$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa File: 68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json) Hash identifier: J7cjom3ckuCqbTMBDoHtsDKv1pieZouYjYJRv5oDF30= Subject key identifier: 2E:D2:CC:74:A4:DF:16:45:7F:4E:29:0B:AD:D0:89:A6:B4:EE:F1:E1 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C20C2F739C174459D4B200 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 67.221.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0c:2f:73:9c:17:44:59:d4:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=bc1532bf-f1f6-4671-bf5b-ed6814c85740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:79:76:c8:85:71:af:6b:27:66:24:e4:98: 8e:74:04:d6:07:87:a3:9c:61:3f:e9:b2:99:b1:b9: 9f:88:0a:9c:9a:b7:8a:29:6a:d1:07:9a:16:b3:73: 5b:27:30:25:ff:44:a7:2c:92:d0:e2:55:1d:3c:1b: e1:29:e7:69:d3:93:77:82:4a:da:49:cb:4c:fd:be: 34:e2:62:e8:b1:8b:8d:3c:1a:2a:dd:55:6f:ec:72: 41:40:f1:e1:60:60:1b:06:be:9b:25:12:ad:36:dc: 37:c7:a3:23:1f:3b:7b:38:a3:a5:8f:78:06:38:d4: 76:fc:a0:69:04:a4:e7:4c:48:15:77:de:c9:74:e3: e4:6a:9b:89:50:ad:d8:54:11:51:6c:7b:f8:b7:4f: c7:ed:d7:c8:9a:4c:6f:e1:87:45:cf:cd:c7:40:84: aa:16:d6:ff:56:1a:9c:bc:fe:be:05:07:52:45:1f: 8c:fe:29:a4:1a:cf:e7:ec:6f:23:b6:01:10:a6:e7: 1b:7d:a6:83:c4:cc:17:ca:d9:20:3f:d0:b9:81:4b: 43:d9:55:ee:d4:1c:67:11:ea:19:95:a0:b7:ce:f7: dc:77:64:b2:e3:fb:7a:e3:0d:ea:df:f3:d1:56:72: 1f:c8:0e:df:b0:6f:91:e6:8b:c5:83:55:af:f1:98: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D2:CC:74:A4:DF:16:45:7F:4E:29:0B:AD:D0:89:A6:B4:EE:F1:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5e:ab:78:c3:e4:4c:4e:af:1e:60:29:7c:03:cd:f2:ed:e3: 60:f7:5a:07:32:6a:29:c2:4e:f3:dc:a1:49:89:8c:f8:65:b4: a0:0d:7c:3f:56:73:41:9f:0a:64:94:8b:1d:a9:40:36:19:0b: 23:87:1d:ba:62:a4:28:af:56:68:30:0f:c7:a9:e0:65:df:84: a1:ab:ee:a9:16:bf:8b:90:e0:a1:1e:92:00:23:ae:71:6f:54: be:1a:79:ad:ea:e2:af:c1:23:4d:9f:57:f6:57:64:7a:ca:3d: f5:b2:42:23:58:d9:02:20:2c:9c:fb:d0:97:27:2b:48:23:9c: 50:e3:ee:88:4b:d4:36:07:95:35:95:fc:e3:49:44:04:af:2b: b4:a3:8d:5c:43:eb:b3:cd:fa:2f:da:a9:a5:af:d0:c1:41:5b: 30:56:cc:28:de:05:24:8e:82:ce:a3:38:56:db:71:7d:5a:36: f4:a7:3e:3d:96:ec:fa:f1:74:76:e1:fa:b7:72:c3:b8:a9:bc: f0:29:50:8d:40:49:0c:6f:ba:07:6b:36:75:2d:dc:15:92:91: a0:fc:79:c3:be:f2:ed:19:75:b4:04:4d:1c:86:a8:0b:3e:6f: 25:31:9c:84:fa:2d:31:37:25:35:18:de:d7:9d:30:90:7a:e2: 80:20:92:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgwvc5wXRFnUsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YmMxNTMyYmYtZjFmNi00NjcxLWJmNWItZWQ2ODE0Yzg1NzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxt5dsiFca9rJ2Yk5JiOdATWB4ejnGE/6bKZ sbmfiAqcmreKKWrRB5oWs3NbJzAl/0SnLJLQ4lUdPBvhKedp05N3gkraSctM/b40 4mLosYuNPBoq3VVv7HJBQPHhYGAbBr6bJRKtNtw3x6MjHzt7OKOlj3gGONR2/KBp BKTnTEgVd97JdOPkapuJUK3YVBFRbHv4t0/H7dfImkxv4YdFz83HQISqFtb/Vhqc vP6+BQdSRR+M/imkGs/n7G8jtgEQpucbfaaDxMwXytkgP9C5gUtD2VXu1BxnEeoZ laC3zvfcd2Sy4/t64w3q3/PRVnIfyA7fsG+R5ovFg1Wv8ZjhywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7SzHSk3xZFf04pC63Qiaa07vHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjhiZTAwZWEtN2EwOS0z ZWEwLWJiYTQtODU2MzNmZGM3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZeq3jD5ExOrx5gKXwDzfLt42D3WgcyainCTvPcoUmJjPhltKANfD9W c0GfCmSUix2pQDYZCyOHHbpipCivVmgwD8ep4GXfhKGr7qkWv4uQ4KEekgAjrnFv VL4aea3q4q/BI02fV/ZXZHrKPfWyQiNY2QIgLJz70JcnK0gjnFDj7ohL1DYHlTWV /ONJRASvK7SjjVxD67PN+i/aqaWv0MFBWzBWzCjeBSSOgs6jOFbbcX1aNvSnPj2W 7PrxdHbh+rdyw7ipvPApUI1ASQxvugdrNnUt3BWSkaD8ecO+8u0ZdbQETRyGqAs+ byUxnIT6LTE3JTUY3tedMJB64oAgkrA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:50:41 2026 by rpki-client