$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa File: 02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa (raw, json) Hash identifier: Ke/o5iiy9uhL7Wblj2MWYXemEf0e5TIyEbe1gU6yClQ= Subject key identifier: 46:0E:5B:4C:A2:B5:EC:36:4F:53:81:35:D1:F6:21:B8:50:54:D0:F4 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4BA0E397B7B6907B079700 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 67.221.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a0:e3:97:b7:b6:90:7b:07:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=edd79ddf-278e-47bc-93c0-ea66c622d4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:c1:04:5f:eb:07:16:32:0e:c1:bd:dd:8a: f2:79:9d:7d:df:78:d2:0d:48:ec:5c:3e:3f:48:9b: 6d:f7:dd:41:f8:48:e4:a3:c4:ce:f7:68:86:34:db: 6e:00:9c:16:0d:aa:bd:87:1f:13:e8:41:95:b7:cd: fd:e5:98:84:1e:ff:20:58:3d:f2:2d:00:a9:ea:62: 42:ca:3d:00:45:d2:bb:34:47:e4:7f:7e:b1:e1:60: 5e:1e:5e:73:34:91:a6:ec:56:99:f2:91:ec:ac:2c: c5:9c:6d:16:99:0c:cd:26:1a:81:3d:0d:f2:8a:ec: 7d:b7:14:20:c3:eb:67:43:54:8f:81:8f:dd:61:9b: ef:2d:ee:76:fa:74:a5:92:c8:fe:6a:3d:72:3c:04: 56:ea:a4:1f:c1:42:7b:ce:b1:1d:39:87:90:5b:73: dc:db:97:40:3b:52:24:e3:d5:2a:0d:7c:4e:01:55: ca:e6:b6:69:e7:54:a4:9c:b1:26:40:82:d2:5b:99: c2:19:be:72:d6:ab:56:f9:2f:28:9e:02:e6:6f:8a: 35:57:1f:77:db:51:96:36:31:e8:b0:49:fb:95:3f: 86:62:4a:53:9a:2e:d7:d8:de:7a:e0:bb:07:df:92: 7d:91:74:f2:c0:c9:1b:c2:40:3a:1b:5a:01:76:12: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:5B:4C:A2:B5:EC:36:4F:53:81:35:D1:F6:21:B8:50:54:D0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4d:96:0c:73:99:08:ec:0c:67:d0:d5:2d:47:a3:7d:d4:d1: 0f:ff:6c:58:09:73:01:de:2f:06:42:e0:38:f0:fa:6e:5d:e8: f1:24:ba:89:d8:8c:16:b1:a6:14:e7:6c:80:93:c3:05:18:46: ef:79:17:8c:ce:4d:07:5e:68:e3:3e:e9:5b:39:1f:1b:62:0c: 55:9e:e7:64:c2:5f:27:c7:f5:93:92:e2:02:ed:90:0e:e2:ab: f7:4d:31:b9:6f:3c:0a:fc:e0:93:de:6e:7d:0c:23:80:24:57: 26:e2:56:43:da:88:6f:8d:20:f3:fa:17:b6:7d:98:07:70:df: 39:e1:91:db:7e:68:58:e4:bc:6d:3c:ed:b3:6b:f7:0c:4d:c1: bb:6b:35:90:29:21:fd:59:c0:42:45:61:48:c7:fa:b7:a8:39: 3e:3f:6e:f7:e4:c8:b1:db:88:5d:8f:bb:b9:db:62:e9:58:86: b0:4b:68:d2:64:d9:ad:2f:f8:0f:f6:32:1b:02:cc:16:e2:97: 5c:cc:41:16:61:a7:b6:00:4f:d5:f8:18:e7:3d:4c:a7:a4:a8: da:37:6c:05:b9:b3:31:f8:a0:4b:24:15:cb:15:10:b1:43:0b: a5:12:a3:ee:29:1b:4d:49:45:cb:35:7e:7e:eb:38:b9:d0:57: b4:2b:35:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6Djl7e2kHsHlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZWRkNzlkZGYtMjc4ZS00N2JjLTkzYzAtZWE2NmM2MjJkNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGjBBF/rBxYyDsG93YryeZ1933jSDUjsXD4/ SJtt991B+Ejko8TO92iGNNtuAJwWDaq9hx8T6EGVt8395ZiEHv8gWD3yLQCp6mJC yj0ARdK7NEfkf36x4WBeHl5zNJGm7FaZ8pHsrCzFnG0WmQzNJhqBPQ3yiux9txQg w+tnQ1SPgY/dYZvvLe52+nSlksj+aj1yPARW6qQfwUJ7zrEdOYeQW3Pc25dAO1Ik 49UqDXxOAVXK5rZp51SknLEmQILSW5nCGb5y1qtW+S8ongLmb4o1Vx9321GWNjHo sEn7lT+GYkpTmi7X2N564LsH35J9kXTywMkbwkA6G1oBdhL5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYOW0yitew2T1OBNdH2IbhQVND0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDIyMzhmZjgtYjdhZC0z ZjMxLWJiMTYtZmY0YzBhNmExMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZNlgxzmQjsDGfQ1S1Ho33U0Q//bFgJcwHeLwZC4Djw+m5d6PEkuonY jBaxphTnbICTwwUYRu95F4zOTQdeaOM+6Vs5HxtiDFWe52TCXyfH9ZOS4gLtkA7i q/dNMblvPAr84JPebn0MI4AkVybiVkPaiG+NIPP6F7Z9mAdw3znhkdt+aFjkvG08 7bNr9wxNwbtrNZApIf1ZwEJFYUjH+reoOT4/bvfkyLHbiF2Pu7nbYulYhrBLaNJk 2a0v+A/2MhsCzBbil1zMQRZhp7YAT9X4GOc9TKekqNo3bAW5szH4oEskFcsVELFD C6USo+4pG01JRcs1fn7rOLnQV7QrNcA= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:54 2025 by rpki-client