$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa File: b45e4130-0497-38e3-9e94-bc71e24b4c95.roa (raw, json) Hash identifier: yVWKuioySg2q4FVL9HeoDxYreRFs7W9bwAr1T4OhhB8= Subject key identifier: 0C:E5:0E:15:A9:09:D9:DD:89:37:ED:FF:F9:69:C9:99:03:CC:AA:69 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AADF12605D7D2B648E48E95A0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16696 IP address blocks: 67.221.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:26:05:d7:d2:b6:48:e4:8e:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=aca240e9-b4c7-4693-ba7c-ba48043b494f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:0d:53:65:da:c3:8e:36:53:e5:ab:e4:b6: 1c:93:8f:b0:7b:23:17:be:33:88:cc:4d:79:5d:30: 75:8e:80:62:19:a2:bf:c0:42:0c:8b:71:d8:a0:d5: 92:e8:cb:0d:9b:21:e1:b8:8c:20:00:74:ee:03:ed: 18:8f:06:aa:04:b4:80:a6:9b:d8:3d:03:79:9e:ae: f3:7e:6c:d0:69:10:f8:b9:05:af:9e:18:e6:66:49: aa:b5:33:7c:66:1e:9d:ca:26:62:3b:0d:61:c1:c4: f5:f2:5f:36:69:1c:40:35:5f:05:2a:15:d7:ea:eb: 7a:73:76:f0:18:f0:12:0b:fe:e8:46:f0:fe:b9:a5: 39:ac:4f:7a:a8:56:c7:17:b7:3a:6d:d5:d1:6b:44: 30:6c:53:46:28:94:9e:c1:7e:68:23:45:d1:a5:c2: 1f:9d:a8:83:1a:fa:93:35:5f:93:3f:82:4c:97:87: 5a:56:e6:27:42:ab:ae:be:c3:ed:46:b5:a9:8c:4c: 69:0b:06:9d:77:4e:64:aa:73:1f:bc:a5:9a:39:44: 5b:33:c5:12:b4:c6:48:5d:40:66:d0:92:5d:a2:84: e6:e8:21:da:ba:0d:73:5b:8f:5a:b5:ff:b9:71:c0: 34:50:16:be:ba:0c:22:44:52:fc:4a:0a:a7:30:0c: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:0E:15:A9:09:D9:DD:89:37:ED:FF:F9:69:C9:99:03:CC:AA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:15:c1:3b:a4:ab:3f:fe:f9:06:0e:fe:d4:01:0c:71:58:57: 23:99:6b:06:7d:df:52:e3:5f:0e:16:2a:f1:9b:a8:fb:b6:11: 76:8c:8d:c4:2c:54:fc:28:d1:e2:03:6e:d2:a6:53:72:c9:76: 53:eb:da:b8:b1:95:a3:ff:01:f0:b3:56:cd:d9:3b:a5:31:88: 07:d1:02:2b:e0:1f:16:05:a3:82:63:0e:cd:d2:d4:1e:0a:51: 5f:cc:bb:14:76:44:26:5f:e3:47:0c:b6:c2:2b:c2:92:af:55: b8:1f:c4:ff:3b:99:ad:20:af:cb:51:a8:33:f4:5a:31:11:e3: dc:9a:41:9c:e6:23:87:66:8e:06:1b:56:b9:53:3f:f5:26:f6: e8:30:fa:06:92:5c:b6:2a:82:a2:aa:9e:cd:3e:35:27:db:eb: 23:f2:f3:cc:ef:61:c1:b5:a0:b0:05:88:97:f7:6a:c6:54:c4: 27:6f:3b:b8:ac:75:06:03:f7:f7:43:8c:f9:77:c9:1d:62:1e: 6c:f4:6b:76:62:52:60:12:ce:68:7e:57:33:90:ff:3a:b7:2d: 96:8a:1a:3c:19:40:8d:63:09:7c:c6:fa:9a:73:54:fd:be:0d: bd:e7:c0:25:a3:59:f7:52:70:fc:dc:40:be:58:6e:a6:a1:dc: cd:3d:eb:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SYF19K2SOSOlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YWNhMjQwZTktYjRjNy00NjkzLWJhN2MtYmE0ODA0M2I0OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPUNU2Xaw442U+Wr5LYck4+weyMXvjOIzE15 XTB1joBiGaK/wEIMi3HYoNWS6MsNmyHhuIwgAHTuA+0YjwaqBLSAppvYPQN5nq7z fmzQaRD4uQWvnhjmZkmqtTN8Zh6dyiZiOw1hwcT18l82aRxANV8FKhXX6ut6c3bw GPASC/7oRvD+uaU5rE96qFbHF7c6bdXRa0QwbFNGKJSewX5oI0XRpcIfnaiDGvqT NV+TP4JMl4daVuYnQquuvsPtRrWpjExpCwadd05kqnMfvKWaOURbM8UStMZIXUBm 0JJdooTm6CHaug1zW49atf+5ccA0UBa+ugwiRFL8SgqnMAy8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzlDhWpCdndiTft//lpyZkDzKppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYjQ1ZTQxMzAtMDQ5Ny0z OGUzLTllOTQtYmM3MWUyNGI0Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQVwTukqz/++QYO/tQBDHFYVyOZawZ931LjXw4WKvGbqPu2EXaMjcQs VPwo0eIDbtKmU3LJdlPr2rixlaP/AfCzVs3ZO6UxiAfRAivgHxYFo4JjDs3S1B4K UV/MuxR2RCZf40cMtsIrwpKvVbgfxP87ma0gr8tRqDP0WjER49yaQZzmI4dmjgYb VrlTP/Um9ugw+gaSXLYqgqKqns0+NSfb6yPy88zvYcG1oLAFiJf3asZUxCdvO7is dQYD9/dDjPl3yR1iHmz0a3ZiUmASzmh+VzOQ/zq3LZaKGjwZQI1jCXzG+ppzVP2+ Db3nwCWjWfdScPzcQL5Ybqah3M0960Y= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:55 2025 by rpki-client