$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa File: cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa (raw, json) Hash identifier: uZFMjtm1eJ9z4D2dyjkUleDWFvz60FMp9+Hc2gRTrjY= Subject key identifier: 70:90:57:AE:12:00:72:0B:30:B1:F9:93:9B:4B:23:40:5C:1C:5E:27 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C202B2D3230281BC4F0300 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 147.185.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:02:b2:d3:23:02:81:bc:4f:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=ed5cd245-8447-4863-ae5f-e22006137836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:89:8c:35:02:73:5c:f9:ee:0e:5c:8c:34: f7:72:b8:f2:6d:4a:e7:15:eb:ac:29:32:4c:ca:9a: 0a:a6:78:28:8f:e4:5e:87:f6:5c:f9:d3:88:e2:5e: 4a:96:6d:a0:e7:18:62:83:a9:aa:ac:c0:e3:e5:31: d5:3b:73:aa:27:82:ca:17:10:e4:92:2c:60:b0:58: 84:9c:e7:78:43:10:ca:3c:88:8e:df:33:6c:1e:36: 03:2f:c9:5d:bc:02:ac:87:3f:1c:25:e7:0f:2a:17: 02:37:30:fb:fe:44:23:6e:dc:fa:35:c3:e1:34:6e: 93:86:35:d3:eb:f7:63:b8:1e:6c:91:2f:e4:5d:79: b6:99:c6:ab:10:4c:d6:74:2a:dd:41:25:da:ea:68: 16:b6:0a:92:32:53:5e:05:6b:71:80:75:f0:22:97: 84:95:cf:75:76:fe:c3:36:84:37:5e:09:43:bc:3c: 59:e9:39:1b:9a:13:41:15:fb:4a:66:96:9c:09:ae: eb:29:c9:c0:1d:93:47:1c:05:15:7d:30:6f:bc:d4: 52:87:91:df:42:ec:b5:f3:7a:13:98:e5:54:2d:66: b5:d0:78:b7:24:c7:1c:88:ee:8c:d0:73:d3:b1:b7: 68:1f:84:be:13:d6:03:f4:9d:c3:c8:fc:84:f1:89: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:90:57:AE:12:00:72:0B:30:B1:F9:93:9B:4B:23:40:5C:1C:5E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.185.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d7:c1:36:66:55:00:8a:cf:f4:ba:f3:ec:ae:80:54:13:50: 65:40:fc:12:bf:8f:af:26:12:13:75:b9:e7:38:0a:60:ab:05: ae:4d:30:bb:2e:a5:55:b5:83:ca:45:c2:b1:f1:26:4a:01:11: 00:8c:6d:4d:bb:1b:37:db:85:b5:8b:c4:bf:0a:fe:d6:d2:04: 74:6b:b8:89:4d:d7:52:5a:1f:63:f7:42:7d:b3:16:59:b3:d0: 0a:f2:78:07:c6:85:81:92:e8:61:74:54:dd:54:b3:eb:e8:6d: 3b:f6:33:34:3f:df:b1:e6:be:46:cc:9e:21:db:92:6a:8a:56: ea:f3:41:69:90:b2:36:80:68:4f:cf:30:cb:08:8a:7d:00:71: ce:18:38:0c:a1:b9:99:dd:b6:18:15:7c:fc:78:6f:22:03:ce: ac:2c:f1:bb:3e:15:53:37:78:84:16:6c:61:33:84:38:d2:38: 3c:b3:07:35:f8:5c:f3:61:f8:e6:78:f1:0b:11:5a:ab:7a:dd: 0c:f9:e2:1b:b0:88:fe:95:69:39:a8:e2:e5:f1:d9:aa:9b:75: bc:00:ab:bc:cb:0a:24:7d:78:b2:34:48:d2:b1:b5:73:28:db: dc:1d:1b:1a:74:ae:45:eb:3c:af:b6:73:99:08:b7:de:f3:bc: b9:2c:2b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgKy0yMCgbxPAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ZWQ1Y2QyNDUtODQ0Ny00ODYzLWFlNWYtZTIyMDA2MTM3ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioyJjDUCc1z57g5cjDT3crjybUrnFeusKTJM ypoKpngoj+Reh/Zc+dOI4l5Klm2g5xhig6mqrMDj5THVO3OqJ4LKFxDkkixgsFiE nOd4QxDKPIiO3zNsHjYDL8ldvAKshz8cJecPKhcCNzD7/kQjbtz6NcPhNG6ThjXT 6/djuB5skS/kXXm2mcarEEzWdCrdQSXa6mgWtgqSMlNeBWtxgHXwIpeElc91dv7D NoQ3XglDvDxZ6TkbmhNBFftKZpacCa7rKcnAHZNHHAUVfTBvvNRSh5HfQuy183oT mOVULWa10Hi3JMcciO6M0HPTsbdoH4S+E9YD9J3DyPyE8YmJSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCQV64SAHILMLH5k5tLI0BcHF4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvY2Q3YzhlYTctZjZjYi0z MDUwLWE5YTctMjBmOWJiNWVmZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3XwTZmVQCKz/S68+yugFQTUGVA/BK/j68mEhN1uec4CmCrBa5NMLsu pVW1g8pFwrHxJkoBEQCMbU27GzfbhbWLxL8K/tbSBHRruIlN11JaH2P3Qn2zFlmz 0AryeAfGhYGS6GF0VN1Us+vobTv2MzQ/37HmvkbMniHbkmqKVurzQWmQsjaAaE/P MMsIin0Acc4YOAyhuZndthgVfPx4byIDzqws8bs+FVM3eIQWbGEzhDjSODyzBzX4 XPNh+OZ48QsRWqt63Qz54huwiP6VaTmo4uXx2aqbdbwAq7zLCiR9eLI0SNKxtXMo 29wdGxp0rkXrPK+2c5kIt97zvLksK1g= -----END CERTIFICATE-----Generated at Thu Sep 24 06:35:50 2026 by rpki-client