$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa File: 1b06cec3-b87d-3d00-80c7-02d4e4430976.roa (raw, json) Hash identifier: HA8ridid3fSdk4uCYXpe5Foz5Tm3V71nYQsDAb3M2lY= Subject key identifier: 3D:1D:C5:6A:CA:CC:29:1E:4B:F9:55:67:AC:A1:47:00:8A:76:F9:D2 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BEF5BA185C8EB5720C40 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 147.129.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:be:f5:ba:18:5c:8e:b5:72:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e5f46649-bf08-414b-9ae7-eae07e104d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f9:d8:83:38:b9:56:c5:38:24:3b:46:6c:28: d0:85:af:5d:20:14:87:d8:7d:91:f8:d7:7b:6f:16: 0e:77:1a:05:20:ab:13:e9:33:aa:e8:b4:7e:bd:47: f1:7a:55:3a:55:b4:66:06:82:3e:db:1b:a8:ee:11: 78:62:3a:86:a1:05:74:b0:23:c2:0f:cf:8f:cd:7e: 48:03:13:e0:c4:f4:a6:ea:47:c8:ed:b9:21:c7:e4: 42:3a:c2:cf:de:7e:9f:87:e5:8d:45:b3:6d:53:e5: 1b:5f:d7:1c:5b:c6:0c:fe:7f:96:bd:db:1e:7a:60: 30:35:67:07:14:8f:21:de:00:3e:02:c6:1f:21:72: 29:49:51:bc:8b:63:01:97:fd:04:6e:cc:80:88:cb: 9e:24:ee:3f:3f:eb:d5:dc:e7:36:b9:f9:9b:e2:de: 20:b9:17:84:bc:9b:3b:c4:73:98:42:5d:29:88:c3: be:5a:1e:6e:eb:9f:d1:af:16:0a:08:65:a7:8a:ad: 77:db:99:20:36:9b:d0:c5:11:1a:04:dc:12:91:70: eb:ed:c6:df:16:9b:cb:60:ef:97:a2:d9:9d:77:db: 1b:e4:3e:69:97:89:06:f3:47:fe:94:36:b1:45:18: 46:11:32:a8:b3:fc:61:52:68:4b:e3:f2:ee:4b:f4: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1D:C5:6A:CA:CC:29:1E:4B:F9:55:67:AC:A1:47:00:8A:76:F9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:18:29:99:40:1d:fe:1f:a5:72:18:4b:ef:8d:c4:a4:0d:11: 20:b7:0e:f2:1e:32:15:9c:60:ad:75:10:cd:86:51:3d:54:b7: b6:3d:34:97:48:0f:6b:a1:01:a0:2a:cc:a8:d6:82:b9:b5:65: 6b:48:8c:b3:bf:e2:ca:45:63:82:44:1d:e2:c5:3b:fd:52:63: 12:94:ee:60:fa:ed:24:44:07:6a:49:fb:4c:2e:92:73:9f:bc: d5:35:15:e5:ed:87:0f:46:70:25:f2:87:7c:70:1f:bf:36:b9: 5b:9a:5e:03:cd:a7:5e:65:db:01:fc:c6:51:f9:37:ed:52:3e: 71:e6:c7:d0:8f:98:d8:dc:3d:62:07:d2:5e:e2:b2:13:84:b6: a2:1e:10:eb:38:85:19:6e:d5:c5:77:c0:ff:7a:0d:8e:3b:3a: f2:08:e8:bc:79:b5:6d:a1:3e:71:eb:62:ba:5e:d0:71:e5:21: 25:f0:2e:e1:8b:88:17:63:2e:a9:4a:09:44:94:a2:94:8d:70: b6:ab:cd:25:7b:27:65:83:33:fe:16:6d:ba:6e:d4:4b:da:81: eb:19:b3:ea:5e:58:c1:43:38:de:93:70:b7:54:fb:03:a9:6c: 28:21:4f:88:88:a5:ed:6e:d7:50:7e:1a:60:a6:60:64:70:f8: 9d:4b:e2:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB771uhhcjrVyDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTVmNDY2NDktYmYwOC00MTRiLTlhZTctZWFlMDdlMTA0ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvnYgzi5VsU4JDtGbCjQha9dIBSH2H2R+Nd7 bxYOdxoFIKsT6TOq6LR+vUfxelU6VbRmBoI+2xuo7hF4YjqGoQV0sCPCD8+PzX5I AxPgxPSm6kfI7bkhx+RCOsLP3n6fh+WNRbNtU+UbX9ccW8YM/n+WvdseemAwNWcH FI8h3gA+AsYfIXIpSVG8i2MBl/0EbsyAiMueJO4/P+vV3Oc2ufmb4t4guReEvJs7 xHOYQl0piMO+Wh5u65/RrxYKCGWniq1325kgNpvQxREaBNwSkXDr7cbfFpvLYO+X otmdd9sb5D5pl4kG80f+lDaxRRhGETKos/xhUmhL4/LuS/QeRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0dxWrKzCkeS/lVZ6yhRwCKdvnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMWIwNmNlYzMtYjg3ZC0z ZDAwLTgwYzctMDJkNGU0NDMwOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkYKZlAHf4fpXIYS++NxKQNESC3DvIeMhWcYK11EM2GUT1Ut7Y9NJdI D2uhAaAqzKjWgrm1ZWtIjLO/4spFY4JEHeLFO/1SYxKU7mD67SREB2pJ+0wuknOf vNU1FeXthw9GcCXyh3xwH782uVuaXgPNp15l2wH8xlH5N+1SPnHmx9CPmNjcPWIH 0l7ishOEtqIeEOs4hRlu1cV3wP96DY47OvII6Lx5tW2hPnHrYrpe0HHlISXwLuGL iBdjLqlKCUSUopSNcLarzSV7J2WDM/4Wbbpu1EvagesZs+peWMFDON6TcLdU+wOp bCghT4iIpe1u11B+GmCmYGRw+J1L4po= -----END CERTIFICATE-----Generated at Mon Nov 3 08:45:39 2025 by rpki-client