$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa File: 0545dbf9-118c-39b7-9f00-b538a6304e31.roa (raw, json) Hash identifier: i4Eis9PZOJ3CV/5aMco++eWbL7eAD5vOKuyYGw2L5as= Subject key identifier: FF:43:DC:08:AE:51:D9:7F:56:DA:5C:D1:97:B9:6A:69:F3:4F:B4:00 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D4D5A7889D1A031EF7492BC48 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 16696 IP address blocks: 67.221.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:78:89:d1:a0:31:ef:74:92:bc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=b9fef92c-7080-4674-9613-4d8628ac6235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:7d:de:0f:03:12:a3:7d:29:4a:b8:26:fe: 65:27:df:4c:b9:11:17:f0:56:ba:9b:f1:83:c0:79: 8b:a0:05:9c:c7:1e:76:44:68:a8:bd:84:2e:42:61: a2:83:15:ce:60:08:70:f5:1a:10:5f:41:c6:11:05: 5f:d6:fa:78:20:9a:4d:93:f7:2f:de:01:40:0d:25: 67:ca:8e:d4:7a:95:1d:ce:3d:84:60:1c:6b:e0:56: 6e:cb:96:b3:49:6e:89:fa:40:76:4f:d2:d8:03:e9: 2f:ec:74:3f:d5:32:f5:e5:8c:a2:45:6b:a3:07:01: 9f:49:95:52:33:77:e9:ce:0c:88:2b:96:fa:f6:a8: 88:98:6a:5e:14:2d:38:fb:fd:b8:ec:93:97:23:ee: b8:ae:75:76:ad:20:a7:c7:51:f8:0a:df:74:3b:0f: d3:d3:30:f0:cc:7f:35:e6:2c:4c:e4:7d:0a:2c:e5: c1:4b:f0:85:00:29:86:5c:c2:63:63:3a:d6:fb:2a: f0:fb:aa:86:17:9e:ac:76:89:f5:7b:8c:52:3c:98: 48:e5:c4:b8:ff:97:84:fe:36:87:77:a7:81:67:13: 6c:78:b5:e3:99:4d:6e:81:ea:80:d6:e7:29:47:83: 79:99:a1:9c:76:10:b6:4b:c7:50:09:ca:50:a2:c4: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:43:DC:08:AE:51:D9:7F:56:DA:5C:D1:97:B9:6A:69:F3:4F:B4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0d:97:19:8c:6d:47:21:b6:ce:48:a3:13:13:01:45:36:e3: 79:53:6d:a9:ae:13:30:9f:bb:4d:8c:ab:e4:b9:f8:06:54:e1: 10:c4:13:14:79:50:e3:dc:5c:5b:05:c1:65:eb:da:1e:c4:e5: f2:79:33:c9:23:52:de:ab:20:52:c9:fa:fb:f6:81:bd:e1:fd: 1a:d6:0a:c6:8d:bf:b7:4c:54:26:cf:1c:0a:ec:3c:94:98:19: 71:04:fb:bb:c9:aa:9a:5e:a8:ef:ff:49:4a:01:97:b7:81:fd: 26:3f:0c:5f:d8:79:48:b7:2e:cf:37:01:83:f8:7d:70:6b:ba: f4:0c:14:c5:24:41:ee:4b:ee:3f:77:3e:1b:54:43:7c:a1:9a: 1b:d3:02:a5:b2:61:aa:ee:08:6c:54:89:88:05:50:8a:97:5c: 4e:0d:4e:4e:20:7f:b2:dd:78:0e:fa:14:59:67:41:9d:7f:c1: 4b:3e:51:8d:d9:78:78:b4:5d:00:18:c9:68:db:95:8c:33:4e: 6d:11:69:b2:90:91:dc:e1:7b:c1:69:b6:a0:da:d4:5a:17:51: 0d:49:59:b4:19:b6:30:a7:23:b8:4b:c8:64:98:49:ea:ea:77: bb:7e:fd:67:4b:b6:9a:b9:60:84:64:11:d2:10:b6:c0:7e:46: 08:89:85:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWniJ0aAx73SSvEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YjlmZWY5MmMtNzA4MC00Njc0LTk2MTMtNGQ4NjI4YWM2MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvF93g8DEqN9KUq4Jv5lJ99MuREX8Fa6m/GD wHmLoAWcxx52RGiovYQuQmGigxXOYAhw9RoQX0HGEQVf1vp4IJpNk/cv3gFADSVn yo7UepUdzj2EYBxr4FZuy5azSW6J+kB2T9LYA+kv7HQ/1TL15YyiRWujBwGfSZVS M3fpzgyIK5b69qiImGpeFC04+/247JOXI+64rnV2rSCnx1H4Ct90Ow/T0zDwzH81 5ixM5H0KLOXBS/CFACmGXMJjYzrW+yrw+6qGF56sdon1e4xSPJhI5cS4/5eE/jaH d6eBZxNseLXjmU1ugeqA1ucpR4N5maGcdhC2S8dQCcpQosQ1GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9D3AiuUdl/Vtpc0Ze5amnzT7QAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDU0NWRiZjktMTE4Yy0z OWI3LTlmMDAtYjUzOGE2MzA0ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsNlxmMbUchts5IoxMTAUU243lTbamuEzCfu02Mq+S5+AZU4RDEExR5 UOPcXFsFwWXr2h7E5fJ5M8kjUt6rIFLJ+vv2gb3h/RrWCsaNv7dMVCbPHArsPJSY GXEE+7vJqppeqO//SUoBl7eB/SY/DF/YeUi3Ls83AYP4fXBruvQMFMUkQe5L7j93 PhtUQ3yhmhvTAqWyYaruCGxUiYgFUIqXXE4NTk4gf7LdeA76FFlnQZ1/wUs+UY3Z eHi0XQAYyWjblYwzTm0RabKQkdzhe8FptqDa1FoXUQ1JWbQZtjCnI7hLyGSYSerq d7t+/WdLtpq5YIRkEdIQtsB+RgiJhZY= -----END CERTIFICATE-----Generated at Thu Apr 2 22:35:09 2026 by rpki-client