$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa File: 3be287c7-ee38-3701-a80a-c69f456e79e4.roa (raw, json) Hash identifier: iAfkdsfHIh6dRA8qXO6akBfYeW9QkXDalbLcusU5V2w= Subject key identifier: 28:65:22:DB:00:4C:F1:43:14:EA:89:DE:A6:17:15:8B:D7:0F:9C:0E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D4D5A78AA595B5706DB16C360 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 16696 IP address blocks: 67.221.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:78:aa:59:5b:57:06:db:16:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=f20058a7-a6e8-40cd-a5ff-be9bbd85b374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:4e:79:ef:1e:68:a4:a8:52:7e:5d:cb:4d: d0:7a:3b:5f:97:ca:fa:28:ef:42:88:aa:5a:e7:69: 0e:46:98:7b:68:12:10:82:1d:ca:27:18:24:c4:5a: 72:89:fb:a1:67:57:fe:d1:bb:42:41:f4:4b:c7:b7: b4:c3:5a:1b:0e:79:4d:c7:cc:56:67:f3:8e:00:7c: 1e:1e:f9:b6:67:0a:e8:9c:1c:a4:c8:49:bc:b7:b2: 94:01:54:4e:5b:a2:84:dd:29:3b:22:bd:5b:b6:e1: a1:37:83:5b:5b:db:e1:27:0e:ce:33:7e:fc:a0:28: 7f:4a:df:bc:e6:58:ae:36:f3:3b:86:57:1f:a8:5f: 50:e1:96:ed:80:6d:7e:fe:58:c3:ff:80:cc:12:9c: ac:b2:14:10:26:c1:b4:ae:32:88:25:0f:87:fe:ac: 84:82:2e:85:82:32:f2:a8:d6:67:61:ee:fb:ba:e6: 90:79:0d:ac:a1:bd:fe:6f:a3:87:44:3f:18:c6:e6: 01:e4:3d:f6:dd:43:d5:f1:09:77:2f:f3:28:c6:f8: 8f:f5:f5:75:5f:de:3e:61:34:cb:62:13:21:76:46: bc:24:6d:7e:b3:87:bd:5c:ab:b0:e6:fb:b4:c9:60: 6b:d9:17:91:bd:07:ed:81:be:73:b8:75:fa:15:a3: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:65:22:DB:00:4C:F1:43:14:EA:89:DE:A6:17:15:8B:D7:0F:9C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3be287c7-ee38-3701-a80a-c69f456e79e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:30:30:53:a7:ea:0b:cd:da:db:d8:45:96:e0:1b:be:9a:6b: 44:d0:20:de:84:e4:c0:10:aa:4e:39:01:4a:91:d3:0b:be:71: cb:03:8f:99:38:23:9a:30:91:f7:b2:1c:45:33:c2:c9:7d:2d: 56:c6:a4:ee:95:df:7b:64:f7:d1:6e:ef:d5:14:14:09:ec:73: dd:c5:c4:ff:ea:b7:fb:8b:f4:ec:16:f9:66:57:9d:e9:f5:9f: dc:ec:8f:63:c1:5e:b3:35:18:1d:e4:0f:e0:36:50:f4:33:ba: c8:63:09:ea:c2:8c:b5:dd:8e:dc:af:fc:6d:0f:c3:fa:55:f8: b2:af:87:f9:aa:fb:df:ba:0b:34:12:7d:f1:2c:44:6a:ab:b4: 2f:a9:1e:c6:b7:cf:2e:e1:c5:9d:ac:df:02:4f:60:5f:40:1c: 54:f9:be:7d:ef:0d:2f:27:f2:9b:c1:4d:34:44:d0:34:90:0b: 9f:26:c7:d0:d1:d0:4e:a5:23:c3:8f:97:53:fa:bb:46:6e:dc: d7:67:bd:1f:25:ee:46:5e:35:38:1f:87:d3:13:48:41:9f:70: 43:3e:28:fb:8c:a5:86:45:80:6b:ab:34:c3:89:16:60:c1:fa: ff:29:2a:4f:67:e6:64:95:f0:ea:cc:49:a4:0a:30:7b:9c:ab: 28:df:04:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWniqWVtXBtsWw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjIwMDU4YTctYTZlOC00MGNkLWE1ZmYtYmU5YmJkODViMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVJOee8eaKSoUn5dy03Qejtfl8r6KO9CiKpa 52kORph7aBIQgh3KJxgkxFpyifuhZ1f+0btCQfRLx7e0w1obDnlNx8xWZ/OOAHwe Hvm2ZwronBykyEm8t7KUAVROW6KE3Sk7Ir1btuGhN4NbW9vhJw7OM378oCh/St+8 5liuNvM7hlcfqF9Q4ZbtgG1+/ljD/4DMEpysshQQJsG0rjKIJQ+H/qyEgi6FgjLy qNZnYe77uuaQeQ2sob3+b6OHRD8YxuYB5D323UPV8Ql3L/MoxviP9fV1X94+YTTL YhMhdka8JG1+s4e9XKuw5vu0yWBr2ReRvQftgb5zuHX6FaN26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChlItsATPFDFOqJ3qYXFYvXD5wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2JlMjg3YzctZWUzOC0z NzAxLWE4MGEtYzY5ZjQ1NmU3OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8wMFOn6gvN2tvYRZbgG76aa0TQIN6E5MAQqk45AUqR0wu+ccsDj5k4 I5owkfeyHEUzwsl9LVbGpO6V33tk99Fu79UUFAnsc93FxP/qt/uL9OwW+WZXnen1 n9zsj2PBXrM1GB3kD+A2UPQzushjCerCjLXdjtyv/G0Pw/pV+LKvh/mq+9+6CzQS ffEsRGqrtC+pHsa3zy7hxZ2s3wJPYF9AHFT5vn3vDS8n8pvBTTRE0DSQC58mx9DR 0E6lI8OPl1P6u0Zu3NdnvR8l7kZeNTgfh9MTSEGfcEM+KPuMpYZFgGurNMOJFmDB +v8pKk9n5mSV8OrMSaQKMHucqyjfBFc= -----END CERTIFICATE-----Generated at Thu Apr 2 22:39:43 2026 by rpki-client