$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa File: 3a89c06e-a521-389e-bffb-da5a48fb6376.roa (raw, json) Hash identifier: RerprlhOC5iytw9xYA6cZBWjvQo3CnVzWtc95CLKtvk= Subject key identifier: 1D:CC:30:9B:3C:98:E1:12:B1:2E:76:9C:7B:4E:2C:36:B2:C4:F3:70 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4BA1C7CDD24F008DC1F440 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 147.129.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a1:c7:cd:d2:4f:00:8d:c1:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=5491105d-ca46-4742-adfc-fcdc37594665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:99:f5:8d:a7:db:3d:e7:e5:ba:63:4f:b8: 7b:f8:f8:18:39:85:c0:46:64:65:7d:1b:24:4b:82: e8:e7:a0:a3:ad:b6:e9:87:09:82:15:85:8a:de:25: e3:89:ef:02:cd:e5:d4:85:3c:75:48:79:85:ad:e7: f8:6e:26:59:d5:03:91:d1:42:5d:70:6b:6a:38:61: 83:92:56:9f:53:83:69:5a:47:72:1e:45:eb:fa:4b: f3:20:87:01:13:00:67:bf:6e:b6:64:c7:4b:03:cb: 90:3d:c3:3c:63:9b:14:c4:3b:48:fd:18:e0:97:b3: 7e:43:06:99:d0:8c:d5:9e:72:b0:7c:b4:52:f8:c3: a7:fa:aa:2c:5f:e9:cf:55:7f:86:83:4b:a5:17:ee: 6a:29:8c:c4:08:f8:9d:85:76:8a:b0:86:53:22:3b: f7:55:e5:38:13:d5:8f:47:86:f2:69:03:0e:45:4a: 97:0f:0d:bf:f2:29:11:33:e0:f6:59:ed:57:6f:10: fd:ad:a8:99:9a:0b:8c:84:d2:bc:e6:9f:95:6c:4f: 83:0b:a6:cb:d8:8e:fd:01:92:dc:3a:d4:9f:13:42: cd:47:d6:79:31:1c:c5:49:4b:c5:97:51:75:03:7e: 6c:ad:c9:eb:47:2b:d5:14:f0:f4:d7:35:c6:96:22: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CC:30:9B:3C:98:E1:12:B1:2E:76:9C:7B:4E:2C:36:B2:C4:F3:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f2:d8:b0:7d:6e:19:bc:96:5d:95:04:5f:42:89:f6:e1:b5: e4:24:75:e8:93:e4:db:59:74:72:ec:f7:88:6a:67:90:27:47: 99:31:06:0d:fd:6d:21:0b:6c:33:9c:4c:04:1c:ce:be:0a:34: e0:62:df:46:b3:a4:56:1a:4d:6c:42:1e:13:12:4b:87:ec:3c: f5:5b:a7:45:c5:33:78:87:03:36:d0:38:47:39:a0:2d:21:f5: 17:7f:dd:3b:db:8f:3b:e2:65:3e:64:84:c8:92:a7:53:82:43: 6a:0e:f0:2c:11:ce:91:37:ca:1b:96:35:dd:a1:b2:af:2e:c4: ca:4c:7a:25:44:e3:a6:25:1d:2b:c7:ad:b5:2b:bd:ed:92:f3: f9:94:51:2e:53:04:48:05:1b:fc:7c:eb:cc:ee:4c:20:87:4e: 07:a4:c2:e7:58:c4:3e:8a:4e:28:f0:5c:44:19:e7:27:8c:77: eb:46:ea:8e:8b:00:2b:4c:c8:f4:39:f7:5c:47:4a:a9:4e:7c: 8c:fa:e7:ce:78:24:6d:d8:43:2b:4b:90:34:a2:3a:b5:f6:8d: 49:36:8a:87:d8:65:46:a6:b7:33:01:0a:e2:18:e3:d5:00:da: df:53:9c:38:72:88:21:d7:b7:58:1e:5d:2d:77:dd:37:41:1e: ba:59:53:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6HHzdJPAI3B9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NTQ5MTEwNWQtY2E0Ni00NzQyLWFkZmMtZmNkYzM3NTk0NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhASZ9Y2n2z3n5bpjT7h7+PgYOYXARmRlfRsk S4Lo56CjrbbphwmCFYWK3iXjie8CzeXUhTx1SHmFref4biZZ1QOR0UJdcGtqOGGD klafU4NpWkdyHkXr+kvzIIcBEwBnv262ZMdLA8uQPcM8Y5sUxDtI/Rjgl7N+QwaZ 0IzVnnKwfLRS+MOn+qosX+nPVX+Gg0ulF+5qKYzECPidhXaKsIZTIjv3VeU4E9WP R4byaQMORUqXDw2/8ikRM+D2We1XbxD9raiZmguMhNK85p+VbE+DC6bL2I79AZLc OtSfE0LNR9Z5MRzFSUvFl1F1A35srcnrRyvVFPD01zXGliIAyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3MMJs8mOESsS52nHtOLDayxPNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2E4OWMwNmUtYTUyMS0z ODllLWJmZmItZGE1YTQ4ZmI2Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk4GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjy2LB9bhm8ll2VBF9CifbhteQkdeiT5NtZdHLs94hqZ5AnR5kxBg39 bSELbDOcTAQczr4KNOBi30azpFYaTWxCHhMSS4fsPPVbp0XFM3iHAzbQOEc5oC0h 9Rd/3TvbjzviZT5khMiSp1OCQ2oO8CwRzpE3yhuWNd2hsq8uxMpMeiVE46YlHSvH rbUrve2S8/mUUS5TBEgFG/x868zuTCCHTgekwudYxD6KTijwXEQZ5yeMd+tG6o6L ACtMyPQ591xHSqlOfIz65854JG3YQytLkDSiOrX2jUk2iofYZUamtzMBCuIY49UA 2t9TnDhyiCHXt1geXS133TdBHrpZU3s= -----END CERTIFICATE-----Generated at Mon Aug 4 14:17:16 2025 by rpki-client