$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa File: cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa (raw, json) Hash identifier: qreZjljWzEDgDQn41fTlP+QeR1uoZApHF5HU3KJyndA= Subject key identifier: 9F:E7:A8:90:DD:5C:36:EB:4D:B4:37:87:BB:6A:1F:5A:F0:AC:89:0C Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F4328584D0EA7BD678F1D51F9B1651F80 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 23539 IP address blocks: 147.185.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:bd:67:8f:1d:51:f9:b1:65:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=89b9ce03-b21f-4c76-85e6-f7639be337ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:b8:d4:fa:de:21:bc:bd:df:e9:6c:ea:4e: b1:77:cf:9e:32:f9:1f:c5:9f:5f:06:48:07:84:dc: c9:73:34:3a:94:88:1f:3c:9a:a1:95:2c:d9:11:3a: 80:88:1a:9c:b7:eb:45:2f:06:c8:ba:48:d7:a2:a4: b2:77:cf:f4:ae:ed:fb:e9:3a:89:51:62:38:6f:f5: 8a:75:8e:18:3b:b8:9f:92:70:3d:7d:a7:69:63:36: 1b:1b:0a:a1:6d:24:39:ce:2b:3c:56:69:e0:32:a1: aa:30:4c:d6:38:65:18:05:3a:fe:5f:e0:56:7c:19: ae:62:d2:77:ab:5d:a4:1d:34:99:cc:07:16:d5:bf: 9d:fb:2e:fb:cb:21:97:90:d6:9d:5f:ad:ff:f2:3a: b5:25:e4:1b:44:d1:15:73:0b:af:e2:0b:ed:01:81: 2b:9d:5a:05:6e:f8:87:d2:65:50:75:5b:52:00:de: 2c:f3:b1:9b:77:dd:e8:c9:c2:db:44:b3:c5:44:ad: 7c:15:ca:50:5e:fc:1e:c3:9e:cc:22:70:1d:89:c5: 63:86:e5:84:e5:fc:0a:fa:24:8c:33:e8:bc:30:38: 5d:a7:84:b7:d1:94:35:47:68:9c:98:5c:a7:59:34: b6:ce:6d:50:d8:5f:83:a8:46:15:da:7f:3e:18:fc: e1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E7:A8:90:DD:5C:36:EB:4D:B4:37:87:BB:6A:1F:5A:F0:AC:89:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 147.185.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:9f:42:3b:63:dc:b3:be:a6:4e:d9:dc:c7:ab:1d:a1:5c:66: 35:7b:4e:8c:c4:49:83:fa:b1:75:ae:3c:92:25:7e:43:68:9d: d0:eb:7d:39:b3:d0:74:ea:de:b4:91:4f:77:80:3c:ee:d3:a1: d8:b4:6f:59:7d:88:4c:d3:f3:8d:ba:61:52:7d:0b:78:36:f0: d5:7e:f5:d9:06:46:99:96:ed:31:62:7a:b8:c7:3f:da:bb:93: 72:ba:96:3b:1c:70:7d:96:9c:df:4c:05:02:0d:a8:44:ac:9d: d3:6b:37:1f:f7:56:2a:99:bf:9e:09:74:03:5e:a6:dd:6a:6e: b5:19:c1:03:6e:85:17:c5:59:7a:63:bb:ce:61:cc:04:94:5e: 4a:3d:00:7a:7c:d4:73:8f:80:23:69:51:7a:7a:78:03:96:c8: a2:bf:64:cd:9a:59:12:6d:fa:70:25:94:a4:1f:42:93:97:ed: 0e:16:1e:1b:26:aa:22:42:fc:04:ca:70:ff:b7:8c:53:3a:ab: 89:52:c9:c3:c1:7c:84:4b:6e:f8:89:e2:17:c0:81:6d:f5:63: 2f:6f:c6:8b:24:b0:e7:93:1e:fd:db:b5:39:c4:a4:13:91:74: 0b:f0:53:bf:c8:88:6f:50:ba:f1:de:a5:d3:0d:09:93:f3:fa: cd:a6:1e:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op71njx1R+bFlH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ODliOWNlMDMtYjIxZi00Yzc2LTg1ZTYtZjc2MzliZTMzN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRO41PreIby93+ls6k6xd8+eMvkfxZ9fBkgH hNzJczQ6lIgfPJqhlSzZETqAiBqct+tFLwbIukjXoqSyd8/0ru376TqJUWI4b/WK dY4YO7ifknA9fadpYzYbGwqhbSQ5zis8VmngMqGqMEzWOGUYBTr+X+BWfBmuYtJ3 q12kHTSZzAcW1b+d+y77yyGXkNadX63/8jq1JeQbRNEVcwuv4gvtAYErnVoFbviH 0mVQdVtSAN4s87Gbd93oycLbRLPFRK18FcpQXvwew57MInAdicVjhuWE5fwK+iSM M+i8MDhdp4S30ZQ1R2icmFynWTS2zm1Q2F+DqEYV2n8+GPzh3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/nqJDdXDbrTbQ3h7tqH1rwrIkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvY2RjNTU1NTktOGNhMC0z MmFlLTkyNzktZGYzM2NmOWVmNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7m8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+fQjtj3LO+pk7Z3MerHaFcZjV7TozESYP6sXWuPJIlfkNondDrfTmz 0HTq3rSRT3eAPO7Todi0b1l9iEzT8426YVJ9C3g28NV+9dkGRpmW7TFierjHP9q7 k3K6ljsccH2WnN9MBQINqESsndNrNx/3ViqZv54JdANept1qbrUZwQNuhRfFWXpj u85hzASUXko9AHp81HOPgCNpUXp6eAOWyKK/ZM2aWRJt+nAllKQfQpOX7Q4WHhsm qiJC/ATKcP+3jFM6q4lSycPBfIRLbviJ4hfAgW31Yy9vxosksOeTHv3btTnEpBOR dAvwU7/IiG9QuvHepdMNCZPz+s2mHic= -----END CERTIFICATE-----Generated at Tue Mar 17 01:45:49 2026 by rpki-client