$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa File: cbf96851-ba9e-38bf-a963-da65f7f37210.roa (raw, json) Hash identifier: bWTO3WDccLT7ijlW0GNcwo33tA9XN4C0z6lJ1/3skEQ= Subject key identifier: 8B:E6:DD:9C:AD:A8:8B:DD:67:7E:2F:A0:BD:2B:5B:81:6D:70:6D:B9 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CCA41F9E54CCC29CF570A3600 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 16509 IP address blocks: 67.217.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:f9:e5:4c:cc:29:cf:57:0a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=b0520434-e168-49f8-86a1-c878a2228a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8f:87:aa:91:fd:32:51:92:97:42:5c:56:a0: 98:43:a7:a5:9c:5d:ff:fe:55:fb:9c:83:1d:85:a2: 1d:aa:e8:c6:a6:7f:9e:05:06:7c:d0:a8:c3:f2:78: a2:d6:34:78:7c:63:12:fd:7e:43:64:b7:4b:18:56: ee:40:2a:54:c9:5f:a2:da:35:7b:89:f3:47:c7:54: 6b:9e:24:0f:1b:81:47:99:95:9a:8c:78:5a:33:4b: 0a:7f:a4:a8:55:69:42:ea:78:87:ea:af:2d:2e:c8: b6:86:9b:3d:0c:35:97:25:c0:f6:5b:db:92:dd:23: 7f:4e:95:15:f7:e7:44:07:46:78:8a:07:2b:2c:e5: d3:cd:1b:7f:44:e6:ae:23:e9:36:c3:eb:7a:d8:35: e2:d8:61:c9:2b:8e:ea:3b:e9:3c:c9:56:15:47:9c: 91:45:9c:7a:ba:79:ee:68:fa:46:a4:4d:d0:72:9d: 4f:3f:d6:1a:84:dc:d2:f6:43:2f:fb:0d:f9:36:82: cd:47:06:46:9b:de:ec:b3:ca:fd:82:2b:72:ed:0c: 00:84:f1:6b:e0:9a:a1:31:36:5f:62:7f:11:74:e8: dc:72:ba:28:01:20:c0:e8:f3:78:8b:4c:91:d7:b1: 08:82:49:b5:58:a2:8e:9c:a6:ac:65:58:16:88:5f: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:DD:9C:AD:A8:8B:DD:67:7E:2F:A0:BD:2B:5B:81:6D:70:6D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:70:46:06:1c:07:9b:5d:ed:85:e8:26:9a:7a:f0:ed:92:45: 66:a6:df:f3:90:68:dd:7c:d0:38:18:52:13:e4:f9:1a:cb:34: 28:2b:65:f9:57:df:5f:bd:18:07:70:dd:e5:20:fb:93:29:a0: 67:65:60:c3:5d:6a:0f:ac:7b:58:d0:aa:c9:0a:dc:2f:e0:c7: 38:74:7a:ea:79:a5:50:32:a4:ce:4b:54:08:8b:fc:18:e1:7d: 04:7d:a2:43:82:59:9a:3c:ad:1f:0f:ae:27:a4:a2:f8:db:1c: 5e:0b:92:6a:57:4f:51:0d:83:f2:77:20:20:fc:67:fe:63:58: 1a:38:18:f2:77:48:e2:58:34:e2:71:f7:35:8d:0c:c3:f1:e0: 09:10:0a:77:09:eb:cc:0e:ae:f0:cf:a6:0c:01:3d:67:b7:92: 23:20:e5:f3:14:f2:68:32:ff:06:fa:c7:a7:13:df:cb:53:03: 89:02:26:d2:e4:ac:0f:e7:ff:10:2a:fe:a6:c7:5f:cb:74:62: 88:7e:f2:a7:ae:ae:54:18:39:8e:ed:f9:de:14:44:b0:7b:1d: c3:6d:84:32:ed:e5:9d:f4:ba:95:5d:30:5d:03:47:ff:2a:aa: bd:6e:ad:8b:d0:0f:58:52:6b:0d:81:46:c2:b1:3e:a2:9a:51: 11:af:fe:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQfnlTMwpz1cKNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk YjA1MjA0MzQtZTE2OC00OWY4LTg2YTEtYzg3OGEyMjI4YTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI+HqpH9MlGSl0JcVqCYQ6elnF3//lX7nIMd haIdqujGpn+eBQZ80KjD8nii1jR4fGMS/X5DZLdLGFbuQCpUyV+i2jV7ifNHx1Rr niQPG4FHmZWajHhaM0sKf6SoVWlC6niH6q8tLsi2hps9DDWXJcD2W9uS3SN/TpUV 9+dEB0Z4igcrLOXTzRt/ROauI+k2w+t62DXi2GHJK47qO+k8yVYVR5yRRZx6unnu aPpGpE3Qcp1PP9YahNzS9kMv+w35NoLNRwZGm97ss8r9gity7QwAhPFr4JqhMTZf Yn8RdOjccrooASDA6PN4i0yR17EIgkm1WKKOnKasZVgWiF8LfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvm3ZytqIvdZ34voL0rW4FtcG25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2JmOTY4NTEtYmE5ZS0z OGJmLWE5NjMtZGE2NWY3ZjM3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhwRgYcB5td7YXoJpp68O2SRWam3/OQaN180DgYUhPk+RrLNCgrZflX 31+9GAdw3eUg+5MpoGdlYMNdag+se1jQqskK3C/gxzh0eup5pVAypM5LVAiL/Bjh fQR9okOCWZo8rR8PriekovjbHF4LkmpXT1ENg/J3ICD8Z/5jWBo4GPJ3SOJYNOJx 9zWNDMPx4AkQCncJ68wOrvDPpgwBPWe3kiMg5fMU8mgy/wb6x6cT38tTA4kCJtLk rA/n/xAq/qbHX8t0Yoh+8qeurlQYOY7t+d4URLB7HcNthDLt5Z30upVdMF0DR/8q qr1urYvQD1hSaw2BRsKxPqKaURGv/tQ= -----END CERTIFICATE-----Generated at Mon Mar 2 12:20:27 2026 by rpki-client