$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa File: 3be287c7-ee38-3701-a80a-c69f456e79e4.roa (raw, json) Hash identifier: pHUy1wq1ZwyWuH6JyD73MspZg51c4W+7NE+epZkGy/k= Subject key identifier: BC:B7:F1:99:36:B3:8F:F6:19:9D:B2:A1:B4:F0:E2:D3:2B:6B:18:FE Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ED001F6E70B56E89AD0472180 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 67.221.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f6:e7:0b:56:e8:9a:d0:47:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=f80fffda-a1da-4324-8d5c-a6f89020ab9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:5b:9b:fd:be:78:e8:b3:5b:43:5a:c9:cf: 26:0e:45:be:31:ff:85:ce:2a:6f:d9:89:ee:a7:02: fd:12:2e:3a:c8:bc:8b:a9:b6:2b:c2:1d:57:9a:66: c9:23:b7:c8:ad:67:14:08:32:79:79:58:0b:3c:72: 76:93:75:95:06:00:19:be:8f:f9:85:d2:54:b6:fc: 20:cb:0f:91:24:63:21:c5:3b:38:8f:0a:b8:d3:a2: 48:05:c2:46:da:97:d8:79:a2:bb:78:d4:ed:56:f0: 16:28:10:96:b2:ee:8b:f7:cc:32:84:0a:80:ab:ec: 0e:9d:ec:ec:c7:57:b8:92:2b:45:eb:31:e7:82:d1: 4e:00:a9:08:44:fd:d5:50:33:1a:5b:75:24:a6:55: 72:1b:8e:87:bb:53:6e:10:2d:3e:d7:1c:34:c5:b5: 31:f5:d9:ae:cc:4c:c7:4b:8a:bb:68:86:a5:61:cb: 71:16:b1:de:33:d2:90:30:2d:62:6a:2f:fc:7a:5c: 87:6c:14:b4:75:7a:10:06:fe:21:92:50:e4:0b:1b: 50:d4:5d:f6:17:df:18:89:88:07:66:65:4b:88:56: 9e:60:12:c1:61:e7:84:a7:19:da:f2:0f:f2:24:57: fd:c3:06:4e:61:b1:52:66:04:18:2f:19:76:64:1a: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:F1:99:36:B3:8F:F6:19:9D:B2:A1:B4:F0:E2:D3:2B:6B:18:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d5:f0:02:7d:28:77:4e:98:87:ed:46:56:d4:61:74:41:fd: d4:ef:a4:85:b6:87:a5:1d:f0:a7:e7:72:eb:ba:1e:49:9f:07: de:5b:cd:55:11:88:31:44:03:58:44:9a:df:ea:03:22:24:4c: 0e:8a:76:2d:5f:a4:a1:08:17:5f:46:40:0e:06:ba:4b:76:de: 1d:88:30:88:21:3c:ef:dc:57:d7:fd:42:9e:5e:f6:f0:63:32: 7f:89:2c:57:53:08:fc:b5:21:58:de:a4:ab:5f:69:f3:07:f9: 50:25:39:36:fd:3c:75:56:ea:97:ff:95:8a:38:e1:f3:08:0a: 44:b6:79:26:6b:fb:0a:37:de:e1:65:57:9e:77:ef:86:59:00: 6c:9b:25:c7:87:8f:00:3e:23:f1:e6:22:d2:d1:b7:28:00:31: 15:74:19:69:cb:e4:29:f6:6e:54:25:1b:ca:97:d8:95:a3:c2: d0:fa:e3:8a:70:09:0e:62:c5:03:54:45:7f:19:fb:01:9f:32: df:c1:10:bd:68:98:e3:49:0b:1d:08:61:e8:ae:e7:85:fe:51: 43:27:e3:e8:7d:a8:54:b7:64:c8:3b:8b:6e:eb:d6:99:22:42: 66:c3:33:d5:cd:69:b3:41:7e:7c:3c:2d:7f:04:91:38:74:e2: cb:75:2b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfbnC1bomtBHIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjgwZmZmZGEtYTFkYS00MzI0LThkNWMtYTZmODkwMjBhYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmNbm/2+eOizW0Nayc8mDkW+Mf+Fzipv2Ynu pwL9Ei46yLyLqbYrwh1XmmbJI7fIrWcUCDJ5eVgLPHJ2k3WVBgAZvo/5hdJUtvwg yw+RJGMhxTs4jwq406JIBcJG2pfYeaK7eNTtVvAWKBCWsu6L98wyhAqAq+wOnezs x1e4kitF6zHngtFOAKkIRP3VUDMaW3UkplVyG46Hu1NuEC0+1xw0xbUx9dmuzEzH S4q7aIalYctxFrHeM9KQMC1iai/8elyHbBS0dXoQBv4hklDkCxtQ1F32F98YiYgH ZmVLiFaeYBLBYeeEpxna8g/yJFf9wwZOYbFSZgQYLxl2ZBqUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy38Zk2s4/2GZ2yobTw4tMraxj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2JlMjg3YzctZWUzOC0z NzAxLWE4MGEtYzY5ZjQ1NmU3OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPV8AJ9KHdOmIftRlbUYXRB/dTvpIW2h6Ud8Kfncuu6HkmfB95bzVUR iDFEA1hEmt/qAyIkTA6Kdi1fpKEIF19GQA4Gukt23h2IMIghPO/cV9f9Qp5e9vBj Mn+JLFdTCPy1IVjepKtfafMH+VAlOTb9PHVW6pf/lYo44fMICkS2eSZr+wo33uFl V55374ZZAGybJceHjwA+I/HmItLRtygAMRV0GWnL5Cn2blQlG8qX2JWjwtD644pw CQ5ixQNURX8Z+wGfMt/BEL1omONJCx0IYeiu54X+UUMn4+h9qFS3ZMg7i27r1pki QmbDM9XNabNBfnw8LX8EkTh04st1K+k= -----END CERTIFICATE-----Generated at Thu Sep 24 08:08:48 2026 by rpki-client