$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa File: 6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa (raw, json) Hash identifier: X/7ojXbgt5NRs79Ftf/VnxJkEZNOzOqPaBi1ocEZRDQ= Subject key identifier: 91:7C:47:E2:EA:48:62:8E:9D:99:BF:7E:94:CA:E4:4A:69:C2:C9:0E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BA0D2448FB1AEBBB7454DEA00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16815 IP address blocks: 67.217.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:44:8f:b1:ae:bb:b7:45:4d:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=66ac45a8-4cd1-487f-a274-d336311b160b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:4d:fb:6c:04:8c:d7:29:c2:fe:25:f0:9a: 84:37:1b:6f:9a:55:74:c7:30:54:f2:94:68:e4:ac: c3:43:d2:d2:60:35:f2:19:7a:8a:cc:ec:5c:2d:14: f1:46:2c:c9:dd:26:cf:c0:2e:59:8c:b5:ab:4e:ac: 83:d6:64:a5:c6:d5:7e:a9:d6:ac:a9:b3:53:2f:df: dc:1f:80:20:6f:78:82:47:fd:40:2c:39:5d:e0:cc: 26:1e:29:b0:a5:94:2f:13:ae:30:36:08:7a:e2:d1: 46:6d:d3:6f:05:d9:2f:cb:da:c9:f5:9d:43:0e:68: 39:e7:91:dc:a2:40:2e:9f:aa:ae:4e:48:be:c5:4b: 8e:74:55:b9:ca:3d:9a:5d:54:0b:92:74:45:b3:7d: 5c:bc:37:3f:7a:b8:08:42:b8:a9:12:03:d1:8a:da: 08:ea:4f:56:f9:9d:b4:b8:d6:48:6d:2d:d9:6b:a2: 5b:6d:23:2d:89:96:09:0d:9a:40:7c:66:6b:c8:1c: b7:84:a1:4b:ea:73:54:48:52:d7:c0:5c:12:78:1b: c9:88:f8:4e:a1:0e:9d:0f:24:01:2d:83:0f:12:64: f3:c7:78:f6:f0:18:aa:23:2c:92:9e:dc:06:db:13: c0:32:ca:94:b1:1b:cc:23:d5:26:2d:21:06:b5:12: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:47:E2:EA:48:62:8E:9D:99:BF:7E:94:CA:E4:4A:69:C2:C9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:59:ad:c8:56:39:1f:97:40:0c:de:b6:f8:09:ed:7b:27:c8: b8:1e:f5:54:40:62:ce:93:89:21:70:ea:6c:26:e3:cc:8f:64: 89:8e:a1:24:88:81:2d:0f:ac:2b:c9:7a:4a:8d:6a:27:12:ef: de:a8:74:4f:45:9a:c8:84:cc:3d:59:50:38:06:0e:61:ae:3f: 44:92:3c:76:9b:3c:49:db:4e:ad:d1:a2:24:85:fe:79:79:84: 5b:6f:43:24:c7:cd:0b:51:7a:46:24:cd:f7:06:8b:4f:b0:1c: 3f:be:f7:8a:8d:7f:b8:6c:e9:f7:02:b9:6c:35:3f:49:b5:8c: 94:e7:17:00:7b:75:b3:77:31:db:56:19:4a:12:72:51:e5:3d: 06:38:40:43:88:af:75:8a:06:82:03:75:4c:8d:3b:b0:de:cb: e8:54:e2:8e:99:43:b6:e6:9b:dc:ef:71:8e:3c:7a:41:6b:2b: 08:24:b6:53:b4:54:19:a7:ec:6d:76:99:d8:cf:39:71:8c:86: 42:ba:43:7b:a1:b8:4b:2a:f4:4c:1a:8b:72:e3:73:d1:aa:3e: 3c:d6:80:e8:35:34:29:47:d7:82:d6:8d:d1:ae:65:8e:b1:78: b1:3f:7f:84:9c:f5:e1:1d:75:35:20:ae:ad:96:22:56:80:4c: 13:4d:0d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kSPsa67t0VN6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NjZhYzQ1YTgtNGNkMS00ODdmLWEyNzQtZDMzNjMxMWIxNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulpN+2wEjNcpwv4l8JqENxtvmlV0xzBU8pRo 5KzDQ9LSYDXyGXqKzOxcLRTxRizJ3SbPwC5ZjLWrTqyD1mSlxtV+qdasqbNTL9/c H4Agb3iCR/1ALDld4MwmHimwpZQvE64wNgh64tFGbdNvBdkvy9rJ9Z1DDmg555Hc okAun6quTki+xUuOdFW5yj2aXVQLknRFs31cvDc/ergIQripEgPRitoI6k9W+Z20 uNZIbS3Za6JbbSMtiZYJDZpAfGZryBy3hKFL6nNUSFLXwFwSeBvJiPhOoQ6dDyQB LYMPEmTzx3j28BiqIyySntwG2xPAMsqUsRvMI9UmLSEGtRJpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF8R+LqSGKOnZm/fpTK5EppwskOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmEyZGEzNjItYWI4ZS0z MGU3LWFhZmUtN2UzYTU5YjExZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtZrchWOR+XQAzetvgJ7XsnyLge9VRAYs6TiSFw6mwm48yPZImOoSSI gS0PrCvJekqNaicS796odE9FmsiEzD1ZUDgGDmGuP0SSPHabPEnbTq3RoiSF/nl5 hFtvQyTHzQtRekYkzfcGi0+wHD++94qNf7hs6fcCuWw1P0m1jJTnFwB7dbN3MdtW GUoSclHlPQY4QEOIr3WKBoIDdUyNO7Dey+hU4o6ZQ7bmm9zvcY48ekFrKwgktlO0 VBmn7G12mdjPOXGMhkK6Q3uhuEsq9Ewai3Ljc9GqPjzWgOg1NClH14LWjdGuZY6x eLE/f4Sc9eEddTUgrq2WIlaATBNNDYA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:48 2025 by rpki-client