$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa File: 4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa (raw, json) Hash identifier: Dk7IKvREh3zuoMV1bKDV/07T+w72+ojhPblFMFcbizI= Subject key identifier: 0C:0D:9A:B9:63:D0:A6:FE:AD:C2:96:2A:01:28:76:F6:91:33:17:DF Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F49738B213AF0D76F3CA22740 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 67.217.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:8b:21:3a:f0:d7:6f:3c:a2:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5117af1-560c-4960-9425-e93e1271d6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:e9:38:5b:1a:01:b9:cf:c7:eb:09:95:8c: 2d:30:f9:25:93:23:c6:a8:03:dd:39:ec:fd:21:cc: d0:cf:dd:9c:89:13:43:d3:4a:98:ec:42:6d:a4:e4: 1e:8b:71:2a:14:4d:67:c1:41:19:45:9e:38:64:14: c1:ec:f9:53:70:f5:0e:4b:05:3c:5e:b3:8f:88:fc: 05:18:34:aa:4e:ad:7d:4d:6f:23:c7:1d:ef:50:4f: ec:17:2d:7c:d6:62:50:78:a6:ca:2b:98:22:5b:7e: 3c:8e:bf:93:36:2c:da:23:6e:b4:76:19:29:a5:85: 9f:9c:4f:45:82:63:74:42:d1:2f:b5:07:6d:36:f9: e6:7f:c8:4d:49:dd:e8:f0:fc:19:db:12:01:b7:06: 35:52:36:26:5e:32:17:05:fd:0d:b8:34:db:86:c7: 26:a8:73:d2:22:1c:8f:2a:dd:f3:b6:d0:13:49:7b: 71:c3:0e:88:8f:d2:68:ca:43:fc:c0:b6:f2:2c:d8: f7:51:3c:da:b0:d1:71:78:13:12:f4:56:d1:bb:ad: 93:67:63:e5:de:4f:55:0e:82:c8:78:66:11:34:b0: ec:83:51:7c:7d:82:00:b1:f7:d1:52:b5:12:69:ec: 57:43:7d:a3:e3:50:75:0f:d3:48:ed:61:42:56:5b: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0D:9A:B9:63:D0:A6:FE:AD:C2:96:2A:01:28:76:F6:91:33:17:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:dd:3c:9a:d2:4b:0d:d1:c5:67:95:b3:e1:91:2a:72:b6:9f: 29:de:dc:56:83:68:17:69:ca:93:39:7b:c6:0f:f8:97:65:2b: 12:3f:f8:b0:99:ab:19:d0:93:c8:a6:21:cb:fa:c0:e6:8d:44: f9:ad:cf:3b:ce:d9:57:1e:25:b8:6e:95:84:42:e9:5f:cb:71: ee:08:01:e7:61:77:cb:3f:5e:4b:77:79:39:e7:02:17:1c:22: fe:83:19:52:13:15:85:1f:28:f6:b8:eb:5b:4e:fe:09:c7:fc: 23:43:a9:d9:08:e5:97:e3:80:8b:de:10:52:74:6b:80:11:70: 8c:90:3e:cd:99:8d:4b:e3:3d:d2:9f:4b:60:85:c4:e9:fa:42: 9f:af:62:05:ba:ce:24:d2:1a:ff:d7:90:1e:48:74:e6:e9:9d: 8a:bf:cf:86:3e:31:e9:7d:d5:4b:74:0e:fc:20:0d:ff:71:1d: c4:f0:23:53:77:eb:02:00:14:61:77:4a:7c:fd:09:04:3d:0f: 1e:08:b7:6a:6f:d7:69:6f:22:dd:bb:7d:a2:3f:f9:fb:9c:7b: 43:f2:cb:a0:47:6a:6a:91:30:dc:03:03:31:d2:8f:cc:43:79: 41:41:2d:86:e6:07:b3:03:3b:af:8b:be:bb:5d:65:3d:bf:ed: 9d:10:08:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4shOvDXbzyiJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzUxMTdhZjEtNTYwYy00OTYwLTk0MjUtZTkzZTEyNzFkNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO3pOFsaAbnPx+sJlYwtMPklkyPGqAPdOez9 IczQz92ciRND00qY7EJtpOQei3EqFE1nwUEZRZ44ZBTB7PlTcPUOSwU8XrOPiPwF GDSqTq19TW8jxx3vUE/sFy181mJQeKbKK5giW348jr+TNizaI260dhkppYWfnE9F gmN0QtEvtQdtNvnmf8hNSd3o8PwZ2xIBtwY1UjYmXjIXBf0NuDTbhscmqHPSIhyP Kt3zttATSXtxww6Ij9JoykP8wLbyLNj3UTzasNFxeBMS9FbRu62TZ2Pl3k9VDoLI eGYRNLDsg1F8fYIAsffRUrUSaexXQ32j41B1D9NI7WFCVlstfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwNmrlj0Kb+rcKWKgEodvaRMxffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNGU5MzdhZjktY2M1OS0z Mzg5LThiNGQtYzkzYmZkYmFhOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTdPJrSSw3RxWeVs+GRKnK2nyne3FaDaBdpypM5e8YP+JdlKxI/+LCZ qxnQk8imIcv6wOaNRPmtzzvO2VceJbhulYRC6V/Lce4IAedhd8s/Xkt3eTnnAhcc Iv6DGVITFYUfKPa461tO/gnH/CNDqdkI5ZfjgIveEFJ0a4ARcIyQPs2ZjUvjPdKf S2CFxOn6Qp+vYgW6ziTSGv/XkB5IdObpnYq/z4Y+Mel91Ut0DvwgDf9xHcTwI1N3 6wIAFGF3Snz9CQQ9Dx4It2pv12lvIt27faI/+fuce0Pyy6BHamqRMNwDAzHSj8xD eUFBLYbmB7MDO6+LvrtdZT2/7Z0QCOQ= -----END CERTIFICATE-----Generated at Sun Sep 27 03:19:16 2026 by rpki-client