$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa File: 3be287c7-ee38-3701-a80a-c69f456e79e4.roa (raw, json) Hash identifier: MGC9uvC54ewOI6tWa+KIaO8xE9J4Z7wZnBT8C7ei6mI= Subject key identifier: AA:80:AA:62:0B:97:B0:CA:99:26:AA:66:FA:55:3A:95:4A:8E:A3:2B Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584E2D9F297588E78FE5074C4480 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 16696 IP address blocks: 67.221.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:29:75:88:e7:8f:e5:07:4c:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=8cc7cf73-fd67-4d8b-9b06-c1c4785e6027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:85:8c:6e:9d:46:67:26:d6:52:40:6a:ba: f6:85:e7:fd:7a:d2:06:d0:be:37:6d:6a:7f:60:e6: 29:1b:b1:c9:79:88:27:85:c1:4d:a3:29:5c:cb:b8: 10:c1:b5:c0:dd:78:ef:e1:74:97:eb:08:4f:7a:ff: 84:1a:c9:e4:bf:57:82:48:93:10:3c:98:ab:ff:01: ae:02:50:75:d7:9c:07:1d:57:44:1c:a6:a6:a8:bb: 28:d1:79:e7:ad:42:7c:c9:b8:fc:56:d0:fc:7a:d6: 6d:66:5b:bd:39:3c:fc:ff:5f:75:29:49:5a:57:ca: d1:f7:e5:b4:67:34:3f:36:9d:89:23:9c:1c:c5:5d: bc:53:f9:43:0c:4e:10:59:b2:5c:70:8d:18:db:00: 3e:1d:38:26:8b:ee:6b:22:54:5a:96:58:e9:2d:86: fe:2d:ab:39:74:9e:2f:87:ee:b8:cc:98:c7:f9:7d: 0c:0d:f0:64:d9:6a:21:32:4a:ca:63:59:ba:98:cd: 12:ad:46:c3:77:44:d6:97:39:4d:1e:e1:65:3c:5f: 18:2d:52:58:bd:fe:82:47:43:b1:ab:50:8c:e6:01: 2c:fe:19:63:88:7a:59:3c:1b:c6:b6:ca:95:81:ff: c6:61:e9:7b:68:44:5d:b0:de:b7:05:33:9a:93:4e: 66:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:AA:62:0B:97:B0:CA:99:26:AA:66:FA:55:3A:95:4A:8E:A3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:44:12:8d:a7:9b:dc:64:34:3f:29:54:de:d0:dd:56:80:8e: 56:e0:da:93:17:00:45:dc:9a:2b:e6:7c:3f:b5:d9:2e:14:c7: f7:e7:0a:a3:39:39:b4:72:eb:c0:fb:a8:21:19:c9:8b:49:bd: c6:fb:3c:49:6f:f1:88:9c:81:10:cb:3a:99:d3:e6:a1:9e:d0: 4b:dc:5e:5a:b2:95:26:12:37:16:66:dd:76:ce:50:2b:5e:c3: 13:9e:ba:42:9f:e7:3a:13:2b:14:b6:c1:cf:5c:a3:1c:c2:a2: 2a:8a:ed:9a:03:c1:cd:de:84:81:55:d1:df:20:c0:28:11:15: 8e:25:8d:18:3d:b7:e0:9d:1b:c1:92:df:a0:fc:28:fb:e1:bd: 3f:a9:46:d0:da:27:3c:f5:90:37:9f:18:02:64:54:cf:ed:34: 1c:50:0f:67:3f:ee:05:70:13:c9:27:aa:86:c4:24:70:20:b8: 61:c8:ab:08:95:65:6f:ba:13:f1:23:f0:e9:81:e2:3e:b3:18: 3c:8b:55:c4:0d:a2:22:84:21:6b:ae:39:97:92:da:b7:bb:69: f1:38:9f:df:14:c5:33:6e:a8:9e:e6:6d:a3:d5:62:35:7f:eb: 8f:e4:c0:8e:67:77:5b:78:6d:eb:dc:78:1a:ec:10:c2:79:e5: 54:c9:25:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyl1iOeP5QdMRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk OGNjN2NmNzMtZmQ2Ny00ZDhiLTliMDYtYzFjNDc4NWU2MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8SFjG6dRmcm1lJAarr2hef9etIG0L43bWp/ YOYpG7HJeYgnhcFNoylcy7gQwbXA3Xjv4XSX6whPev+EGsnkv1eCSJMQPJir/wGu AlB115wHHVdEHKamqLso0XnnrUJ8ybj8VtD8etZtZlu9OTz8/191KUlaV8rR9+W0 ZzQ/Np2JI5wcxV28U/lDDE4QWbJccI0Y2wA+HTgmi+5rIlRalljpLYb+Las5dJ4v h+64zJjH+X0MDfBk2WohMkrKY1m6mM0SrUbDd0TWlzlNHuFlPF8YLVJYvf6CR0Ox q1CM5gEs/hljiHpZPBvGtsqVgf/GYel7aERdsN63BTOak05mKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqAqmILl7DKmSaqZvpVOpVKjqMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2JlMjg3YzctZWUzOC0z NzAxLWE4MGEtYzY5ZjQ1NmU3OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZEEo2nm9xkND8pVN7Q3VaAjlbg2pMXAEXcmivmfD+12S4Ux/fnCqM5 ObRy68D7qCEZyYtJvcb7PElv8YicgRDLOpnT5qGe0EvcXlqylSYSNxZm3XbOUCte wxOeukKf5zoTKxS2wc9coxzCoiqK7ZoDwc3ehIFV0d8gwCgRFY4ljRg9t+CdG8GS 36D8KPvhvT+pRtDaJzz1kDefGAJkVM/tNBxQD2c/7gVwE8knqobEJHAguGHIqwiV ZW+6E/Ej8OmB4j6zGDyLVcQNoiKEIWuuOZeS2re7afE4n98UxTNuqJ7mbaPVYjV/ 64/kwI5nd1t4bevceBrsEMJ55VTJJc8= -----END CERTIFICATE-----Generated at Fri Jul 24 07:06:27 2026 by rpki-client