$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa File: 1b06cec3-b87d-3d00-80c7-02d4e4430976.roa (raw, json) Hash identifier: qtNVtwzrCNzOQBhNRWfA1HkVjR5jut7rDfB88GAWVoA= Subject key identifier: 33:21:C6:9F:A2:01:0D:28:E2:5A:E4:CB:24:68:4E:EE:B6:FC:CB:B2 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4BA1DAC240C16B97B13628 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 147.129.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a1:da:c2:40:c1:6b:97:b1:36:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=95c65bb3-d0de-4fea-98b9-19f92ed4c825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:76:15:a3:22:66:30:4d:54:cd:ae:38:88: 35:39:20:38:6d:81:57:79:ec:b3:83:6c:ab:a3:69: b1:94:0e:52:5c:75:7f:81:a5:bc:4d:61:3a:04:72: 2e:b6:5b:2e:ed:e5:fa:82:cc:8f:9f:b5:26:fa:fe: b2:cf:f6:ed:70:cc:fe:ee:e0:0b:92:48:10:b8:6c: ce:65:8f:66:92:70:b4:2b:8e:51:32:41:03:86:12: cf:ee:7e:39:ce:7f:e2:fe:47:43:37:94:2b:5b:ff: de:38:d8:14:0b:a6:58:bc:90:a6:fa:91:40:a5:3d: c5:ca:2f:95:91:d1:08:80:b8:cf:6d:0e:a7:cc:39: 60:0c:b2:28:36:70:42:f8:fa:c0:c4:1a:20:da:b2: 37:22:82:77:9b:0d:33:23:d8:3e:e8:df:df:bb:e9: 7d:ee:06:31:06:0b:de:33:b1:34:54:c5:9c:35:21: 0f:0a:70:a3:d7:87:5c:c1:14:81:7d:46:76:45:dc: 4c:2d:e2:e1:4d:d3:3f:d7:17:1b:5e:59:e1:68:96: 70:50:58:e4:a0:49:3b:67:4f:4e:72:d2:ed:6a:61: 29:eb:42:b0:d4:3c:da:a1:26:fc:f2:3f:71:24:9c: 78:4f:7b:1b:43:ef:a6:84:cf:97:16:2c:de:69:90: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:21:C6:9F:A2:01:0D:28:E2:5A:E4:CB:24:68:4E:EE:B6:FC:CB:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2b:30:08:e0:6a:eb:11:7f:0d:d4:7d:fa:c9:ae:0b:df:49: cd:20:27:eb:b9:49:6b:b6:e6:22:84:31:e2:72:bd:de:51:da: e7:6b:5f:7b:f6:3e:67:be:c6:12:03:68:f9:07:49:0b:6c:21: 19:53:86:e7:63:46:f4:fd:3e:95:a9:cc:a5:4b:bd:da:8b:5f: eb:34:ec:51:4a:0a:ac:dc:36:ca:65:91:45:b4:a7:81:a1:e7: ab:ae:93:e5:ed:ee:c5:9b:ec:0c:9f:9e:00:0e:62:fb:3a:99: 60:ad:ef:b6:57:14:75:b1:35:6f:d2:68:21:8b:1b:12:c2:3c: d9:b6:fb:07:ad:6a:c3:3f:54:61:d3:ad:45:76:bd:f7:e5:e4: 8f:7b:8e:1e:cf:71:6d:31:ee:5e:54:eb:6a:d9:9d:56:fe:41: 89:b4:d9:2d:dd:5b:41:4d:3c:97:64:d0:08:d1:a6:23:a7:28: 66:76:5f:03:58:62:2a:5c:c1:bd:d8:7b:db:07:3e:26:a2:2c: 15:a5:9e:da:ab:57:62:c6:dc:16:47:48:77:6c:88:f0:5d:fb: 9d:b2:05:da:c2:4b:52:49:b7:a3:d2:c5:d8:ca:dd:5a:20:d4: fa:a1:e3:81:c7:af:5f:d5:94:58:cc:3f:c6:2e:06:03:ea:ee: 2a:e5:25:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6HawkDBa5exNigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk OTVjNjViYjMtZDBkZS00ZmVhLTk4YjktMTlmOTJlZDRjODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZJ2FaMiZjBNVM2uOIg1OSA4bYFXeeyzg2yr o2mxlA5SXHV/gaW8TWE6BHIutlsu7eX6gsyPn7Um+v6yz/btcMz+7uALkkgQuGzO ZY9mknC0K45RMkEDhhLP7n45zn/i/kdDN5QrW//eONgUC6ZYvJCm+pFApT3Fyi+V kdEIgLjPbQ6nzDlgDLIoNnBC+PrAxBog2rI3IoJ3mw0zI9g+6N/fu+l97gYxBgve M7E0VMWcNSEPCnCj14dcwRSBfUZ2RdxMLeLhTdM/1xcbXlnhaJZwUFjkoEk7Z09O ctLtamEp60Kw1DzaoSb88j9xJJx4T3sbQ++mhM+XFizeaZClnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMhxp+iAQ0o4lrkyyRoTu62/MuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMWIwNmNlYzMtYjg3ZC0z ZDAwLTgwYzctMDJkNGU0NDMwOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADArMAjgausRfw3UffrJrgvfSc0gJ+u5SWu25iKEMeJyvd5R2udrX3v2 Pme+xhIDaPkHSQtsIRlThudjRvT9PpWpzKVLvdqLX+s07FFKCqzcNsplkUW0p4Gh 56uuk+Xt7sWb7AyfngAOYvs6mWCt77ZXFHWxNW/SaCGLGxLCPNm2+wetasM/VGHT rUV2vffl5I97jh7PcW0x7l5U62rZnVb+QYm02S3dW0FNPJdk0AjRpiOnKGZ2XwNY Yipcwb3Ye9sHPiaiLBWlntqrV2LG3BZHSHdsiPBd+52yBdrCS1JJt6PSxdjK3Vog 1Pqh44HHr1/VlFjMP8YuBgPq7irlJRI= -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:29 2025 by rpki-client