$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: iYZEY3/kCXdirdc4IsBqlLgmrnmz2kK5kX6Hlw5RhX4= Subject key identifier: 8B:3D:90:6E:FC:C4:A4:7F:40:26:43:CB:0B:D0:2A:26:19:D4:2D:36 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CB121C07712CA4F7FCA027D00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c0:77:12:ca:4f:7f:ca:02:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=6a9eea91-81d9-4ced-93cd-c1f00cc81f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:5d:a4:bc:44:94:1d:ac:c7:58:9e:da:3e: dc:a5:2d:3f:e2:73:00:90:08:fe:6a:a8:9d:d8:55: a6:04:41:05:37:85:2e:fa:ed:06:55:ec:32:9b:14: 84:ee:e6:36:d4:b9:f6:37:7b:7b:19:27:08:fd:75: 92:1b:b5:b9:23:b1:03:02:62:35:02:da:e2:fd:39: c3:7b:11:21:56:c2:c1:07:3a:33:3e:88:fb:e7:77: a9:84:1d:5f:cf:61:11:98:7a:bc:07:70:21:de:0f: 80:a2:ca:b9:e5:a1:cf:ec:1c:3d:77:19:4d:ef:99: 2c:da:95:d0:f2:15:27:03:39:12:d2:19:99:44:05: 3e:90:20:40:f3:bf:b1:88:1f:1e:b6:a4:81:6d:08: e0:19:8f:5c:63:c6:cf:e3:61:64:50:19:f0:e7:d0: f2:7b:39:10:f4:ae:07:3e:cb:3f:6a:39:80:52:ae: ae:c8:79:de:d5:9f:58:dc:a1:25:8d:66:18:2f:13: c9:6a:99:e3:60:bd:9a:a7:42:35:3a:4b:77:b9:9e: f1:e4:fc:bd:ad:04:cf:d2:c1:54:86:b1:83:d0:68: 07:e7:d9:ce:e2:21:83:10:d9:b2:ca:10:10:af:58: 0a:07:d8:76:8b:ed:87:2e:c7:05:85:bd:84:7f:00: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3D:90:6E:FC:C4:A4:7F:40:26:43:CB:0B:D0:2A:26:19:D4:2D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:80:71:fa:bc:8d:3a:30:1f:e4:e7:49:5b:aa:40:21:c9:91: 60:15:31:92:66:b5:b7:d8:01:8a:9e:17:58:14:e9:08:ed:bc: ba:42:e9:88:e0:52:14:c1:be:7c:e7:34:a0:4b:19:ae:62:df: 64:53:7c:8d:3e:69:d6:52:76:9f:7e:52:43:22:22:d9:f5:61: b1:92:f2:56:38:d9:24:8e:58:ed:ab:4a:d3:66:fb:5a:d3:e5: 13:47:6b:55:93:74:b2:27:3a:bf:9a:eb:3f:17:d8:ee:dd:75: 2b:8d:53:40:42:77:c3:5e:30:99:d7:46:26:ed:83:f2:b5:da: 4c:ea:04:7a:5e:e3:cd:f3:32:ab:a0:f6:97:ba:4a:9b:eb:36: bd:22:e7:8a:a7:d4:ad:5a:8a:0a:c7:07:e7:8f:f5:b0:de:ac: 46:98:f7:cb:c9:cc:d7:e7:62:a1:5b:d7:0c:46:34:0e:e4:53: d8:9b:97:8d:d0:d8:0d:9b:8d:d9:8f:b4:78:c4:64:8d:a3:66: 9e:19:dd:d6:20:53:06:f3:85:73:bd:58:1c:69:18:19:52:df: 45:21:86:69:b6:27:47:c0:b1:44:90:a1:3d:8c:fa:06:74:8a: 6b:41:a3:c1:6e:49:fe:04:b5:ff:e7:05:bf:26:0a:11:cb:4a: c9:7e:21:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcB3EspPf8oCfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NmE5ZWVhOTEtODFkOS00Y2VkLTkzY2QtYzFmMDBjYzgxZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07ZdpLxElB2sx1ie2j7cpS0/4nMAkAj+aqid 2FWmBEEFN4Uu+u0GVewymxSE7uY21Ln2N3t7GScI/XWSG7W5I7EDAmI1Atri/TnD exEhVsLBBzozPoj753ephB1fz2ERmHq8B3Ah3g+Aosq55aHP7Bw9dxlN75ks2pXQ 8hUnAzkS0hmZRAU+kCBA87+xiB8etqSBbQjgGY9cY8bP42FkUBnw59DyezkQ9K4H Pss/ajmAUq6uyHne1Z9Y3KEljWYYLxPJapnjYL2ap0I1Okt3uZ7x5Py9rQTP0sFU hrGD0GgH59nO4iGDENmyyhAQr1gKB9h2i+2HLscFhb2EfwD+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs9kG78xKR/QCZDywvQKiYZ1C02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Acfq8jTowH+TnSVuqQCHJkWAVMZJmtbfYAYqeF1gU6QjtvLpC6Yjg UhTBvnznNKBLGa5i32RTfI0+adZSdp9+UkMiItn1YbGS8lY42SSOWO2rStNm+1rT 5RNHa1WTdLInOr+a6z8X2O7ddSuNU0BCd8NeMJnXRibtg/K12kzqBHpe483zMqug 9pe6SpvrNr0i54qn1K1aigrHB+eP9bDerEaY98vJzNfnYqFb1wxGNA7kU9ibl43Q 2A2bjdmPtHjEZI2jZp4Z3dYgUwbzhXO9WBxpGBlS30Uhhmm2J0fAsUSQoT2M+gZ0 imtBo8FuSf4Etf/nBb8mChHLSsl+IfU= -----END CERTIFICATE-----Generated at Mon Mar 2 10:21:58 2026 by rpki-client