$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json) Hash identifier: LumJ/bQ26ZlEEMEviK6RUUUBEkehpuIkkNPux+LuTbE= Subject key identifier: B9:7C:D8:6C:AB:75:8B:67:D4:F3:1F:5D:CB:94:C6:2A:03:DA:ED:6E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A6CBFB964ACB366434E80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 67.221.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6c:bf:b9:64:ac:b3:66:43:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=8bbeb1c3-add4-430a-9e5e-00b0c3e7a6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cc:43:c0:96:cb:f1:bc:d5:1e:41:26:0d:f5: 3b:7a:8a:4d:eb:83:a8:79:a8:4c:e6:02:a3:3c:43: 11:29:af:7d:7c:c3:28:a7:60:01:57:49:4b:0a:0b: f3:71:2b:11:a2:99:c9:96:7a:e0:30:51:61:a6:95: 5a:56:f3:dc:df:d5:7b:c2:a6:77:f1:63:52:1f:74: a5:5e:f2:e1:21:04:43:da:45:39:dc:ea:cb:e4:d1: 5c:5c:74:1e:5f:6d:b4:0b:d4:27:79:6e:2a:ce:02: e9:a5:60:2d:87:1b:6b:95:9b:12:0f:b3:6c:0a:1b: df:12:7d:06:51:16:86:5b:c8:ad:6d:43:48:4e:55: 74:11:93:d6:f6:67:9c:ab:14:7d:4f:f1:ab:4e:26: 84:a3:df:f1:74:ca:36:60:c9:e1:f5:04:3c:ad:df: 91:27:b7:09:6a:a3:92:49:7e:86:2b:e1:73:e9:17: 42:f0:a5:3b:1e:8f:c7:3c:78:7b:fa:97:ed:90:67: 2b:50:ee:b0:bd:95:6e:e5:4f:c1:63:cb:d7:c6:bd: e2:68:6b:71:53:07:80:ab:f1:ef:de:ef:56:94:12: 16:b4:4b:8f:53:88:06:a6:99:4e:95:53:0b:15:da: d6:7c:dd:15:bc:0a:c1:db:0c:d9:18:0a:59:67:70: b6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7C:D8:6C:AB:75:8B:67:D4:F3:1F:5D:CB:94:C6:2A:03:DA:ED:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:89:a7:24:78:71:f0:85:ee:cc:05:db:29:f8:38:9d:ad:57: 02:b1:a3:4d:ca:6f:c2:cb:1d:f1:bc:3b:31:06:f5:45:47:ff: 8d:41:11:22:05:70:e9:ec:b1:81:df:3b:d6:8c:06:eb:a0:68: 26:c9:4e:1f:ea:9c:a9:52:c8:77:ec:68:18:25:e5:c5:73:9f: 30:17:f1:45:25:26:fc:df:b1:7f:0b:37:23:d1:bf:5b:ff:df: be:83:a8:e1:4e:5a:fc:c6:8c:2d:22:71:a5:6d:57:11:5d:28: 79:fe:1c:63:dd:5a:d4:14:ff:71:7b:bc:92:7b:6a:a3:bb:85: f9:b5:59:74:8c:c1:00:e9:a8:6a:a0:d7:d5:8b:ad:a1:4c:3b: 8f:f9:0c:6e:5f:da:6e:f0:e8:fe:3e:fe:da:4d:b7:3a:81:02: df:6e:b1:fb:e8:71:3d:3f:4a:6d:80:7b:99:02:98:f5:8d:a5: e7:17:08:44:aa:b2:1d:47:5e:1c:a3:c9:ef:3d:32:88:25:9a: ed:9b:ea:5e:4d:44:96:5d:b6:e4:27:bf:0f:c7:74:7a:4a:2a: 7d:0e:91:7a:6a:57:05:d3:d0:2f:1a:c4:61:13:a0:9b:d5:8a: 30:34:fc:d3:8e:85:2b:94:35:15:e5:47:2b:84:dd:d5:2e:f8: 2d:62:1f:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmy/uWSss2ZDToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OGJiZWIxYzMtYWRkNC00MzBhLTllNWUtMDBiMGMzZTdhNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksxDwJbL8bzVHkEmDfU7eopN64OoeahM5gKj PEMRKa99fMMop2ABV0lLCgvzcSsRopnJlnrgMFFhppVaVvPc39V7wqZ38WNSH3Sl XvLhIQRD2kU53OrL5NFcXHQeX220C9QneW4qzgLppWAthxtrlZsSD7NsChvfEn0G URaGW8itbUNITlV0EZPW9mecqxR9T/GrTiaEo9/xdMo2YMnh9QQ8rd+RJ7cJaqOS SX6GK+Fz6RdC8KU7Ho/HPHh7+pftkGcrUO6wvZVu5U/BY8vXxr3iaGtxUweAq/Hv 3u9WlBIWtEuPU4gGpplOlVMLFdrWfN0VvArB2wzZGApZZ3C2HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl82GyrdYtn1PMfXcuUxioD2u1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOWYyMjVhYWMtZTA3Ny0z NjIwLTgzOGMtMDcwM2JlOGIzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWJpyR4cfCF7swF2yn4OJ2tVwKxo03Kb8LLHfG8OzEG9UVH/41BESIF cOnssYHfO9aMBuugaCbJTh/qnKlSyHfsaBgl5cVznzAX8UUlJvzfsX8LNyPRv1v/ 376DqOFOWvzGjC0icaVtVxFdKHn+HGPdWtQU/3F7vJJ7aqO7hfm1WXSMwQDpqGqg 19WLraFMO4/5DG5f2m7w6P4+/tpNtzqBAt9usfvocT0/Sm2Ae5kCmPWNpecXCESq sh1HXhyjye89Moglmu2b6l5NRJZdtuQnvw/HdHpKKn0OkXpqVwXT0C8axGEToJvV ijA0/NOOhSuUNRXlRyuE3dUu+C1iH/g= -----END CERTIFICATE-----Generated at Thu Apr 2 22:39:38 2026 by rpki-client