$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa File: f44a5685-6251-3800-89b9-4dbe41c0bf52.roa (raw, json) Hash identifier: QXYlBPiE7FvU2sGIeVAJb+hw67HHF4mBp891S6DAM38= Subject key identifier: 46:81:51:4A:02:9B:D7:94:B0:E4:60:7E:8A:D7:F6:8C:C2:3E:E9:7D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B8EACF2816C21586B62483200 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16696 IP address blocks: 67.221.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f2:81:6c:21:58:6b:62:48:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=1ee02c32-05eb-406b-a0c8-6cda1c151ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:d7:ad:45:65:ad:40:18:c2:87:8b:fc:e7: 5a:4a:09:1f:eb:06:31:ec:05:c0:ac:51:a1:11:85: 71:cf:8d:9b:9c:c6:e2:91:fa:fd:f5:28:94:ba:99: 44:58:12:5d:65:84:a8:a1:1c:80:40:4d:01:23:33: 7b:ed:41:dc:e2:e1:5d:d3:18:01:03:32:43:05:6a: eb:92:56:56:48:ff:e2:f0:37:25:a2:cc:6f:00:19: 89:db:53:20:8f:48:91:70:69:52:1a:a4:6f:8b:df: 11:f2:10:04:c3:fe:98:0c:fe:5a:23:63:38:5c:d3: 1b:a7:4b:59:be:88:5d:83:c9:97:8e:28:44:69:59: b8:af:32:96:50:32:60:17:60:06:5f:65:79:74:17: 58:4d:e2:23:5f:5d:8a:10:b6:01:e1:fd:d3:04:3d: 3d:59:1f:3d:55:36:6e:f3:c0:2f:fa:7b:7b:44:d4: 15:64:0a:7a:83:ec:9e:7d:c8:75:9c:e2:29:68:9e: 01:da:3b:66:51:e7:b4:f1:cd:70:f1:07:d3:c5:c3: 9d:be:8b:2b:57:2b:2c:6f:6a:78:dc:54:ea:45:c8: e9:ae:d8:87:d1:78:ce:4a:7c:e2:14:e5:48:e4:ab: 30:1c:41:a2:3a:e8:2b:4d:43:a5:8a:d7:e2:e8:ec: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:81:51:4A:02:9B:D7:94:B0:E4:60:7E:8A:D7:F6:8C:C2:3E:E9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e4:6d:d8:c2:7a:1d:7c:27:72:06:63:0a:c2:ed:92:68:42: 12:0a:83:a4:28:e9:b4:a7:d9:2c:e0:0e:f0:98:0f:82:ac:c4: 7e:19:68:44:26:08:33:be:9c:5d:15:72:5a:a5:71:a1:ca:33: 97:27:ab:55:86:ad:8b:28:29:87:c6:77:63:9a:a2:1d:57:f4: c7:95:6a:22:6f:53:af:55:95:17:e9:0f:bf:a9:82:26:51:06: 8b:76:53:83:05:51:46:12:5d:ac:29:76:a7:18:c4:75:4c:df: da:52:92:9a:bb:63:b9:86:cf:5b:3e:c2:38:85:18:3b:0d:29: 2e:72:4a:fa:1e:12:54:97:de:45:22:14:21:c8:2b:6b:b5:ee: 53:bb:83:2b:45:de:9f:e6:7a:ee:28:32:f2:16:7b:0e:1e:75: 2c:dc:af:f4:81:47:45:94:c7:df:c2:93:54:f1:32:02:84:e6: 6a:bb:6d:3f:52:f2:e0:6f:96:f6:5d:65:5d:62:1c:21:d2:27: 41:7b:f5:5c:28:db:fd:8e:87:30:c8:a7:a2:8c:fe:d1:b2:86: aa:7d:ef:5f:b1:0d:4c:a0:61:ee:f9:bc:4c:e6:16:ac:01:11: 88:6c:bb:ba:9e:a5:67:7b:4c:4d:4e:33:ed:fb:d6:55:5f:ce: 9b:f2:8b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPKBbCFYa2JIMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MWVlMDJjMzItMDVlYi00MDZiLWEwYzgtNmNkYTFjMTUxY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7XrUVlrUAYwoeL/OdaSgkf6wYx7AXArFGh EYVxz42bnMbikfr99SiUuplEWBJdZYSooRyAQE0BIzN77UHc4uFd0xgBAzJDBWrr klZWSP/i8DclosxvABmJ21Mgj0iRcGlSGqRvi98R8hAEw/6YDP5aI2M4XNMbp0tZ vohdg8mXjihEaVm4rzKWUDJgF2AGX2V5dBdYTeIjX12KELYB4f3TBD09WR89VTZu 88Av+nt7RNQVZAp6g+yefch1nOIpaJ4B2jtmUee08c1w8QfTxcOdvosrVyssb2p4 3FTqRcjprtiH0XjOSnziFOVI5KswHEGiOugrTUOlitfi6OyG/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaBUUoCm9eUsORgforX9ozCPul9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZjQ0YTU2ODUtNjI1MS0z ODAwLTg5YjktNGRiZTQxYzBiZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbkbdjCeh18J3IGYwrC7ZJoQhIKg6Qo6bSn2SzgDvCYD4KsxH4ZaEQm CDO+nF0VclqlcaHKM5cnq1WGrYsoKYfGd2Oaoh1X9MeVaiJvU69VlRfpD7+pgiZR Bot2U4MFUUYSXawpdqcYxHVM39pSkpq7Y7mGz1s+wjiFGDsNKS5ySvoeElSX3kUi FCHIK2u17lO7gytF3p/meu4oMvIWew4edSzcr/SBR0WUx9/Ck1TxMgKE5mq7bT9S 8uBvlvZdZV1iHCHSJ0F79Vwo2/2OhzDIp6KM/tGyhqp971+xDUygYe75vEzmFqwB EYhsu7qepWd7TE1OM+371lVfzpvyi10= -----END CERTIFICATE-----Generated at Wed Oct 22 02:46:51 2025 by rpki-client