$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa File: 686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa (raw, json) Hash identifier: /OTrBherUpE9O3mD3ys0YS9ojw+tsvxJ49GeNrqRwj0= Subject key identifier: C0:22:19:B6:55:06:2F:1A:15:C8:37:3C:98:2F:4D:A1:DE:12:27:7E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B19DF69749030A27FC80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 147.185.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b1:9d:f6:97:49:03:0a:27:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=23fce16e-e1ab-4af6-ab84-3f9fdaa39d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:e6:ab:5a:e2:8e:66:a1:a0:50:65:e3:e5: aa:ee:cd:4e:c1:7e:7a:b7:57:bf:9b:fc:e8:da:76: f5:70:6c:92:2d:a8:50:ea:d3:41:40:a9:15:05:3f: 33:4e:c3:f5:a9:b7:3e:1d:4f:6f:0c:ad:d7:5b:62: a9:76:52:68:92:76:97:05:fc:63:6c:6b:f6:ee:2c: 53:aa:be:2b:97:74:05:3f:3c:ae:bb:0d:53:cf:c3: 56:82:c1:1a:fa:23:53:b9:48:bc:e9:85:5c:b4:74: 95:f9:1b:40:81:fe:1a:c4:cb:b3:3d:4c:bb:0c:d2: a0:51:fd:e7:b3:4d:6f:b2:b7:9c:b0:99:ed:55:15: 33:b2:e1:be:0f:0f:5f:b7:b3:3e:e9:4c:d2:fc:d6: 69:b8:1f:b9:ca:18:cf:8a:eb:f7:fa:e4:c9:1b:ce: 53:00:1e:87:c8:00:54:66:aa:8c:bf:f4:4b:db:ee: 03:90:44:37:da:07:fb:4d:76:6c:9a:1a:0c:06:6b: 95:7d:9c:8c:2f:b8:94:7f:b4:90:6b:0f:01:00:2b: a5:13:0b:5d:79:3e:53:a9:1a:d8:27:51:6e:04:1c: 5f:56:a7:d7:ea:b7:40:8f:33:41:dd:c6:fe:2d:56: b5:ef:13:47:f7:a3:74:f3:37:f3:a7:2c:8c:e6:44: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:22:19:B6:55:06:2F:1A:15:C8:37:3C:98:2F:4D:A1:DE:12:27:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.185.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:7f:3f:0a:e6:17:28:af:7c:a0:7a:0d:ad:2b:56:ea:20:8c: 8f:d5:0c:2c:eb:16:9e:88:69:32:40:52:6b:33:dc:4c:d5:25: 0a:60:8a:21:58:c6:9c:a2:cc:2e:2b:b0:d1:87:b0:7a:cf:aa: b1:eb:5a:ec:a8:2d:15:ff:50:38:f3:7a:0b:13:4e:04:08:b0: 74:45:c5:18:7a:02:ac:47:90:c9:0a:6c:e6:b4:1e:e3:17:62: 47:20:7e:35:ec:c4:b7:82:32:7a:05:b3:ec:2c:3c:57:3e:ee: ec:c7:c2:f3:0e:b7:5c:d7:5b:7a:ba:0f:4a:49:ea:1b:eb:dd: 14:c6:73:3e:65:9b:28:6b:82:68:e2:61:d1:c6:1c:65:c2:9c: 47:f6:ee:57:1b:1e:8d:ea:3f:08:e8:af:6a:d6:94:5b:11:5a: 62:59:17:8d:82:bb:28:2d:80:da:69:00:f6:a3:34:de:37:86: 86:54:1e:4e:22:4f:eb:fb:40:f0:0c:ee:1a:f3:33:1c:d4:2d: 3d:f2:2b:78:35:e8:66:ab:3f:8c:c2:7f:e3:5c:cf:c3:4d:48: 5b:f6:a6:a3:67:8b:2d:cb:44:b9:02:b7:25:8a:c3:40:03:f2: fa:29:d3:25:ce:27:bc:5e:99:b1:52:9e:df:02:9f:8c:6b:7c: 8c:26:a0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7Gd9pdJAwon/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MjNmY2UxNmUtZTFhYi00YWY2LWFiODQtM2Y5ZmRhYTM5ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApevmq1rijmahoFBl4+Wq7s1OwX56t1e/m/zo 2nb1cGySLahQ6tNBQKkVBT8zTsP1qbc+HU9vDK3XW2KpdlJoknaXBfxjbGv27ixT qr4rl3QFPzyuuw1Tz8NWgsEa+iNTuUi86YVctHSV+RtAgf4axMuzPUy7DNKgUf3n s01vsrecsJntVRUzsuG+Dw9ft7M+6UzS/NZpuB+5yhjPiuv3+uTJG85TAB6HyABU ZqqMv/RL2+4DkEQ32gf7TXZsmhoMBmuVfZyML7iUf7SQaw8BACulEwtdeT5TqRrY J1FuBBxfVqfX6rdAjzNB3cb+LVa17xNH96N08zfzpyyM5kRBGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAiGbZVBi8aFcg3PJgvTaHeEid+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjg2ZGJlOTgtODZkOS0z YjQ2LWIwMzEtNzRmYzU5YmY5ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7neMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB/PwrmFyivfKB6Da0rVuogjI/VDCzrFp6IaTJAUmsz3EzVJQpgiiFY xpyizC4rsNGHsHrPqrHrWuyoLRX/UDjzegsTTgQIsHRFxRh6AqxHkMkKbOa0HuMX YkcgfjXsxLeCMnoFs+wsPFc+7uzHwvMOt1zXW3q6D0pJ6hvr3RTGcz5lmyhrgmji YdHGHGXCnEf27lcbHo3qPwjor2rWlFsRWmJZF42CuygtgNppAPajNN43hoZUHk4i T+v7QPAM7hrzMxzULT3yK3g16GarP4zCf+Ncz8NNSFv2pqNniy3LRLkCtyWKw0AD 8vop0yXOJ7xembFSnt8Cn4xrfIwmoAE= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:48 2025 by rpki-client