$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa File: 3244e627-103d-3ceb-9e4e-605b4c86ee79.roa (raw, json) Hash identifier: yCB82Jw+Q67H2Njnn+5jOMCR9eazgqbJG2AkAa4H+NE= Subject key identifier: 81:AB:C0:4A:78:FB:D1:92:1A:EE:4F:15:22:16:61:E3:FA:BF:CB:6A Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584B1AD18EC0D4D005AA7024795C Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 147.124.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8e:c0:d4:d0:05:aa:70:24:79:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=aadc24dd-3920-4f0a-90ca-10b62ab60476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:f1:b9:00:ac:8a:46:4c:db:b8:4f:62:71: 30:ad:05:86:d5:2c:f2:f4:f7:35:0e:6a:89:58:c1: 8a:7d:3a:38:3d:0c:9e:78:e0:50:18:92:92:47:d4: 2f:bf:c4:84:5c:89:eb:ce:81:82:c7:c9:4c:c2:c6: fc:88:ff:14:74:b7:04:fc:65:f8:e3:34:46:1e:af: 4c:71:13:3d:d3:3a:31:92:9a:06:d4:b3:d1:03:77: 71:c4:48:8f:8f:f9:ee:6c:7b:b2:85:a8:77:2a:17: a2:0a:d5:cb:67:c5:34:98:e8:0b:02:b9:48:59:3b: a0:13:6a:47:39:0c:68:17:5d:93:70:9d:3b:5a:1e: d1:da:4e:77:b9:21:46:dc:7a:10:42:81:04:8f:65: 03:1f:9a:9f:44:8e:dc:c8:e8:2d:81:87:2e:e8:3c: 21:03:ef:81:62:82:32:94:1d:db:18:00:ab:11:da: 59:65:7e:97:85:98:66:50:62:f6:10:d2:a4:cd:b4: 9f:0f:e3:69:12:15:d9:91:76:58:7b:5a:85:5a:a2: de:10:52:14:97:30:0a:4c:39:fc:6a:4e:04:d8:df: 89:33:9c:54:b7:0f:00:b4:0b:df:fb:91:da:f1:34: 2c:8f:9f:9f:6d:51:b3:cd:f8:f6:8d:48:cf:db:1f: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AB:C0:4A:78:FB:D1:92:1A:EE:4F:15:22:16:61:E3:FA:BF:CB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:20:05:d5:bf:02:0a:99:a5:8a:42:49:49:1b:8c:90:ba:77: f9:18:11:8e:2e:87:07:ec:40:91:02:d7:57:27:5a:d6:1a:48: af:b0:03:5f:3f:82:2b:01:02:01:d0:07:86:18:ee:83:9c:9f: 30:8f:d2:bc:17:1a:cb:36:84:4d:e1:85:b8:03:d5:7d:44:bc: 87:d2:a7:cb:d9:09:47:8c:4e:62:8b:f7:13:30:63:e7:1d:38: c2:6e:38:24:1a:46:a5:8d:a7:85:5e:c4:98:0d:03:b9:20:36: d0:73:c0:dc:d9:57:d7:35:6b:6f:ef:b8:8d:2a:86:fa:ad:55: 97:1d:bb:b6:e4:91:7b:40:ca:6e:7c:2a:7e:62:37:99:2a:79: ee:ff:ef:25:04:b8:0c:2c:e1:a4:26:78:07:9e:b2:ff:0a:24: e3:13:a5:9d:b7:6a:d1:50:1c:1d:da:bb:e8:39:75:2b:7a:96: c6:52:7a:8b:a6:26:c2:19:54:8f:d0:70:87:80:78:d5:cf:c6: 36:1b:45:ce:fb:ce:c7:60:80:39:24:eb:ed:68:70:7a:c9:e2: ab:c9:f4:0c:0b:67:09:7f:05:ab:4e:f1:4b:70:f0:00:5c:b3: 98:24:9a:05:ef:cc:ac:f7:d8:35:86:0b:b4:e0:b7:a0:e8:b5: 9e:18:ee:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Y7A1NAFqnAkeVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YWFkYzI0ZGQtMzkyMC00ZjBhLTkwY2EtMTBiNjJhYjYwNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovfxuQCsikZM27hPYnEwrQWG1Szy9Pc1DmqJ WMGKfTo4PQyeeOBQGJKSR9Qvv8SEXInrzoGCx8lMwsb8iP8UdLcE/GX44zRGHq9M cRM90zoxkpoG1LPRA3dxxEiPj/nubHuyhah3KheiCtXLZ8U0mOgLArlIWTugE2pH OQxoF12TcJ07Wh7R2k53uSFG3HoQQoEEj2UDH5qfRI7cyOgtgYcu6DwhA++BYoIy lB3bGACrEdpZZX6XhZhmUGL2ENKkzbSfD+NpEhXZkXZYe1qFWqLeEFIUlzAKTDn8 ak4E2N+JM5xUtw8AtAvf+5Ha8TQsj5+fbVGzzfj2jUjP2x9GcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGrwEp4+9GSGu5PFSIWYeP6v8tqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMzI0NGU2MjctMTAzZC0z Y2ViLTllNGUtNjA1YjRjODZlZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQgBdW/AgqZpYpCSUkbjJC6d/kYEY4uhwfsQJEC11cnWtYaSK+wA18/ gisBAgHQB4YY7oOcnzCP0rwXGss2hE3hhbgD1X1EvIfSp8vZCUeMTmKL9xMwY+cd OMJuOCQaRqWNp4VexJgNA7kgNtBzwNzZV9c1a2/vuI0qhvqtVZcdu7bkkXtAym58 Kn5iN5kqee7/7yUEuAws4aQmeAeesv8KJOMTpZ23atFQHB3au+g5dSt6lsZSeoum JsIZVI/QcIeAeNXPxjYbRc77zsdggDkk6+1ocHrJ4qvJ9AwLZwl/BatO8Utw8ABc s5gkmgXvzKz32DWGC7Tgt6DotZ4Y7rk= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:43 2025 by rpki-client