71-4344-bf59-9664330cc44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:ff:9d:7f:f3:ae:18:02:9e:e3:3e:c6:60: d3:83:4a:e1:87:01:59:e0:bd:e2:bb:07:e2:9a:d6: 4a:fe:91:ea:53:e3:69:a3:c2:e2:46:e6:4e:19:e5: 50:a1:29:df:fd:7e:b9:f9:ae:0e:14:fb:d8:d2:4e: 72:5d:2a:74:c4:60:01:c7:fb:e6:cc:47:d5:33:7b: 16:18:27:f2:f1:2b:8d:00:fa:6c:56:b5:49:0e:f2: 9a:ce:e3:b0:d4:30:f0:4b:4d:10:6f:ef:78:0c:dd: e4:35:44:b3:02:b5:82:ab:bf:80:97:f2:58:5c:58: 63:96:28:f5:a1:96:f1:7c:af:66:8d:c2:ea:a7:2a: 12:fc:92:90:e6:6f:40:67:fa:25:01:b8:8c:99:a2: 38:2c:1b:1a:88:51:0f:c1:66:53:13:06:8e:e6:36: 38:3c:f1:33:cb:e3:15:49:4c:90:5e:f5:8c:43:17: e9:4b:7f:26:98:fc:d8:29:97:f3:8c:b8:71:57:c1: 19:45:3f:64:b9:cf:ab:65:32:24:9f:bb:d5:ff:96: 23:c0:6e:41:8d:76:5e:08:f3:c7:67:11:18:ba:d3: 4d:1c:7e:ce:31:08:35:9f:ef:2f:af:86:7b:68:77: 70:31:6f:09:bb:03:3d:1c:cb:c8:54:4e:7d:33:4d: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C1:CA:52:AE:86:12:6F:BD:FD:74:B9:81:93:31:6E:B7:EC:1C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 67.217.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:42:b7:6f:f9:8b:3d:65:2b:d2:9d:ea:57:c1:2f:b3:89:09: 1e:c2:84:f3:f0:84:e8:c7:51:9f:b0:29:c2:37:36:15:38:e0: 94:09:b3:f1:30:e8:69:c1:54:85:1c:8d:4a:19:eb:7a:75:e6: 98:c3:b6:d6:4a:a5:e1:e4:f0:93:18:2a:1e:8c:71:4f:5b:30: 68:7b:8a:fc:db:04:9f:84:e3:d6:20:94:73:c1:bc:ce:5d:df: 8a:80:6a:29:2a:ac:3f:cd:2b:b8:1c:64:6f:40:1d:0e:ca:2b: fa:f4:09:58:1a:07:9d:a1:b2:5e:42:d1:15:7b:33:85:d9:17: a5:06:cb:35:3e:07:d3:9d:a8:26:29:20:a4:1c:80:02:d7:93: 65:81:c3:bf:b8:28:89:32:c2:61:81:e1:ef:f5:df:71:64:fd: 4c:43:c5:1b:fc:4a:7a:4f:d2:a5:c0:65:3c:62:ee:ae:4c:4d: 1b:5a:56:48:d8:9c:61:49:df:7f:bb:22:56:4b:d9:e5:82:a8: 09:7c:8b:56:98:76:3f:5b:24:7b:56:54:20:23:f0:04:9c:d1: fe:82:f4:ba:09:ee:10:7f:41:21:2a:0c:30:47:f0:2d:30:7b: 63:7d:80:41:f8:35:34:e3:66:36:cb:5c:81:c5:9c:a0:a0:a2: 82:ee:2e:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4URp8/MIli+F0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk NTZkMjg4NjUtYmI3MS00MzQ0LWJmNTktOTY2NDMzMGNjNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrT/nX/zrhgCnuM+xmDTg0rhhwFZ4L3iuwfi mtZK/pHqU+Npo8LiRuZOGeVQoSnf/X65+a4OFPvY0k5yXSp0xGABx/vmzEfVM3sW GCfy8SuNAPpsVrVJDvKazuOw1DDwS00Qb+94DN3kNUSzArWCq7+Al/JYXFhjlij1 oZbxfK9mjcLqpyoS/JKQ5m9AZ/olAbiMmaI4LBsaiFEPwWZTEwaO5jY4PPEzy+MV SUyQXvWMQxfpS38mmPzYKZfzjLhxV8EZRT9kuc+rZTIkn7vV/5YjwG5BjXZeCPPH ZxEYutNNHH7OMQg1n+8vr4Z7aHdwMW8JuwM9HMvIVE59M00YrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXBylKuhhJvvf10uYGTMW637BzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvOTI0ZDFhZWQtYjEyZS0z YzI0LWE5YTAtYjY1YTg1NTVhMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1Ct2/5iz1lK9Kd6lfBL7OJCR7ChPPwhOjHUZ+wKcI3NhU44JQJs/Ew 6GnBVIUcjUoZ63p15pjDttZKpeHk8JMYKh6McU9bMGh7ivzbBJ+E49YglHPBvM5d 34qAaikqrD/NK7gcZG9AHQ7KK/r0CVgaB52hsl5C0RV7M4XZF6UGyzU+B9OdqCYp IKQcgALXk2WBw7+4KIkywmGB4e/133Fk/UxDxRv8SnpP0qXAZTxi7q5MTRtaVkjY nGFJ33+7IlZL2eWCqAl8i1aYdj9bJHtWVCAj8ASc0f6C9LoJ7hB/QSEqDDBH8C0w e2N9gEH4NTTjZjbLXIHFnKCgooLuLmY= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:40 2026 by rpki-client