$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa File: 5016c054-af10-3049-934f-3a7fb31397b9.roa (raw, json) Hash identifier: 8bZiN2yVAiYvjSGIt3mINq3FTwsZywuKzjuTx8pEP2M= Subject key identifier: B7:EE:00:5F:91:ED:D7:98:EA:EE:13:2C:F4:AB:AE:63:05:B3:46:15 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BE272DA99D61876BA940 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 67.221.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:be:27:2d:a9:9d:61:87:6b:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3806982f-e471-40d5-88a7-ef88bac36cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:8f:da:80:ed:39:44:0e:c9:21:bb:7a:82: b6:e2:a3:a9:ed:8a:02:55:fd:4c:dd:7d:65:1e:76: 50:9d:e5:12:65:d4:78:65:fe:a1:40:f4:52:33:9c: 0e:38:c8:6e:e5:68:eb:d4:2b:62:cd:c0:d0:dd:c1: 19:df:6a:c4:85:cc:a6:41:83:7a:c2:77:16:7b:6c: 80:b8:18:94:c0:64:1e:ce:4c:13:17:63:5e:e5:8a: 4a:80:85:d5:f9:b6:2b:0e:34:23:d9:81:73:63:d8: c9:0f:a9:b7:f5:d7:20:12:34:96:10:48:be:3f:1b: cf:c7:cc:ab:46:e7:b3:a3:53:df:d6:74:50:c9:23: b3:9f:1d:7c:09:90:73:46:95:94:7d:40:75:3e:00: d6:23:b1:6f:02:d1:fe:e5:5d:a4:b9:77:f7:87:2e: b6:bc:1b:f0:b3:af:43:20:eb:ce:99:86:9e:0b:2f: 5a:58:d4:67:9b:24:35:5d:22:65:b4:6a:f1:b3:40: 9c:50:5f:29:c7:6c:6b:67:bb:d5:58:ce:e8:e6:8b: 1e:b4:99:ff:82:be:2c:56:88:3b:36:5e:6a:e5:94: 21:4f:87:e1:cc:3e:1b:60:c5:6b:15:0a:67:13:17: 5c:f2:22:1b:c8:a2:19:11:52:a6:45:32:eb:25:c1: cb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EE:00:5F:91:ED:D7:98:EA:EE:13:2C:F4:AB:AE:63:05:B3:46:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3f:23:a9:4b:02:48:70:6d:ae:26:68:13:37:69:46:b4:71: 9b:7b:6d:b2:aa:36:e6:79:5c:57:9c:d3:a8:fa:d1:cd:4a:cd: 95:e5:2f:71:3b:bb:f4:f7:9b:a1:a5:af:03:86:f8:e6:cc:2e: 6d:a3:ec:4f:ae:a1:4f:dc:b4:2f:bf:db:6f:cf:07:3d:70:08: e5:6e:c1:1c:b1:77:31:46:c7:4c:7f:35:b3:95:3f:b8:4d:b8: 05:bf:e4:d7:ec:b4:46:1f:ed:b1:10:ee:2f:57:60:a1:ed:a3: 85:01:de:bc:0f:62:f7:6b:04:b7:c1:be:a4:5c:df:a4:4e:48: 32:dd:ed:81:f7:61:4a:a4:5b:05:87:51:b7:db:9a:32:1c:62: 93:3f:82:c4:73:42:88:6a:25:71:7b:8f:9e:b5:c9:6f:03:c9: 80:61:22:fe:1f:de:69:c6:db:29:ee:f1:0f:84:57:4d:3c:cf: 1e:08:e6:4c:6c:54:7a:82:52:41:8e:69:bf:09:ad:88:2a:0c: 39:e1:b7:9e:5d:25:f4:8a:b3:47:69:3f:c0:b8:96:9d:43:53: c6:cc:1d:5d:7c:e9:04:d3:c2:29:a5:6c:7a:05:97:6b:72:7b: 9b:5f:22:1a:51:81:1f:d3:a7:56:e2:c7:d4:8a:de:0f:25:ba: 07:9f:2d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB74nLamdYYdrqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzgwNjk4MmYtZTQ3MS00MGQ1LTg4YTctZWY4OGJhYzM2Y2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoCP2oDtOUQOySG7eoK24qOp7YoCVf1M3X1l HnZQneUSZdR4Zf6hQPRSM5wOOMhu5Wjr1CtizcDQ3cEZ32rEhcymQYN6wncWe2yA uBiUwGQezkwTF2Ne5YpKgIXV+bYrDjQj2YFzY9jJD6m39dcgEjSWEEi+PxvPx8yr Ruezo1Pf1nRQySOznx18CZBzRpWUfUB1PgDWI7FvAtH+5V2kuXf3hy62vBvws69D IOvOmYaeCy9aWNRnmyQ1XSJltGrxs0CcUF8px2xrZ7vVWM7o5osetJn/gr4sVog7 Nl5q5ZQhT4fhzD4bYMVrFQpnExdc8iIbyKIZEVKmRTLrJcHLywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfuAF+R7deY6u4TLPSrrmMFs0YVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNTAxNmMwNTQtYWYxMC0z MDQ5LTkzNGYtM2E3ZmIzMTM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw/I6lLAkhwba4maBM3aUa0cZt7bbKqNuZ5XFec06j60c1KzZXlL3E7 u/T3m6GlrwOG+ObMLm2j7E+uoU/ctC+/22/PBz1wCOVuwRyxdzFGx0x/NbOVP7hN uAW/5NfstEYf7bEQ7i9XYKHto4UB3rwPYvdrBLfBvqRc36ROSDLd7YH3YUqkWwWH UbfbmjIcYpM/gsRzQohqJXF7j561yW8DyYBhIv4f3mnG2ynu8Q+EV008zx4I5kxs VHqCUkGOab8JrYgqDDnht55dJfSKs0dpP8C4lp1DU8bMHV186QTTwimlbHoFl2ty e5tfIhpRgR/Tp1bix9SK3g8lugefLTM= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:06 2025 by rpki-client