$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json) Hash identifier: pPvshhxm2BNetHIXJffk+DfhL/fNra3PKpuLWCX5KrA= Subject key identifier: 6C:E4:AC:63:AC:1B:13:18:F2:41:8D:6D:02:8A:0C:D9:02:74:DB:D2 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BE051034DFE11C7CF700 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 67.221.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:be:05:10:34:df:e1:1c:7c:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=622c6247-1fd7-41c6-ae1f-5ce433a4a0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:66:6c:9e:82:60:bf:06:bc:0b:dc:ff:93: 76:9d:f1:f7:3b:2b:eb:44:ed:db:e4:5e:99:b2:45: c1:3f:9f:e6:82:b3:4c:d7:25:c1:6e:a2:34:1b:a9: c4:93:72:c8:40:d4:2f:35:a6:76:aa:93:59:8a:d3: 86:a9:05:56:aa:9c:f6:85:e5:79:59:e9:25:cd:6b: 4c:db:22:b7:d6:de:7f:86:32:4e:d3:79:2e:d6:c8: 7b:f9:ba:fd:89:da:51:18:e2:8c:09:43:40:35:dd: bb:96:db:59:6a:b2:ab:1b:05:4d:1c:d2:aa:c5:83: 5e:bd:e8:bf:7e:82:53:2b:3f:8b:ca:2e:40:db:68: 8c:00:d2:17:b3:64:4f:24:e9:b4:cb:65:c2:86:8f: 44:9d:44:74:96:32:be:37:c2:cb:fd:ef:8c:4c:8d: 35:1d:08:a5:6b:21:76:8d:ec:b6:4e:47:d7:ca:2e: d3:33:a8:dd:01:b9:0f:dc:2a:d6:b5:c5:cd:10:fc: 5a:f6:42:58:28:84:d0:cd:a8:78:59:71:6b:35:5a: 83:62:49:bf:43:49:9e:b1:18:14:10:24:f2:c8:2d: 2d:ac:d5:ba:be:37:02:9d:c6:f6:19:7d:9a:aa:88: f1:ca:a8:68:c7:34:aa:9d:c2:50:ed:42:d9:32:d2: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E4:AC:63:AC:1B:13:18:F2:41:8D:6D:02:8A:0C:D9:02:74:DB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0a:d2:55:64:1b:d9:49:2a:9f:e2:e5:7c:02:21:c4:84:4a: 4a:d2:0d:c7:3d:82:a0:ad:b8:c8:20:c6:99:6f:e0:2b:d6:10: cd:c9:30:41:e5:69:c3:12:2b:0b:60:ee:ea:ee:fe:28:b2:d1: ff:95:96:9e:d7:b5:2d:ec:3c:0f:ce:ee:72:fd:f9:b6:5c:ca: ec:12:ab:5c:a1:5a:53:26:d6:c9:cd:e4:44:5b:7c:1d:0f:08: 86:18:31:f5:74:49:3f:b9:bf:b6:92:55:a7:12:64:fe:b6:89: f6:ff:c2:49:4f:f7:98:30:f7:10:89:ce:e0:08:cd:74:97:eb: 88:81:ed:1f:d0:78:aa:fa:2f:d5:b0:90:74:ae:0a:84:4f:ac: e4:34:2f:ef:cd:fc:98:a2:33:5e:42:99:18:cb:6f:91:03:39: 70:79:eb:91:50:b8:3e:ad:fa:06:5a:e2:2f:7d:9b:8d:47:42: 27:7c:d7:98:dc:4a:e6:53:a2:fc:07:e0:98:e1:60:9a:1c:7f: 42:68:43:b0:4f:d9:7f:cc:9a:8e:46:24:78:7e:95:49:3c:07: 75:fc:88:7c:99:a0:27:a4:1f:47:10:71:79:89:42:ba:19:dc: a2:19:00:e5:dd:74:be:44:8a:34:ba:e3:18:d0:95:d2:10:9e: 5f:2f:cf:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB74FEDTf4Rx89wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NjIyYzYyNDctMWZkNy00MWM2LWFlMWYtNWNlNDMzYTRhMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3VmbJ6CYL8GvAvc/5N2nfH3OyvrRO3b5F6Z skXBP5/mgrNM1yXBbqI0G6nEk3LIQNQvNaZ2qpNZitOGqQVWqpz2heV5WeklzWtM 2yK31t5/hjJO03ku1sh7+br9idpRGOKMCUNANd27lttZarKrGwVNHNKqxYNevei/ foJTKz+Lyi5A22iMANIXs2RPJOm0y2XCho9EnUR0ljK+N8LL/e+MTI01HQilayF2 jey2TkfXyi7TM6jdAbkP3CrWtcXNEPxa9kJYKITQzah4WXFrNVqDYkm/Q0mesRgU ECTyyC0trNW6vjcCncb2GX2aqojxyqhoxzSqncJQ7ULZMtLJjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzkrGOsGxMY8kGNbQKKDNkCdNvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOWYyMjVhYWMtZTA3Ny0z NjIwLTgzOGMtMDcwM2JlOGIzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgK0lVkG9lJKp/i5XwCIcSESkrSDcc9gqCtuMggxplv4CvWEM3JMEHl acMSKwtg7uru/iiy0f+Vlp7XtS3sPA/O7nL9+bZcyuwSq1yhWlMm1snN5ERbfB0P CIYYMfV0ST+5v7aSVacSZP62ifb/wklP95gw9xCJzuAIzXSX64iB7R/QeKr6L9Ww kHSuCoRPrOQ0L+/N/JiiM15CmRjLb5EDOXB565FQuD6t+gZa4i99m41HQid815jc SuZTovwH4JjhYJocf0JoQ7BP2X/Mmo5GJHh+lUk8B3X8iHyZoCekH0cQcXmJQroZ 3KIZAOXddL5EijS64xjQldIQnl8vzxM= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:49 2025 by rpki-client