$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa File: 21f90337-d188-3ea1-97de-8c8ca38cf817.roa (raw, json) Hash identifier: ae5JYvP4w7PY5UqRTRBqSapYw8p9KAr7xt5FIKfbRvs= Subject key identifier: B4:25:76:DE:F6:77:CE:ED:23:09:64:5C:59:D5:5D:B1:E3:9A:85:34 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584E2D9F298067478A98F9DCB100 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 16696 IP address blocks: 67.221.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:29:80:67:47:8a:98:f9:dc:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=0b38c9de-2ff6-4967-87da-29ae882e2cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:ec:ba:bd:8f:3a:4a:8b:3a:f2:ad:9f:a2: 74:15:b2:8d:de:4c:9a:e1:8d:5d:18:45:5f:4a:62: 54:90:00:10:3c:b5:28:9a:ac:88:50:27:6f:d1:92: d0:6e:ee:72:88:cd:fa:bf:69:bd:eb:5a:74:8e:e3: 50:08:ee:24:b5:29:81:16:dc:cc:e5:26:82:be:c9: a2:2d:54:d4:0e:6b:c9:e4:ab:3c:ed:7d:ca:05:6f: 95:85:4a:30:1c:b4:60:6b:70:3e:24:e7:36:5a:30: 4b:4e:56:d3:39:db:85:4d:16:fe:bc:ed:8a:06:a8: 23:49:87:87:b8:16:85:3d:96:28:e9:8e:ae:a0:d9: e6:a0:0c:89:73:4a:e6:03:f9:09:76:e8:97:1a:6f: b8:26:5b:22:ce:0d:88:38:a2:71:03:6a:08:cb:51: 3c:2c:08:08:b4:2d:57:2c:e9:93:1a:8f:5e:0e:9d: 62:11:f1:e2:b1:ba:50:ea:f9:9f:91:75:62:65:89: 10:05:77:e4:bb:37:c6:e2:04:2e:05:3f:95:67:1c: 4e:13:b5:24:43:1b:11:73:2e:6b:80:54:77:1b:86: b2:2c:92:2f:59:57:ce:c3:84:49:60:30:a3:ff:64: 26:88:6b:be:ec:9b:2e:1a:1a:68:20:6b:a2:f6:ae: 58:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:76:DE:F6:77:CE:ED:23:09:64:5C:59:D5:5D:B1:E3:9A:85:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d7:ea:51:1c:da:3a:06:03:03:4e:be:2b:a3:10:6f:d2:ba: 13:9d:3c:dd:a1:13:08:1d:ca:ed:d0:c9:bf:60:0f:0c:fc:59: d5:90:92:a2:24:2f:10:ac:ea:1a:ee:e2:5b:61:8f:17:8e:a7: 6c:94:0d:4d:fe:87:65:97:f5:91:66:72:b5:32:20:ec:8d:3d: 52:7b:5e:35:a1:cc:1c:79:43:1f:73:f3:50:a9:5f:11:1e:d2: 10:63:8a:4c:7c:3b:16:a0:ba:0f:a7:33:93:6a:ad:c6:41:98: 57:93:f6:c1:d8:09:af:ec:f6:c5:17:5d:96:dd:2e:ab:53:b2: e8:04:a0:cc:f7:b5:6c:fc:6d:81:e6:1f:66:fe:93:ba:d4:ac: eb:72:67:e8:a4:0b:c3:66:11:c7:c1:d4:89:a0:76:f8:5e:1c: fb:e9:65:89:6c:78:16:3c:d8:b5:70:43:a1:ec:ca:cd:cc:d8: d2:02:b8:d6:d9:bf:b8:2c:b8:5e:a0:6c:50:b3:28:79:b5:15: 9e:d4:0c:e4:0b:a2:31:8b:c0:33:ea:70:1f:28:dc:a8:52:8c: 6e:80:80:01:25:1a:de:0c:f7:f1:73:00:fe:0b:e1:8c:28:d3: f4:29:fd:02:11:5f:db:e4:2c:1c:6e:68:87:cb:d5:87:31:6d: 07:f9:a9:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnymAZ0eKmPncsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MGIzOGM5ZGUtMmZmNi00OTY3LTg3ZGEtMjlhZTg4MmUyY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8fsur2POkqLOvKtn6J0FbKN3kya4Y1dGEVf SmJUkAAQPLUomqyIUCdv0ZLQbu5yiM36v2m961p0juNQCO4ktSmBFtzM5SaCvsmi LVTUDmvJ5Ks87X3KBW+VhUowHLRga3A+JOc2WjBLTlbTOduFTRb+vO2KBqgjSYeH uBaFPZYo6Y6uoNnmoAyJc0rmA/kJduiXGm+4Jlsizg2IOKJxA2oIy1E8LAgItC1X LOmTGo9eDp1iEfHisbpQ6vmfkXViZYkQBXfkuzfG4gQuBT+VZxxOE7UkQxsRcy5r gFR3G4ayLJIvWVfOw4RJYDCj/2QmiGu+7JsuGhpoIGui9q5YiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQldt72d87tIwlkXFnVXbHjmoU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjFmOTAzMzctZDE4OC0z ZWExLTk3ZGUtOGM4Y2EzOGNmODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvX6lEc2joGAwNOviujEG/SuhOdPN2hEwgdyu3Qyb9gDwz8WdWQkqIk LxCs6hru4lthjxeOp2yUDU3+h2WX9ZFmcrUyIOyNPVJ7XjWhzBx5Qx9z81CpXxEe 0hBjikx8Oxagug+nM5NqrcZBmFeT9sHYCa/s9sUXXZbdLqtTsugEoMz3tWz8bYHm H2b+k7rUrOtyZ+ikC8NmEcfB1ImgdvheHPvpZYlseBY82LVwQ6Hsys3M2NICuNbZ v7gsuF6gbFCzKHm1FZ7UDOQLojGLwDPqcB8o3KhSjG6AgAElGt4M9/FzAP4L4Ywo 0/Qp/QIRX9vkLBxuaIfL1YcxbQf5qYs= -----END CERTIFICATE-----Generated at Fri Jul 24 08:25:10 2026 by rpki-client