$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa File: 68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json) Hash identifier: nO6cap2ZBzRX59thPZGycQkDXEyjDxRlhIGGuQKnZtI= Subject key identifier: 0B:6E:CC:40:D9:E8:AD:E7:1E:42:CC:AC:B1:BC:22:75:7D:01:DB:5A Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BE391CF9441FB62F7D80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 67.221.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:be:39:1c:f9:44:1f:b6:2f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fdd2f6c7-df6a-43dd-ba88-2d5c7afd0a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5f:05:32:1d:04:9d:e2:5d:10:c8:6f:dd:bd: 5e:92:e3:8f:7f:d4:9f:23:4d:97:a4:db:1b:18:5c: bb:66:92:3e:b3:9e:c1:38:99:a8:76:dd:8e:6c:b1: 9d:1b:74:88:4b:a1:29:8a:30:aa:6e:61:09:2b:f6: 0c:f6:ad:18:8a:4f:38:fb:f6:b0:d7:f1:a9:f7:2d: 02:99:9f:e1:01:fe:4b:96:28:c3:63:4f:da:f9:ed: 75:fd:b9:bf:67:ac:4c:e9:c2:a0:ea:35:d0:e2:60: 37:69:cf:3f:0e:43:24:33:ee:4c:b2:ac:2e:c3:62: 4c:11:5a:fa:ab:ab:58:ac:f7:09:bf:5c:27:bc:de: 17:85:13:0c:31:69:01:48:d7:60:c5:d6:62:f5:f8: 88:ca:2e:67:96:3c:1b:6b:44:15:21:40:40:43:5f: d4:50:2b:df:c8:5d:44:55:98:b5:b5:6d:0c:96:33: 52:52:e2:c3:07:e7:b1:22:3b:e1:49:cd:b6:14:f3: b8:f5:55:a4:fe:d7:cc:68:e0:86:a6:e1:19:a0:87: e7:1c:cb:b0:9d:cf:63:e5:e5:cb:96:41:1f:70:ea: fd:89:d9:95:16:1b:9c:ed:e5:8f:94:1e:8b:08:65: 90:bf:a8:b1:93:ec:b8:02:f8:da:d1:3f:3e:53:5e: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6E:CC:40:D9:E8:AD:E7:1E:42:CC:AC:B1:BC:22:75:7D:01:DB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:75:b3:a4:0d:92:59:3b:7a:be:d5:02:87:99:ae:52:18:a1: 1e:6c:fb:05:5b:e0:43:71:04:cf:7d:ce:da:56:74:dc:cb:b4: 36:b9:5b:8e:be:f6:c6:04:8f:5b:17:f2:a2:e6:e7:74:69:34: 74:78:22:f7:ad:c8:33:b5:e9:45:7b:1c:56:5f:f8:c7:10:2a: 50:0b:11:22:98:96:c6:f4:3c:56:de:3e:3e:9c:ed:09:02:23: ef:75:d1:0a:d8:25:c3:64:31:08:95:6b:f6:75:17:65:68:48: bd:2c:d5:06:66:38:b8:a7:d9:68:78:a1:19:44:9f:6d:42:fd: 32:ff:56:7e:b6:0a:f8:50:17:a8:41:95:09:8c:e5:ad:dc:db: af:4e:63:9c:58:b2:7a:72:c6:82:b3:a6:73:36:81:d5:18:7d: 54:5b:39:e3:28:01:40:47:4b:af:24:99:a4:ff:af:8c:20:10: f9:01:1b:3b:d1:81:c1:81:3c:a1:71:b5:13:19:ca:1c:09:ec: e5:6f:23:c4:7d:b5:f4:66:24:ba:d2:0c:69:61:b7:b0:70:3b: 80:f9:39:95:73:76:d4:dd:74:b1:50:23:d0:d4:92:57:2d:a6: e5:29:b6:31:fb:46:ed:a0:6b:3b:64:44:4e:b6:15:eb:5b:14: c4:ac:31:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB745HPlEH7YvfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmRkMmY2YzctZGY2YS00M2RkLWJhODgtMmQ1YzdhZmQwYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV8FMh0EneJdEMhv3b1ekuOPf9SfI02XpNsb GFy7ZpI+s57BOJmodt2ObLGdG3SIS6EpijCqbmEJK/YM9q0Yik84+/aw1/Gp9y0C mZ/hAf5LlijDY0/a+e11/bm/Z6xM6cKg6jXQ4mA3ac8/DkMkM+5Msqwuw2JMEVr6 q6tYrPcJv1wnvN4XhRMMMWkBSNdgxdZi9fiIyi5nljwba0QVIUBAQ1/UUCvfyF1E VZi1tW0MljNSUuLDB+exIjvhSc22FPO49VWk/tfMaOCGpuEZoIfnHMuwnc9j5eXL lkEfcOr9idmVFhuc7eWPlB6LCGWQv6ixk+y4Avja0T8+U17/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtuzEDZ6K3nHkLMrLG8InV9AdtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjhiZTAwZWEtN2EwOS0z ZWEwLWJiYTQtODU2MzNmZGM3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd1s6QNklk7er7VAoeZrlIYoR5s+wVb4ENxBM99ztpWdNzLtDa5W46+ 9sYEj1sX8qLm53RpNHR4IvetyDO16UV7HFZf+McQKlALESKYlsb0PFbePj6c7QkC I+910QrYJcNkMQiVa/Z1F2VoSL0s1QZmOLin2Wh4oRlEn21C/TL/Vn62CvhQF6hB lQmM5a3c269OY5xYsnpyxoKzpnM2gdUYfVRbOeMoAUBHS68kmaT/r4wgEPkBGzvR gcGBPKFxtRMZyhwJ7OVvI8R9tfRmJLrSDGlht7BwO4D5OZVzdtTddLFQI9DUklct puUptjH7Ru2gaztkRE62FetbFMSsMZU= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:04 2025 by rpki-client