$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa File: 1b06cec3-b87d-3d00-80c7-02d4e4430976.roa (raw, json) Hash identifier: jGZZJ698mcnKGZfPNyZGHHrZcUcSU0DMrdwlZSjWajI= Subject key identifier: 9C:5B:59:EE:06:F2:7D:17:12:A2:DC:B8:DE:0C:F0:90:69:76:EB:52 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A6D6D2E557AB893C978E0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 147.129.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6d:6d:2e:55:7a:b8:93:c9:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=544ee7ac-79da-4b0e-9131-109fdd113ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:78:9a:dc:b1:07:ec:ec:18:89:bd:88:d7:55: 84:ed:d6:a0:16:08:48:14:03:13:d3:a6:f0:e8:6c: 55:74:d9:4f:14:bf:38:0a:a3:c7:94:a7:4b:15:5f: 59:fe:98:1d:b1:3e:91:2d:49:12:4f:d2:69:08:41: 07:f5:30:e3:30:de:c8:21:09:88:07:fe:89:62:f3: 4e:01:ba:bd:ac:9c:07:00:b2:3d:fc:b4:0f:80:a7: 54:0e:04:02:41:bc:f4:68:20:ce:e5:b2:b8:25:55: 0f:6b:da:69:6a:a8:ea:0f:0c:34:e7:ff:08:7f:93: 70:c3:8c:07:a9:af:29:1b:83:e8:71:af:8e:4b:ff: 7e:27:ee:29:c2:31:26:3f:a0:04:95:70:cb:70:f7: 1d:58:03:22:1f:ac:e6:68:41:81:eb:14:c3:01:81: d1:30:a8:72:25:91:b7:aa:1c:37:df:68:f5:ed:e7: 1f:7f:e9:b6:4b:b4:91:a6:83:8c:33:1a:f4:9c:32: b6:a7:86:5a:08:b1:24:9d:d8:93:9e:58:54:13:ea: 9f:34:f3:18:b1:33:c1:28:c9:56:f9:45:d6:28:ef: 82:82:3a:ed:e3:bf:a3:9c:a7:b3:3b:c5:a0:ef:aa: 13:e7:ea:03:e3:b9:91:97:29:e1:d3:32:85:eb:f7: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5B:59:EE:06:F2:7D:17:12:A2:DC:B8:DE:0C:F0:90:69:76:EB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8b:d0:ab:bd:0a:16:6a:2f:b0:b9:d1:d9:60:2f:4f:7b:3a: f5:ae:de:33:c6:91:9a:de:04:2f:02:ef:a1:30:2d:f4:4d:c1: 9b:3d:d9:bc:a8:04:9e:3a:f1:03:5a:10:db:7e:a1:78:0d:7a: 0c:ab:31:d3:6c:3a:36:b5:e7:9e:0f:15:8e:9d:40:76:52:b9: ce:7b:90:da:c9:54:75:59:70:9f:0d:cc:d9:b1:13:23:b2:91: 42:cd:60:08:51:32:40:fe:7e:1c:2c:a2:2a:53:33:46:d6:70: d2:c0:40:96:4a:20:22:fd:6e:ee:b7:f3:e5:ec:cb:8b:c6:26: 6d:1d:5b:13:ab:ed:f9:a7:11:d4:d3:d8:64:c2:45:b0:07:2e: 09:f2:13:67:55:23:96:90:76:9f:23:30:6b:20:4a:c6:3d:5e: 3d:37:00:6d:d9:4d:d6:a5:cd:90:47:48:cb:25:45:d7:0e:bc: 01:ee:37:ea:2f:08:b3:4b:1a:1b:d6:f4:6d:65:48:96:14:f7: ef:e4:e3:a1:b7:20:38:d0:da:cd:20:97:a4:60:0b:a7:94:b7: 91:75:1a:59:91:31:85:32:a9:e1:b5:e8:5d:50:ea:0e:60:04: 74:14:88:d9:2f:51:b9:6e:61:fa:3a:b2:90:39:2d:7a:4f:b0: 2a:33:3d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm1tLlV6uJPJeOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NTQ0ZWU3YWMtNzlkYS00YjBlLTkxMzEtMTA5ZmRkMTEzZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nia3LEH7OwYib2I11WE7dagFghIFAMT06bw 6GxVdNlPFL84CqPHlKdLFV9Z/pgdsT6RLUkST9JpCEEH9TDjMN7IIQmIB/6JYvNO Abq9rJwHALI9/LQPgKdUDgQCQbz0aCDO5bK4JVUPa9ppaqjqDww05/8If5Nww4wH qa8pG4Poca+OS/9+J+4pwjEmP6AElXDLcPcdWAMiH6zmaEGB6xTDAYHRMKhyJZG3 qhw332j17ecff+m2S7SRpoOMMxr0nDK2p4ZaCLEkndiTnlhUE+qfNPMYsTPBKMlW +UXWKO+Cgjrt47+jnKezO8Wg76oT5+oD47mRlynh0zKF6/fR0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxbWe4G8n0XEqLcuN4M8JBpdutSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMWIwNmNlYzMtYjg3ZC0z ZDAwLTgwYzctMDJkNGU0NDMwOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSL0Ku9ChZqL7C50dlgL097OvWu3jPGkZreBC8C76EwLfRNwZs92byo BJ468QNaENt+oXgNegyrMdNsOja1554PFY6dQHZSuc57kNrJVHVZcJ8NzNmxEyOy kULNYAhRMkD+fhwsoipTM0bWcNLAQJZKICL9bu638+Xsy4vGJm0dWxOr7fmnEdTT 2GTCRbAHLgnyE2dVI5aQdp8jMGsgSsY9Xj03AG3ZTdalzZBHSMslRdcOvAHuN+ov CLNLGhvW9G1lSJYU9+/k46G3IDjQ2s0gl6RgC6eUt5F1GlmRMYUyqeG16F1Q6g5g BHQUiNkvUbluYfo6spA5LXpPsCozPZI= -----END CERTIFICATE-----Generated at Thu Apr 2 22:36:06 2026 by rpki-client