$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa File: 061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa (raw, json) Hash identifier: F1RWHiHBwka2cjmsc/IwyJql0yMeeAXIkLnvfRocGM0= Subject key identifier: 25:D6:BC:64:50:71:A8:A1:68:8F:60:71:D8:55:1B:DA:AB:E1:7B:83 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4BA21AC5D202EA25F27E80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 147.129.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a2:1a:c5:d2:02:ea:25:f2:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=78af5f4a-5459-404c-a8da-056faad8f91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b9:54:a3:a0:a3:5c:06:2d:8b:08:f7:e7:d9: 24:cf:90:f8:94:e3:4d:2d:58:c5:12:42:a0:11:2a: a6:fa:02:23:e9:f4:93:a4:fa:15:ed:7f:4d:e9:10: 2c:1e:74:1f:19:02:38:cd:3d:ea:8b:6f:74:20:eb: c5:d8:0b:c8:a6:21:1e:81:40:12:b1:50:93:19:3f: a3:4a:bd:b5:20:0c:a8:20:f3:42:0f:8c:ba:d8:c0: b5:cb:3b:f3:d0:de:92:64:50:d0:ad:fa:48:da:c8: 64:4b:d8:51:ab:ee:9d:c6:cb:a3:19:f9:58:55:5b: e0:f7:5c:38:cc:a2:b0:56:4a:8f:63:11:65:15:2b: dc:4a:94:51:ca:59:8a:60:e9:3d:13:a1:cc:18:f4: c9:b8:49:0d:92:ed:70:e2:53:5d:e9:2e:31:fe:0a: 12:47:8e:3b:cc:ff:19:6e:25:a8:03:24:ec:88:49: bc:0b:56:24:ab:d0:35:7d:e1:e5:d4:0f:b9:d9:70: d5:17:8a:06:5a:fc:4f:5f:94:5e:c0:66:ca:c1:80: b3:10:9f:81:9d:a2:8c:cf:c5:91:99:1e:be:0a:84: 4d:76:1b:8b:6c:a7:45:9b:69:09:af:72:c0:48:ef: d5:3b:90:72:15:eb:1e:95:0a:9b:66:9c:4d:b7:1f: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D6:BC:64:50:71:A8:A1:68:8F:60:71:D8:55:1B:DA:AB:E1:7B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e7:85:4e:6a:a0:7f:fd:7c:5d:6a:35:40:cc:0d:1a:a0:59: 04:05:78:af:00:d1:55:65:dd:13:87:78:59:97:d0:9c:86:a6: 9e:02:d4:1e:e5:1f:a0:14:f4:f1:5c:69:86:5c:c4:99:f2:b2: c0:4f:2b:f9:4d:f2:a0:84:08:b3:80:c8:2e:a4:2a:f4:ee:bf: 64:35:05:de:d8:4d:33:b5:cf:d7:ec:4c:16:98:9a:1c:4d:32: 80:82:aa:5b:49:4f:75:1c:14:e5:4c:af:f3:d2:13:51:ed:5b: af:6e:3d:a3:30:90:f3:09:0a:9a:da:7d:06:f3:72:6a:ba:35: da:20:2f:d4:45:de:6d:3f:19:d7:df:6d:42:6a:7c:32:10:4d: 64:b4:e8:61:42:00:fa:b6:31:bd:ef:9e:d2:03:96:58:d4:5e: e6:27:36:c6:84:e0:e0:a3:0e:c7:a1:d3:da:77:13:2b:a6:aa: d0:70:9d:79:72:98:56:d3:59:93:8c:5d:72:4f:0e:27:2f:0e: 86:7b:b3:7d:f6:74:60:4a:b8:5b:fb:3f:86:92:c9:e9:2c:70: 6c:49:d5:b2:52:53:e6:eb:b7:c6:59:5e:e5:06:a6:5a:fc:80: 5b:8f:d2:10:ea:4f:cd:68:f4:28:24:0c:a7:c4:ad:18:68:2c: 9f:73:4e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6IaxdIC6iXyfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NzhhZjVmNGEtNTQ1OS00MDRjLWE4ZGEtMDU2ZmFhZDhmOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrlUo6CjXAYtiwj359kkz5D4lONNLVjFEkKg ESqm+gIj6fSTpPoV7X9N6RAsHnQfGQI4zT3qi290IOvF2AvIpiEegUASsVCTGT+j Sr21IAyoIPNCD4y62MC1yzvz0N6SZFDQrfpI2shkS9hRq+6dxsujGflYVVvg91w4 zKKwVkqPYxFlFSvcSpRRylmKYOk9E6HMGPTJuEkNku1w4lNd6S4x/goSR447zP8Z biWoAyTsiEm8C1Ykq9A1feHl1A+52XDVF4oGWvxPX5RewGbKwYCzEJ+BnaKMz8WR mR6+CoRNdhuLbKdFm2kJr3LASO/VO5ByFeselQqbZpxNtx+cwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXWvGRQcaihaI9gcdhVG9qr4XuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDYxYWUxOTAtZjFlOC0z NmJhLTg2MWEtNDhkOGNjOGZhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4GyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbnhU5qoH/9fF1qNUDMDRqgWQQFeK8A0VVl3ROHeFmX0JyGpp4C1B7l H6AU9PFcaYZcxJnyssBPK/lN8qCECLOAyC6kKvTuv2Q1Bd7YTTO1z9fsTBaYmhxN MoCCqltJT3UcFOVMr/PSE1HtW69uPaMwkPMJCprafQbzcmq6NdogL9RF3m0/Gdff bUJqfDIQTWS06GFCAPq2Mb3vntIDlljUXuYnNsaE4OCjDseh09p3EyumqtBwnXly mFbTWZOMXXJPDicvDoZ7s332dGBKuFv7P4aSyekscGxJ1bJSU+brt8ZZXuUGplr8 gFuP0hDqT81o9CgkDKfErRhoLJ9zTok= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:00 2025 by rpki-client