$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa File: 4418db0a-1628-3c5d-b614-7de117f0a9fd.roa (raw, json) Hash identifier: edyc5ChDkdDMBbhYXziseXgN3ZScwvc6KPIS62/+FD8= Subject key identifier: 7D:B1:0D:30:A5:40:5C:1F:FC:82:F1:A1:6D:12:E7:2E:40:8B:B4:60 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BB2F7A982199697E99657DF00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 21866 IP address blocks: 67.217.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a9:82:19:96:97:e9:96:57:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=928e43c4-787b-4b7c-878d-fa51b84a111c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:25:95:4e:03:51:8d:f3:9f:96:6a:0d:c0: c9:dd:71:ed:a4:17:52:f0:91:e2:48:6c:98:d1:e1: e4:da:f3:34:b7:ee:da:44:2f:1e:7c:a5:08:b4:f2: 05:72:9c:da:f7:e3:87:e4:7c:98:3c:81:2c:94:bf: 8c:3d:22:50:23:ab:12:d1:d1:54:ba:22:d0:10:58: 0c:37:90:1b:19:f8:9e:6f:68:cd:9d:86:80:da:f2: cb:4c:a9:03:26:40:0f:fe:dc:53:03:bf:6a:b9:c6: 81:ed:57:09:d3:8f:13:61:9c:9a:3e:82:7f:7e:ec: 67:13:08:38:e0:42:84:94:28:25:0d:91:0a:3d:b6: dd:af:ba:01:56:46:f1:8b:a2:31:ab:29:ac:83:d9: 2f:da:17:77:4e:a5:66:4d:5e:1f:d4:0e:ae:09:19: d1:0d:73:ca:c3:da:7c:3d:40:6c:3c:3a:d6:ee:e3: cb:00:40:59:1c:b9:8e:d2:ec:23:ae:09:1c:29:bc: 54:e4:ee:69:d1:39:f9:f1:5b:a9:dd:8b:7e:6f:48: 84:a4:0d:f3:74:3b:be:02:a2:7c:04:7d:06:c2:9e: 81:18:1b:c9:83:1a:06:b3:56:df:f7:74:1a:56:d2: 09:79:6a:26:76:5d:96:64:e7:54:44:d9:fb:b6:5a: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B1:0D:30:A5:40:5C:1F:FC:82:F1:A1:6D:12:E7:2E:40:8B:B4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e9:0f:da:3b:58:4f:d6:f4:c8:8c:2b:5e:cf:07:ba:f1:7e:0a: f7:be:54:63:d7:70:fe:a6:2f:de:d2:93:fa:6d:a2:0b:75:29: 8c:c5:e0:1d:74:26:a4:01:a2:67:a0:e9:87:a8:26:33:a2:64: 29:38:df:d7:90:1f:ce:4d:fb:74:05:97:75:91:b3:93:28:0d: f1:b7:b1:1a:ad:bd:27:31:66:25:2b:c2:32:42:b8:54:b7:30: ed:3a:4c:cb:42:e3:e4:b0:a9:a8:59:56:2f:03:b6:c9:de:d4: 4b:2b:21:ab:5c:ab:a9:b0:26:4c:f7:f0:82:32:4d:87:9e:cc: 9d:83:50:20:e6:72:ed:ee:69:db:74:e0:39:df:91:9b:27:c6: ea:28:ff:56:7a:a5:87:05:db:c6:88:84:73:39:93:80:3a:e4: 67:a8:22:1d:74:77:f3:08:fa:00:63:c1:d9:e0:ea:fe:02:82: 56:0c:12:62:b9:b4:e5:69:5f:59:f7:34:a5:12:85:66:d8:4d: 07:8c:7b:a1:19:3a:34:97:65:2d:71:31:ee:77:3c:83:de:e4: e4:9e:40:c2:e2:66:73:e4:dc:fc:de:87:19:0e:d5:cc:b0:4f: 1f:5d:3a:dd:9e:38:f0:18:f9:97:ec:d7:fc:e2:bd:56:4e:a0: fd:e1:66:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96mCGZaX6ZZX3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OTI4ZTQzYzQtNzg3Yi00YjdjLTg3OGQtZmE1MWI4NGExMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXollU4DUY3zn5ZqDcDJ3XHtpBdS8JHiSGyY 0eHk2vM0t+7aRC8efKUItPIFcpza9+OH5HyYPIEslL+MPSJQI6sS0dFUuiLQEFgM N5AbGfieb2jNnYaA2vLLTKkDJkAP/txTA79qucaB7VcJ048TYZyaPoJ/fuxnEwg4 4EKElCglDZEKPbbdr7oBVkbxi6Ixqymsg9kv2hd3TqVmTV4f1A6uCRnRDXPKw9p8 PUBsPDrW7uPLAEBZHLmO0uwjrgkcKbxU5O5p0Tn58Vup3Yt+b0iEpA3zdDu+AqJ8 BH0Gwp6BGBvJgxoGs1bf93QaVtIJeWomdl2WZOdURNn7tlosHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2xDTClQFwf/ILxoW0S5y5Ai7RgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDQxOGRiMGEtMTYyOC0z YzVkLWI2MTQtN2RlMTE3ZjBhOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9laMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOkP2jtYT9b0yIwrXs8HuvF+Cve+VGPXcP6mL97Sk/ptogt1KYzF4B10 JqQBomeg6YeoJjOiZCk439eQH85N+3QFl3WRs5MoDfG3sRqtvScxZiUrwjJCuFS3 MO06TMtC4+SwqahZVi8Dtsne1EsrIatcq6mwJkz38IIyTYeezJ2DUCDmcu3uadt0 4DnfkZsnxuoo/1Z6pYcF28aIhHM5k4A65GeoIh10d/MI+gBjwdng6v4CglYMEmK5 tOVpX1n3NKUShWbYTQeMe6EZOjSXZS1xMe53PIPe5OSeQMLiZnPk3PzehxkO1cyw Tx9dOt2eOPAY+Zfs1/zivVZOoP3hZt4= -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:25 2025 by rpki-client