$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa File: 3a89c06e-a521-389e-bffb-da5a48fb6376.roa (raw, json) Hash identifier: i4aMmsidVhhp6qZ5Ao82B6UP0EHq7WMkIbIP2bQWQ3A= Subject key identifier: 1D:6F:30:4B:03:51:82:4E:32:7F:AB:AC:A0:4F:21:0D:CE:DD:F1:04 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584E3E5F413BFF8033F167DD9C80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 16696 IP address blocks: 147.129.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:41:3b:ff:80:33:f1:67:dd:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=2aa6c4ab-a0e6-4aca-85de-b4ec91ffc449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:97:0e:63:6c:b3:d6:5c:a3:a0:c8:2d:7b: 10:51:be:6d:3d:5b:1a:cc:94:fa:c8:ed:f8:2c:e7: 77:cd:2a:77:11:28:29:70:4a:35:11:2e:c2:58:a3: dd:89:d4:ff:1b:54:4a:08:3b:8b:a4:4a:61:bd:4e: 3f:1e:7d:86:00:be:58:05:77:f2:19:92:1c:9a:e0: 48:6c:cd:d9:db:36:24:95:5b:eb:e1:a2:05:e6:d2: f3:f2:e3:e0:e6:7c:67:e0:79:1b:d4:e5:09:ac:da: 73:4d:26:5f:02:8d:7d:cd:44:f8:f6:87:a5:b9:5f: 32:c9:8f:04:b3:4e:54:75:c1:7f:51:e8:4a:22:53: 32:93:f6:0c:b1:49:eb:7d:87:a9:dd:bf:63:d2:cc: 30:9d:75:db:f9:21:35:c0:dc:46:85:93:e4:6a:76: 13:1b:76:f1:f8:88:0e:2a:bf:5d:22:32:50:14:49: e3:ee:00:08:df:87:fb:d5:6f:5f:80:06:39:b0:e8: 1c:a0:13:b2:79:62:2d:0b:ec:7b:c6:27:89:2f:e0: e7:a6:55:d8:f5:ef:ed:29:c3:ec:2a:e5:fe:57:91: a7:48:13:7c:72:dc:65:0a:a1:89:13:43:93:42:d2: e2:50:52:c8:9c:5e:95:b5:97:66:65:ba:30:37:82: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:30:4B:03:51:82:4E:32:7F:AB:AC:A0:4F:21:0D:CE:DD:F1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:60:57:9f:ca:80:f4:de:90:6a:ef:71:cc:48:a7:96:d2:9d: 1d:50:52:03:42:a8:c9:b7:8d:ae:9d:17:ed:76:9f:2d:15:9c: b1:e7:13:aa:4e:10:78:d2:00:ef:49:b2:20:f3:07:a3:9c:30: 71:cd:5d:cd:94:5a:9e:c7:7a:7d:5a:b1:76:8e:ce:0b:32:f9: 40:68:95:2e:5f:ea:60:d5:9a:ae:b8:e9:33:4c:3c:b6:d1:af: b0:45:65:c9:f0:95:1f:d9:50:0f:82:21:e1:34:ca:37:69:65: 86:e4:3e:20:3e:4e:d0:47:04:04:2d:a7:49:ff:cd:9e:34:09: d8:91:7e:d6:6d:0a:89:a1:2f:e0:13:8d:39:de:7c:b3:31:43: e1:27:cd:c8:43:44:57:e9:7f:2d:61:23:55:85:92:69:cd:f1: d4:41:01:2b:c8:18:4c:1b:2b:bb:d9:21:9a:69:fb:ea:1d:33: 1e:9e:05:0c:30:74:ac:48:f1:a0:04:36:1e:c3:68:ba:37:20: 5d:36:d7:97:61:15:27:95:d4:42:79:42:ae:81:59:f2:8f:a2: ed:56:54:96:ea:df:e9:69:69:b2:1d:25:bd:bd:ef:77:b8:73: 6c:7a:d5:24:f8:21:75:eb:71:ac:6c:aa:eb:c3:ef:14:47:58: bb:83:aa:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0E7/4Az8WfdnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk MmFhNmM0YWItYTBlNi00YWNhLTg1ZGUtYjRlYzkxZmZjNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV6XDmNss9Zco6DILXsQUb5tPVsazJT6yO34 LOd3zSp3ESgpcEo1ES7CWKPdidT/G1RKCDuLpEphvU4/Hn2GAL5YBXfyGZIcmuBI bM3Z2zYklVvr4aIF5tLz8uPg5nxn4Hkb1OUJrNpzTSZfAo19zUT49oeluV8yyY8E s05UdcF/UehKIlMyk/YMsUnrfYep3b9j0swwnXXb+SE1wNxGhZPkanYTG3bx+IgO Kr9dIjJQFEnj7gAI34f71W9fgAY5sOgcoBOyeWItC+x7xieJL+DnplXY9e/tKcPs KuX+V5GnSBN8ctxlCqGJE0OTQtLiUFLInF6VtZdmZbowN4I7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1vMEsDUYJOMn+rrKBPIQ3O3fEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2E4OWMwNmUtYTUyMS0z ODllLWJmZmItZGE1YTQ4ZmI2Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk4GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlgV5/KgPTekGrvccxIp5bSnR1QUgNCqMm3ja6dF+12ny0VnLHnE6pO EHjSAO9JsiDzB6OcMHHNXc2UWp7Hen1asXaOzgsy+UBolS5f6mDVmq646TNMPLbR r7BFZcnwlR/ZUA+CIeE0yjdpZYbkPiA+TtBHBAQtp0n/zZ40CdiRftZtComhL+AT jTnefLMxQ+EnzchDRFfpfy1hI1WFkmnN8dRBASvIGEwbK7vZIZpp++odMx6eBQww dKxI8aAENh7DaLo3IF0215dhFSeV1EJ5Qq6BWfKPou1WVJbq3+lpabIdJb2973e4 c2x61ST4IXXrcaxsquvD7xRHWLuDqsY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:37 2026 by rpki-client