$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa File: 3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa (raw, json) Hash identifier: WJs7S9nps1HnkyDnx8jd9ck/a+cmgbt9Vn0VWoYjqrA= Subject key identifier: 88:FE:72:22:4D:3E:32:B2:90:7B:75:5D:0A:57:B3:10:86:78:5C:CF Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Certificate serial: 4BECE56C903C579B59A66D08B92E5E4BEA87D133 Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa Signing time: Fri 16 Oct 2026 15:36:20 +0000 ROA not before: Fri 16 Oct 2026 15:31:20 +0000 ROA not after: Fri 15 Oct 2027 15:36:20 +0000 asID: 7018 IP address blocks: 147.189.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 09:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ec:e5:6c:90:3c:57:9b:59:a6:6d:08:b9:2e:5e:4b:ea:87:d1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Validity Not Before: Oct 16 15:31:20 2026 GMT Not After : Oct 15 15:36:20 2027 GMT Subject: CN=88FE72224D3E32B2907B755D0A57B31086785CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:18:1b:3e:a1:90:3c:36:72:4d:a0:0d:6c: 17:9a:c6:bf:1a:ed:46:d4:1b:4d:af:a8:d9:b7:52: 39:9e:3a:6b:81:2b:29:88:3b:9f:ee:40:99:75:e0: 61:61:df:9b:fd:c7:86:15:5b:7b:38:53:33:05:46: fd:bb:12:7b:45:f9:96:ec:c4:d9:ce:71:8b:aa:73: e1:20:f5:ca:af:9a:d7:8f:ef:c9:fa:fb:56:c5:7b: 91:c4:22:1a:c4:5c:c5:c2:6a:95:42:09:b9:08:92: 4a:65:5b:79:8e:56:23:1c:5f:ee:60:9c:54:10:64: 37:35:84:b7:c4:05:1f:67:54:d2:d0:6a:22:d4:90: be:84:d7:e0:ff:b2:25:b7:29:c9:99:24:b6:f5:05: 60:11:9c:a1:f5:aa:c2:7c:6b:0e:ff:36:2c:b5:77: aa:a2:31:86:38:00:4b:62:09:d8:f6:b3:89:f4:6d: 5b:e8:6a:8d:76:b2:85:c6:e3:20:c0:d4:20:06:38: c8:dc:fd:8c:80:10:c5:7b:9f:78:e6:a1:36:f3:93: 57:9f:e6:49:f7:b6:1e:f1:bd:26:b0:06:86:47:0a: ba:31:87:38:78:42:17:38:a5:6a:79:9f:53:98:50: 50:29:45:76:c6:5a:44:3a:7a:6a:6e:ac:f5:84:ef: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FE:72:22:4D:3E:32:B2:90:7B:75:5D:0A:57:B3:10:86:78:5C:CF X509v3 Authority Key Identifier: keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.152.0/23 Signature Algorithm: sha256WithRSAEncryption 61:b0:1b:7d:16:83:f5:54:4d:98:b6:94:7c:8f:8e:8f:85:e3: cd:2b:e0:69:09:b0:1f:81:5e:51:9e:c8:cc:50:97:4b:c0:9d: 7f:b4:b6:c6:04:33:5b:97:f6:f8:79:b9:f8:9a:a6:ab:2a:44: d9:00:aa:11:93:90:a2:6f:3b:51:38:7a:6d:20:ef:d5:16:e4: 81:d1:5d:05:70:eb:0e:be:58:a6:17:09:b2:20:aa:e6:b3:4e: 6a:37:af:d6:be:5c:ea:ee:c2:89:35:c1:34:2e:e5:38:31:02: 67:0c:da:34:0e:fc:ec:03:e2:35:bf:32:fe:d0:9f:49:a6:14: fc:c0:0c:18:7d:b0:58:a7:3d:69:24:b4:7d:20:ff:40:8d:bb: a4:f1:2d:3f:7f:cf:aa:97:43:e3:aa:e0:11:12:63:b3:72:fd: 37:dc:eb:f6:09:35:ba:fa:0a:ce:e1:a0:89:d8:42:9f:f7:10: ce:56:59:4f:9e:03:45:87:46:9d:d7:8b:47:52:ee:e9:db:bc: 3c:a2:05:50:fc:58:aa:23:2e:f2:f8:a2:60:7e:ce:a7:97:55: e2:7a:c6:46:49:45:61:19:9f:f5:76:ed:c9:d2:28:bf:a2:46: e0:36:73:b6:2e:72:f7:9f:89:0f:cc:f0:73:db:6e:4f:09:3a: 32:0b:65:5c -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUS+zlbJA8V5tZpm0IuS5eS+qH0TMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJl YTMwMjU5NzdiYTk2YzMxNWIwHhcNMjYxMDE2MTUzMTIwWhcNMjcxMDE1MTUzNjIw WjAzMTEwLwYDVQQDEyg4OEZFNzIyMjREM0UzMkIyOTA3Qjc1NUQwQTU3QjMxMDg2 Nzg1Q0NGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm4YGz6hkDw2 ck2gDWwXmsa/Gu1G1BtNr6jZt1I5njprgSspiDuf7kCZdeBhYd+b/ceGFVt7OFMz BUb9uxJ7RfmW7MTZznGLqnPhIPXKr5rXj+/J+vtWxXuRxCIaxFzFwmqVQgm5CJJK ZVt5jlYjHF/uYJxUEGQ3NYS3xAUfZ1TS0Goi1JC+hNfg/7IltynJmSS29QVgEZyh 9arCfGsO/zYstXeqojGGOABLYgnY9rOJ9G1b6GqNdrKFxuMgwNQgBjjI3P2MgBDF e5945qE285NXn+ZJ97Ye8b0msAaGRwq6MYc4eEIXOKVqeZ9TmFBQKUV2xlpEOnpq bqz1hO/1vwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIj+ciJNPjKykHt1XQpXsxCG eFzPMB8GA1UdIwQYMBaAFB6ScJf5Yc1ixoQiESBnkVhWiOprMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkY2M2MWI0MjY1MWQ2LzAv MUU5MjcwOTdGOTYxQ0Q2MkM2ODQyMjExMjA2NzkxNTg1Njg4RUE2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMzLTI0YWQxYjdmMDc4NS9kNTg1 ZGRjNzI0ODBmNjk3MzZkMGRiZmI0ZmI3YmJiYmVhMzAyNTk3N2JhOTZjMzE1Yi5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGNj NjFiNDI2NTFkNi8wLzMxMzQzNzJlMzEzODM5MmUzMTM1MzIyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZO9mDANBgkqhkiG9w0BAQsF AAOCAQEAYbAbfRaD9VRNmLaUfI+Oj4XjzSvgaQmwH4FeUZ7IzFCXS8Cdf7S2xgQz W5f2+Hm5+JqmqypE2QCqEZOQom87UTh6bSDv1RbkgdFdBXDrDr5YphcJsiCq5rNO ajev1r5c6u7CiTXBNC7lODECZwzaNA787APiNb8y/tCfSaYU/MAMGH2wWKc9aSS0 fSD/QI27pPEtP3/PqpdD46rgERJjs3L9N9zr9gk1uvoKzuGgidhCn/cQzlZZT54D RYdGndeLR1Lu6du8PKIFUPxYqiMu8viiYH7Op5dV4nrGRklFYRmf9XbtydIov6JG 4DZzti5y95+JD8zwc9tuTwk6MgtlXA== -----END CERTIFICATE-----Generated at Thu Nov 5 15:04:11 2026 by rpki-client