$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/41e8571d-9a5b-3487-a23f-83b1770da4bf.roa File: 41e8571d-9a5b-3487-a23f-83b1770da4bf.roa (raw, json) Hash identifier: Ixgnz+TtvZPum5WF8sus6MIHrZ/tRfJ3QSW2Q7HzUck= Subject key identifier: B4:B2:8A:12:76:97:98:4E:F5:A0:4F:C5:AE:DD:FA:90:88:9B:A2:ED Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584F0D91ADF4E8DCB11401E25E00 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/41e8571d-9a5b-3487-a23f-83b1770da4bf.roa Signing time: Thu 03 Sep 2026 14:14:29 +0000 ROA not before: Thu 03 Sep 2026 14:14:29 +0000 ROA not after: Wed 02 Dec 2026 15:14:29 +0000 asID: 36692 IP address blocks: 67.215.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:91:ad:f4:e8:dc:b1:14:01:e2:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Sep 3 14:14:29 2026 GMT Not After : Dec 2 15:14:29 2026 GMT Subject: CN=8e7612fa-4e0c-4e5e-8d0d-b29749c1ccdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:55:52:5d:ba:bf:0b:cb:91:81:da:54:65: 89:7c:59:34:00:85:43:2e:36:3b:50:d2:2a:cc:50: 2a:87:a7:49:35:b0:e8:14:2a:18:b8:ef:3a:66:6c: e9:bc:19:d9:80:a2:ed:c8:c7:d8:4d:16:f6:a6:95: 9a:2a:97:19:9f:3b:3e:07:4d:db:70:62:42:ef:fe: 11:a5:48:f6:1d:cb:3b:82:bc:b3:ee:51:b1:66:c6: 0b:f6:95:93:8a:9b:08:1e:c2:42:18:b7:0d:6f:49: be:a4:82:67:37:b5:0a:70:c2:d6:5f:69:4b:55:7e: d6:e9:c6:16:bf:32:45:83:ae:2f:fc:fe:d0:51:99: 03:61:a8:de:fd:06:00:c1:b4:5e:04:c3:da:b5:a7: a5:be:85:79:d8:55:33:dc:d1:de:d9:aa:b8:07:be: 19:f5:5f:67:33:65:57:1b:85:3f:ac:d9:49:89:7d: c0:dc:6a:8b:ba:42:26:c5:b7:dc:cd:57:04:d0:f9: f7:17:f7:06:af:9e:c4:03:50:b9:79:c5:8f:e2:a9: 82:3c:4c:dc:cb:d2:83:29:4c:11:f4:e7:6e:ba:7e: 6f:22:60:61:30:c9:b2:27:ab:d2:63:05:a6:a2:2b: 48:01:8a:ce:55:cd:75:e3:4c:88:ae:bd:a5:ca:c1: 70:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B2:8A:12:76:97:98:4E:F5:A0:4F:C5:AE:DD:FA:90:88:9B:A2:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/41e8571d-9a5b-3487-a23f-83b1770da4bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 67.215.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ed:0c:b9:31:53:8d:b9:d7:2d:f2:27:f7:f1:7a:9a:7f:09: 43:a5:83:f0:be:b4:78:84:19:41:a8:65:aa:d2:a0:c4:c1:33: 33:57:5d:e1:f3:8a:34:2c:02:9a:1d:d6:f2:73:01:5a:04:3d: 55:2b:d8:e2:11:78:32:a1:1f:90:4a:a5:d6:4c:3f:62:94:7d: a4:df:d4:23:78:c1:79:12:15:5a:83:c1:ae:fc:b5:24:0e:fc: 2b:8f:a4:87:5f:f4:42:51:0c:21:7c:95:a7:7d:8a:6e:ed:3e: 82:e1:82:0d:9a:1e:9c:43:3e:c2:5f:6d:99:b1:cb:df:c7:f9: ea:b7:42:73:87:41:20:8c:6f:9c:78:81:dc:02:bc:42:9a:4a: 0e:16:33:81:93:48:ef:3d:89:2b:da:61:95:7a:5d:5c:a3:04: 2a:f5:d8:c4:b3:fa:3f:23:b9:36:58:fd:e3:98:a6:2a:ec:ea: 8d:57:67:da:42:7d:f5:9c:3e:29:8f:cb:52:a8:80:7b:ac:ec: 6f:d5:26:9e:9e:7e:15:32:a1:67:fb:51:ac:e5:84:db:c7:7d: 06:33:22:f4:6e:67:f6:62:f4:70:16:c2:ff:bc:d6:60:2c:ac: f5:e1:25:b1:f4:19:7d:a4:64:92:f1:95:08:70:e5:8c:fb:67: f2:88:84:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Nka306NyxFAHiXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDkwMzE0MTQyOVoXDTI2MTIwMjE1MTQyOVowLzEtMCsGA1UEAxMk OGU3NjEyZmEtNGUwYy00ZTVlLThkMGQtYjI5NzQ5YzFjY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTxVUl26vwvLkYHaVGWJfFk0AIVDLjY7UNIq zFAqh6dJNbDoFCoYuO86ZmzpvBnZgKLtyMfYTRb2ppWaKpcZnzs+B03bcGJC7/4R pUj2Hcs7gryz7lGxZsYL9pWTipsIHsJCGLcNb0m+pIJnN7UKcMLWX2lLVX7W6cYW vzJFg64v/P7QUZkDYaje/QYAwbReBMPataelvoV52FUz3NHe2aq4B74Z9V9nM2VX G4U/rNlJiX3A3GqLukImxbfczVcE0Pn3F/cGr57EA1C5ecWP4qmCPEzcy9KDKUwR 9Oduun5vImBhMMmyJ6vSYwWmoitIAYrOVc1140yIrr2lysFweQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSyihJ2l5hO9aBPxa7d+pCIm6LtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvNDFlODU3MWQtOWE1Yi0z NDg3LWEyM2YtODNiMTc3MGRhNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErtDLkxU4251y3yJ/fxepp/CUOlg/C+tHiEGUGoZarSoMTBMzNXXeHz ijQsApod1vJzAVoEPVUr2OIReDKhH5BKpdZMP2KUfaTf1CN4wXkSFVqDwa78tSQO /CuPpIdf9EJRDCF8lad9im7tPoLhgg2aHpxDPsJfbZmxy9/H+eq3QnOHQSCMb5x4 gdwCvEKaSg4WM4GTSO89iSvaYZV6XVyjBCr12MSz+j8juTZY/eOYpirs6o1XZ9pC ffWcPimPy1KogHus7G/VJp6efhUyoWf7UazlhNvHfQYzIvRuZ/Zi9HAWwv+81mAs rPXhJbH0GX2kZJLxlQhw5Yz7Z/KIhNk= -----END CERTIFICATE-----Generated at Tue Sep 22 03:27:06 2026 by rpki-client