$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa File: 5ebc4dd4-b087-3087-9536-69f180128162.roa (raw, json) Hash identifier: zWiVqLRtSIwffBN2/iYOokQg2KhYEPYoPf5oxX67PjE= Subject key identifier: 9D:CE:44:67:BC:61:0D:DB:F1:D9:37:C9:24:C4:58:E4:17:96:D1:E0 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584B0FA6BD310EE11950CB9C7480 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 16509 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:bd:31:0e:e1:19:50:cb:9c:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=e4be90e0-78eb-457c-9b18-7be38c29828d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:50:ab:b2:9e:53:73:e5:ae:9d:2b:7b:c9: 64:68:23:08:d2:c2:e0:35:3b:a0:f3:00:80:3a:1f: 95:04:87:7f:83:b4:99:97:e8:20:de:86:32:be:90: fe:31:e0:d8:df:e5:a5:94:95:5a:2c:6c:f5:06:58: 83:4b:b9:97:3a:a3:31:bc:d5:96:1d:1a:eb:47:23: c0:93:16:ce:37:4f:29:83:7a:50:59:69:cc:0b:10: c2:4b:30:af:b4:a0:43:f0:cf:c2:4d:1b:7d:be:e9: 0c:80:1c:d5:e1:8f:ea:02:b2:53:a9:94:72:18:b6: 56:7e:eb:8a:24:b0:43:7a:1a:1b:c0:02:77:50:ff: 4f:74:1c:1c:08:98:70:cd:1e:8d:df:95:91:65:44: f3:ad:cb:f7:1e:3d:98:cd:da:09:e2:a7:dd:5a:13: af:e9:96:75:1d:aa:ea:6f:ba:e2:6c:3a:97:dc:d0: 95:ad:86:c6:e6:1e:03:3c:a3:bb:9a:db:3b:eb:54: 79:ac:ec:c0:b7:a4:85:ec:2e:a1:1c:1a:5d:df:4f: b2:7b:7c:94:59:f4:1d:97:cc:4d:f0:c5:32:65:ba: d1:95:51:60:af:bf:7e:7e:34:2d:6c:20:75:53:62: f7:39:f0:c7:2d:14:8a:5d:3b:c4:d9:67:dc:04:fb: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CE:44:67:BC:61:0D:DB:F1:D9:37:C9:24:C4:58:E4:17:96:D1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:18:cf:97:36:69:26:79:ca:8c:70:ea:90:5c:23:d7:2f:af: 86:8b:ad:e0:59:af:74:dc:48:e1:78:30:75:7d:29:c8:95:b9: 8c:47:b9:ae:b1:1b:66:41:89:5e:b9:6c:99:f6:90:e5:85:f6: a7:20:e4:2a:3a:c0:7b:b8:0d:24:3b:a3:69:8f:25:c6:e3:a0: 51:44:69:09:ec:c8:44:15:7e:e8:76:da:da:a0:6b:a7:1b:1b: 21:bc:cf:9d:c4:22:ad:08:8a:36:c4:22:7b:f4:4f:a9:dd:98: 05:8b:8d:df:ab:3d:c8:8e:c7:d9:63:dd:05:43:4b:bd:2d:5a: b3:61:83:93:85:aa:94:47:0d:dc:d4:a2:a0:25:b2:f4:30:ef: 5a:46:ef:50:ec:38:9a:56:cc:fc:25:57:d0:fc:c8:0c:14:d1: 6d:6e:7e:45:54:d8:8a:99:d9:98:4e:3b:d0:c3:fb:5f:21:a3: f1:39:ed:81:5d:61:fc:6d:39:68:49:f7:21:ff:05:e3:ba:b5: 4e:a9:36:bb:f2:15:ab:c6:34:24:9b:f2:23:7f:3e:c7:8b:16: 30:d2:77:32:ce:1d:ff:52:56:a5:1c:01:76:2c:48:d2:10:9f: 4f:3e:c5:3b:b4:ae:ad:0b:b0:99:10:56:73:ef:8e:15:d4:61: f3:2a:95:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpr0xDuEZUMucdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTRiZTkwZTAtNzhlYi00NTdjLTliMTgtN2JlMzhjMjk4MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw9Qq7KeU3Plrp0re8lkaCMI0sLgNTug8wCA Oh+VBId/g7SZl+gg3oYyvpD+MeDY3+WllJVaLGz1BliDS7mXOqMxvNWWHRrrRyPA kxbON08pg3pQWWnMCxDCSzCvtKBD8M/CTRt9vukMgBzV4Y/qArJTqZRyGLZWfuuK JLBDehobwAJ3UP9PdBwcCJhwzR6N35WRZUTzrcv3Hj2YzdoJ4qfdWhOv6ZZ1Harq b7ribDqX3NCVrYbG5h4DPKO7mts761R5rOzAt6SF7C6hHBpd30+ye3yUWfQdl8xN 8MUyZbrRlVFgr79+fjQtbCB1U2L3OfDHLRSKXTvE2WfcBPszLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3ORGe8YQ3b8dk3ySTEWOQXltHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNWViYzRkZDQtYjA4Ny0z MDg3LTk1MzYtNjlmMTgwMTI4MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQYz5c2aSZ5yoxw6pBcI9cvr4aLreBZr3TcSOF4MHV9KciVuYxHua6x G2ZBiV65bJn2kOWF9qcg5Co6wHu4DSQ7o2mPJcbjoFFEaQnsyEQVfuh22tqga6cb GyG8z53EIq0IijbEInv0T6ndmAWLjd+rPciOx9lj3QVDS70tWrNhg5OFqpRHDdzU oqAlsvQw71pG71DsOJpWzPwlV9D8yAwU0W1ufkVU2IqZ2ZhOO9DD+18ho/E57YFd YfxtOWhJ9yH/BeO6tU6pNrvyFavGNCSb8iN/PseLFjDSdzLOHf9SVqUcAXYsSNIQ n08+xTu0rq0LsJkQVnPvjhXUYfMqleo= -----END CERTIFICATE-----Generated at Sat Oct 11 03:11:29 2025 by rpki-client