$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa File: 686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa (raw, json) Hash identifier: NOs2kPD0QkiMQYdZOUZ3+QTO8AmZMZnny+3/s0004eg= Subject key identifier: DD:7D:4F:E1:5E:99:A7:18:40:6E:3D:28:24:87:4B:18:D0:C0:91:AB Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A62F485E2096C159B6D00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 147.185.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:62:f4:85:e2:09:6c:15:9b:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=5bf870a7-6289-47d7-9645-98af0643cfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:01:9f:6a:96:60:e8:fb:f9:f1:aa:43:68:fd: 54:6d:d5:3a:ad:b7:2d:b6:d2:fb:96:67:83:8e:5a: e4:4e:d9:6a:85:c0:ad:d9:97:a6:2f:70:42:03:35: 1a:67:83:47:3e:e7:58:19:cb:52:42:bc:64:b0:4c: c5:a5:ac:2c:72:09:07:fb:eb:ab:76:f5:4f:77:ef: 0d:5f:7c:23:b2:f3:3c:b3:3d:5c:b4:69:80:15:ec: 7b:91:71:6f:f4:7b:ab:a7:7e:72:f7:e5:95:47:9c: 08:d5:44:56:74:d3:72:21:d3:ea:10:7d:bd:e3:bb: b9:ac:a2:5c:10:b3:b5:1c:45:c3:6f:4d:d9:6b:60: 2e:99:53:92:74:68:fd:ec:f5:a7:38:19:20:0d:d6: 2d:c1:04:39:8b:ff:a7:43:97:2d:44:86:d7:23:fc: d3:cf:1e:25:92:c8:37:82:54:c8:88:f3:0e:df:1b: 9b:fb:db:78:ec:68:54:79:42:25:21:be:bd:34:1c: 20:b8:db:60:e4:21:e8:bd:8b:ef:12:74:68:6b:43: 0a:3e:ac:97:75:82:48:64:27:f7:00:23:0f:21:ff: ca:9f:67:f6:79:3e:34:6b:19:53:20:a0:6e:ca:a6: db:52:0b:81:89:1a:66:c5:ec:67:77:82:9f:11:79: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7D:4F:E1:5E:99:A7:18:40:6E:3D:28:24:87:4B:18:D0:C0:91:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.185.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:45:f0:b6:38:71:13:99:1f:d4:1f:24:14:f0:d1:e7:b1:4b: 83:b6:f6:68:91:71:86:0a:95:05:5a:f2:e3:50:67:3a:36:5d: 28:4f:3f:5b:be:5c:31:4c:8c:9c:3a:f0:27:6f:95:9b:34:8e: bb:dc:2a:c8:2c:ac:f4:2a:76:be:2b:31:ab:b9:f5:13:4c:97: 98:15:90:c3:c7:07:80:d4:c3:66:37:bf:67:54:f7:7e:64:76: 30:5b:3a:7e:fc:61:d7:fb:8e:79:28:06:34:e5:eb:d6:62:4f: d9:a6:0b:c5:93:1e:65:a1:a6:e9:d9:4b:22:d5:a4:09:5b:db: 49:7e:05:48:fe:08:88:89:ac:56:3b:1b:df:03:13:3e:07:64: fc:92:46:45:90:66:95:a1:02:5f:71:5d:c2:8e:fd:43:b7:96: 15:1c:c0:f1:02:58:2d:cf:b1:07:da:49:a0:a3:06:76:f2:f4: 56:07:79:ec:cc:da:fc:29:3b:e9:af:83:77:3f:05:71:02:5a: 7b:cc:96:93:4a:2a:ad:de:8e:c0:1f:cd:71:ed:6a:bd:a3:b2: 76:16:95:d7:23:24:e2:84:95:7e:b0:13:04:cb:70:40:9f:7b: 7b:9f:71:b7:a8:4d:3e:7c:93:96:fd:b3:e9:72:f4:b2:8b:2d: 35:f2:e6:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmL0heIJbBWbbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NWJmODcwYTctNjI4OS00N2Q3LTk2NDUtOThhZjA2NDNjZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwGfapZg6Pv58apDaP1UbdU6rbctttL7lmeD jlrkTtlqhcCt2ZemL3BCAzUaZ4NHPudYGctSQrxksEzFpawscgkH++urdvVPd+8N X3wjsvM8sz1ctGmAFex7kXFv9Hurp35y9+WVR5wI1URWdNNyIdPqEH2947u5rKJc ELO1HEXDb03Za2AumVOSdGj97PWnOBkgDdYtwQQ5i/+nQ5ctRIbXI/zTzx4lksg3 glTIiPMO3xub+9t47GhUeUIlIb69NBwguNtg5CHovYvvEnRoa0MKPqyXdYJIZCf3 ACMPIf/Kn2f2eT40axlTIKBuyqbbUguBiRpmxexnd4KfEXmPZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN19T+FemacYQG49KCSHSxjQwJGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjg2ZGJlOTgtODZkOS0z YjQ2LWIwMzEtNzRmYzU5YmY5ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7neMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpF8LY4cROZH9QfJBTw0eexS4O29miRcYYKlQVa8uNQZzo2XShPP1u+ XDFMjJw68CdvlZs0jrvcKsgsrPQqdr4rMau59RNMl5gVkMPHB4DUw2Y3v2dU935k djBbOn78Ydf7jnkoBjTl69ZiT9mmC8WTHmWhpunZSyLVpAlb20l+BUj+CIiJrFY7 G98DEz4HZPySRkWQZpWhAl9xXcKO/UO3lhUcwPECWC3PsQfaSaCjBnby9FYHeezM 2vwpO+mvg3c/BXECWnvMlpNKKq3ejsAfzXHtar2jsnYWldcjJOKElX6wEwTLcECf e3ufcbeoTT58k5b9s+ly9LKLLTXy5ms= -----END CERTIFICATE-----Generated at Thu Apr 2 22:37:41 2026 by rpki-client