$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa File: 21f90337-d188-3ea1-97de-8c8ca38cf817.roa (raw, json) Hash identifier: pC1yNSA8n44e78l0lb+jH43/aqI12NeqP1rG8auISOg= Subject key identifier: 69:08:44:54:CE:06:E9:8A:6E:A6:AC:C0:60:90:4B:FF:64:F4:FB:E6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D4D5A78BC44C468D65BEC9380 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 16696 IP address blocks: 67.221.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:78:bc:44:c4:68:d6:5b:ec:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=24d481a7-3230-4b55-b5d6-3ef215c0a536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:58:32:a7:a9:b3:e6:ea:d7:be:c7:73:77: 28:41:0d:11:d1:aa:2d:81:85:33:a0:e6:0d:83:b4: d0:dc:ef:ab:1d:c1:c5:dc:12:f7:fa:ba:28:34:1a: d7:56:19:ef:5e:4a:43:e3:35:e2:ba:54:ac:a0:90: f5:a8:fc:06:6a:43:3a:44:90:71:7d:ec:36:45:2f: fa:2e:06:bc:6c:a3:31:5a:21:a9:43:e4:c7:30:71: a7:b5:9a:a9:84:c8:c9:1d:13:2e:ff:d1:95:cc:52: a7:26:fc:46:b6:b0:82:14:1a:77:c0:5a:9b:f7:f7: e6:87:52:da:bc:60:6e:03:30:ce:7b:f1:ce:d9:d7: 80:23:3e:d7:2e:48:1a:08:4b:71:cd:d5:48:76:d1: 0f:eb:83:3a:86:e2:c4:3e:eb:ab:9a:fb:bd:c7:f0: a9:91:ba:99:da:09:08:d2:27:d5:1e:a7:13:2e:52: 35:ab:57:05:75:65:42:b3:81:10:99:bc:46:31:25: c5:dc:cd:08:40:a1:bb:ca:b9:11:a7:9f:a9:65:9c: 7c:a8:84:2b:62:cc:d0:f9:de:91:5f:54:79:b7:20: 3a:aa:3c:b6:b5:40:f4:79:fe:b2:39:81:06:a9:0c: c1:4a:37:cc:49:30:c1:27:f2:ab:13:7b:94:55:84: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:08:44:54:CE:06:E9:8A:6E:A6:AC:C0:60:90:4B:FF:64:F4:FB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:cf:e3:a2:df:53:e5:0d:34:85:ff:99:9c:76:0f:95:2e:52: fb:43:cc:ce:b6:97:0f:7e:ff:2b:ab:99:47:85:c2:b3:31:98: 14:61:72:a6:b4:1f:1c:1a:65:5b:eb:2b:c2:59:5e:34:c4:16: a3:39:c1:12:90:87:e7:d4:55:62:18:f0:12:ba:e8:c6:90:2e: 8e:18:6f:12:46:42:58:8d:88:5d:61:c2:c5:b8:f6:bf:cc:83: c9:eb:fb:0f:88:e9:cf:42:ff:6c:c5:35:c6:6b:18:b2:8f:b6: c8:3d:48:62:f7:f3:96:b9:15:8b:4d:5a:6a:39:77:31:09:cc: 36:0b:a1:48:a7:f1:0c:3b:71:94:fb:7e:39:a0:49:a7:9a:55: 0e:45:8c:5b:04:a1:e4:60:cf:1a:73:53:75:ec:31:9d:1a:3a: 62:14:f6:17:0f:30:03:2f:5f:e9:1f:62:d7:aa:1e:77:28:a0: 50:a8:79:bd:ba:cf:e4:eb:33:50:db:21:cf:9a:db:78:90:be: ec:2e:4f:ce:26:cd:37:c9:49:f2:13:88:77:ef:c0:19:a8:1f: d2:e4:97:78:f4:dd:eb:f2:d7:08:b2:5d:8a:ec:a4:7f:ee:8c: 9c:2b:9a:80:6f:36:8d:1e:02:c4:15:2f:40:ab:df:b5:4a:ea: 7d:75:ad:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWni8RMRo1lvsk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MjRkNDgxYTctMzIzMC00YjU1LWI1ZDYtM2VmMjE1YzBhNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBJYMqeps+bq177Hc3coQQ0R0aotgYUzoOYN g7TQ3O+rHcHF3BL3+rooNBrXVhnvXkpD4zXiulSsoJD1qPwGakM6RJBxfew2RS/6 Lga8bKMxWiGpQ+THMHGntZqphMjJHRMu/9GVzFKnJvxGtrCCFBp3wFqb9/fmh1La vGBuAzDOe/HO2deAIz7XLkgaCEtxzdVIdtEP64M6huLEPuurmvu9x/CpkbqZ2gkI 0ifVHqcTLlI1q1cFdWVCs4EQmbxGMSXF3M0IQKG7yrkRp5+pZZx8qIQrYszQ+d6R X1R5tyA6qjy2tUD0ef6yOYEGqQzBSjfMSTDBJ/KrE3uUVYTeGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkIRFTOBumKbqaswGCQS/9k9PvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjFmOTAzMzctZDE4OC0z ZWExLTk3ZGUtOGM4Y2EzOGNmODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbP46LfU+UNNIX/mZx2D5UuUvtDzM62lw9+/yurmUeFwrMxmBRhcqa0 HxwaZVvrK8JZXjTEFqM5wRKQh+fUVWIY8BK66MaQLo4YbxJGQliNiF1hwsW49r/M g8nr+w+I6c9C/2zFNcZrGLKPtsg9SGL385a5FYtNWmo5dzEJzDYLoUin8Qw7cZT7 fjmgSaeaVQ5FjFsEoeRgzxpzU3XsMZ0aOmIU9hcPMAMvX+kfYteqHncooFCoeb26 z+TrM1DbIc+a23iQvuwuT84mzTfJSfITiHfvwBmoH9Lkl3j03evy1wiyXYrspH/u jJwrmoBvNo0eAsQVL0Cr37VK6n11reM= -----END CERTIFICATE-----Generated at Thu Apr 2 22:36:07 2026 by rpki-client