$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa File: 28986011-044d-3ddc-91d9-ea7ed00e5470.roa (raw, json) Hash identifier: tVQWQktXZUeiDXRFBS/YHinwBH3P54cxxQMXG7x2wxY= Subject key identifier: 2A:04:32:ED:20:70:B5:D5:05:D4:10:04:F3:0B:08:98:81:A6:29:3C Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584F2ABD23096622554504A03180 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 36692 IP address blocks: 67.215.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:23:09:66:22:55:45:04:a0:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=17f497a7-b313-465b-85f0-ac04199ec48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:c6:b4:e6:4e:b7:7b:d7:6a:0f:1c:94:93: 5c:b1:a6:17:a9:e2:2d:e8:32:29:70:31:16:b9:f0: 2b:ef:a6:78:6a:80:f8:a0:65:66:0e:3f:d8:b6:1e: 3b:57:3f:fd:9a:38:2b:c8:d4:25:5e:73:85:89:32: 8c:10:db:49:83:ec:89:12:6f:1a:95:1b:f5:72:52: 92:58:b4:44:47:fa:93:32:88:37:e1:97:1d:c0:2c: e3:a2:1c:3d:fa:64:b5:81:25:92:b6:58:c3:46:2b: c4:c2:fb:38:4f:f7:38:e1:bb:02:44:4f:39:e0:8e: 5b:7d:5d:7f:ed:33:71:a1:ae:95:6f:9e:e6:9f:c8: 95:77:6c:88:2d:1e:fb:b1:e4:4f:ce:e6:d1:09:b2: 34:48:3c:ad:5d:f5:b8:10:63:8c:ff:f3:2a:2a:2e: 75:66:c2:d5:c1:e0:79:f3:ac:52:85:88:8d:e2:69: 73:e5:13:2b:ca:6a:58:a2:e9:f0:14:f7:9c:aa:e7: ec:75:d0:3c:c8:03:9d:e5:5a:9c:5d:a1:09:79:7f: 06:54:a0:72:f4:30:ed:c6:f7:c4:1a:9a:61:e7:f8: 1d:33:13:43:bf:26:dc:4b:ab:73:a6:ff:83:2f:09: e8:e9:67:d3:2e:2d:ff:b0:dc:de:bc:1f:20:34:c7: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:04:32:ED:20:70:B5:D5:05:D4:10:04:F3:0B:08:98:81:A6:29:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 67.215.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7d:51:2c:40:03:e8:6f:1f:e9:72:93:c4:a2:60:6e:3b:7a: 0a:77:97:14:d2:de:d9:47:0e:17:3e:c7:1e:ce:80:da:40:8b: 12:ab:97:fa:a7:bb:43:a1:07:64:5d:b9:36:35:ba:a1:6b:94: 04:c4:12:46:5d:97:8d:5b:3d:dd:f5:f4:ea:8b:5d:91:0e:a5: 6c:71:e2:f3:11:74:84:da:f2:14:0a:30:af:6f:58:f1:4c:2a: ab:83:18:d3:ee:58:69:f8:e0:bc:98:a4:d7:93:c0:c2:09:e3: 65:f0:5c:fa:d7:12:da:5b:4d:bd:41:2c:93:d4:ef:15:e1:fd: d4:a0:1d:fc:80:91:fb:d3:32:d1:13:db:3e:2f:c2:a7:42:ae: 4a:b7:56:b9:d8:80:61:3f:c1:d1:86:64:e8:6f:0a:ca:53:e9: f2:24:25:ce:dc:f6:72:fe:54:c4:41:59:31:28:68:60:65:56: 6c:b1:0c:55:c8:75:81:f7:c0:86:f3:53:eb:2c:d4:e9:a3:be: 44:32:3a:d5:e2:89:db:eb:d4:0e:5a:5d:89:b4:ae:6f:c4:0c: 22:ec:17:4f:12:75:bc:cb:8b:8b:78:77:9e:73:3b:60:06:32: ee:fb:9a:e8:ee:38:c5:bf:e5:cd:0b:49:9c:fa:f4:26:5b:f2: 81:12:ab:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSMJZiJVRQSgMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MTdmNDk3YTctYjMxMy00NjViLTg1ZjAtYWMwNDE5OWVjNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnErGtOZOt3vXag8clJNcsaYXqeIt6DIpcDEW ufAr76Z4aoD4oGVmDj/Yth47Vz/9mjgryNQlXnOFiTKMENtJg+yJEm8alRv1clKS WLRER/qTMog34ZcdwCzjohw9+mS1gSWStljDRivEwvs4T/c44bsCRE854I5bfV1/ 7TNxoa6Vb57mn8iVd2yILR77seRPzubRCbI0SDytXfW4EGOM//MqKi51ZsLVweB5 86xShYiN4mlz5RMrympYounwFPecqufsddA8yAOd5VqcXaEJeX8GVKBy9DDtxvfE Gpph5/gdMxNDvybcS6tzpv+DLwno6WfTLi3/sNzevB8gNMfHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoEMu0gcLXVBdQQBPMLCJiBpik8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMjg5ODYwMTEtMDQ0ZC0z ZGRjLTkxZDktZWE3ZWQwMGU1NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR9USxAA+hvH+lyk8SiYG47egp3lxTS3tlHDhc+xx7OgNpAixKrl/qn u0OhB2RduTY1uqFrlATEEkZdl41bPd319OqLXZEOpWxx4vMRdITa8hQKMK9vWPFM KquDGNPuWGn44LyYpNeTwMIJ42XwXPrXEtpbTb1BLJPU7xXh/dSgHfyAkfvTMtET 2z4vwqdCrkq3VrnYgGE/wdGGZOhvCspT6fIkJc7c9nL+VMRBWTEoaGBlVmyxDFXI dYH3wIbzU+ss1OmjvkQyOtXiidvr1A5aXYm0rm/EDCLsF08SdbzLi4t4d55zO2AG Mu77mujuOMW/5c0LSZz69CZb8oESq5s= -----END CERTIFICATE-----Generated at Tue Sep 22 16:38:12 2026 by rpki-client