$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json) Hash identifier: rWM4lQ5YsTyYJMgFeEREuWi7zutbCN3FX177nu1tuTw= Subject key identifier: 39:B8:FD:32:8D:9A:1A:0B:14:EE:F7:0A:8F:51:19:A2:C4:8E:51:C3 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C20C0B1A45AAA7D6E67F20 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 67.221.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0c:0b:1a:45:aa:a7:d6:e6:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=5c43ac9b-8f00-4fac-8ac4-c0019abae8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:3e:65:21:14:64:e4:40:75:79:01:02:24: a3:e9:f3:9e:e0:8b:b1:2e:62:49:32:3e:16:e1:ef: ed:40:39:61:e0:07:47:57:f4:d7:88:0a:6d:68:68: 05:23:6c:16:90:e8:f0:af:37:c8:cd:77:61:3a:81: 52:b6:f8:23:f9:1d:07:17:a1:f5:58:3f:5b:ca:1b: de:5a:06:5d:25:fe:e8:47:69:13:7b:d5:43:63:d5: f5:7f:90:f2:bb:99:b7:e6:34:cf:06:17:da:e6:3a: b7:34:ff:46:b7:17:7a:f3:99:e0:9e:5f:90:1b:9b: 2d:43:22:65:e9:76:4f:bb:ac:47:b7:8e:b4:3e:ab: f6:36:2a:0a:87:2b:0f:e6:3d:32:1d:a1:2b:90:75: 5a:83:da:60:ee:1a:a7:57:3f:aa:32:fc:ba:14:69: 02:2b:36:68:a5:d9:5f:cd:3b:a5:e2:c7:6f:64:7d: 54:73:eb:18:f1:37:81:0f:ab:a1:d8:86:73:68:e7: ad:8d:41:0a:38:64:58:62:5d:0a:7b:26:58:81:96: eb:1a:da:c1:a1:ac:1e:71:82:f2:1a:48:72:a8:a4: 65:5b:02:85:f8:07:48:a0:0c:a3:51:28:89:ab:36: 5b:a0:8b:72:d9:8d:18:7e:bf:65:0f:70:3d:96:dc: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:FD:32:8D:9A:1A:0B:14:EE:F7:0A:8F:51:19:A2:C4:8E:51:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:90:78:85:d0:a9:7c:02:36:ab:90:7f:74:ad:5d:01:be:46: e4:c7:64:83:55:83:43:57:aa:65:22:ec:e3:cb:8d:ad:84:3d: ce:d7:20:f9:fa:a4:78:45:6d:32:03:76:cc:bb:5d:ab:a2:4d: d3:ee:b4:d5:cc:87:df:3c:b7:fe:8e:59:15:76:fa:e3:51:18: 1d:23:b2:7b:09:5f:9c:d4:9b:03:fd:b1:a1:ea:90:1f:27:78: 2d:57:f8:a1:0b:2d:9b:49:a9:83:6e:ff:15:14:f2:dc:f4:3d: a1:9f:27:e2:04:19:da:09:19:7b:8a:90:57:79:be:26:7e:c9: c1:d7:c3:df:de:e9:f2:75:b4:dc:ae:90:06:52:5e:0b:33:27: 87:a1:fa:f0:63:8e:4f:3d:5f:1f:36:64:1e:27:03:1f:db:42: 44:df:3b:72:23:b0:42:a8:ae:de:aa:73:c0:51:06:1c:a1:29: 60:62:44:f0:f5:60:dd:5d:9c:35:f2:bb:cd:b0:82:c9:94:25: cb:5b:26:59:ab:18:6c:a0:0c:07:6a:c6:14:5d:fc:dd:d0:dc: 04:98:1f:86:57:3e:a0:ee:9d:fb:66:62:63:92:76:fd:eb:1a: 27:11:9d:1a:6c:7a:c6:33:1d:b6:4a:19:78:3c:e7:53:67:86: 6b:12:8e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgwLGkWqp9bmfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NWM0M2FjOWItOGYwMC00ZmFjLThhYzQtYzAwMTlhYmFlOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43o+ZSEUZORAdXkBAiSj6fOe4IuxLmJJMj4W 4e/tQDlh4AdHV/TXiAptaGgFI2wWkOjwrzfIzXdhOoFStvgj+R0HF6H1WD9byhve WgZdJf7oR2kTe9VDY9X1f5Dyu5m35jTPBhfa5jq3NP9Gtxd685ngnl+QG5stQyJl 6XZPu6xHt460Pqv2NioKhysP5j0yHaErkHVag9pg7hqnVz+qMvy6FGkCKzZopdlf zTul4sdvZH1Uc+sY8TeBD6uh2IZzaOetjUEKOGRYYl0KeyZYgZbrGtrBoawecYLy GkhyqKRlWwKF+AdIoAyjUSiJqzZboIty2Y0Yfr9lD3A9lty++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm4/TKNmhoLFO73Co9RGaLEjlHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOWYyMjVhYWMtZTA3Ny0z NjIwLTgzOGMtMDcwM2JlOGIzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByQeIXQqXwCNquQf3StXQG+RuTHZINVg0NXqmUi7OPLja2EPc7XIPn6 pHhFbTIDdsy7XauiTdPutNXMh988t/6OWRV2+uNRGB0jsnsJX5zUmwP9saHqkB8n eC1X+KELLZtJqYNu/xUU8tz0PaGfJ+IEGdoJGXuKkFd5viZ+ycHXw9/e6fJ1tNyu kAZSXgszJ4eh+vBjjk89Xx82ZB4nAx/bQkTfO3IjsEKort6qc8BRBhyhKWBiRPD1 YN1dnDXyu82wgsmUJctbJlmrGGygDAdqxhRd/N3Q3ASYH4ZXPqDunftmYmOSdv3r GicRnRpsesYzHbZKGXg851NnhmsSjn8= -----END CERTIFICATE-----Generated at Thu Sep 24 08:02:11 2026 by rpki-client