$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa File: 880de72b-888b-3dde-b1b4-c86038197a8a.roa (raw, json) Hash identifier: j1kcak3AJNTXkC7UVo9D7fhhBuU77kpohpDntJDIuSI= Subject key identifier: 56:CA:81:B5:FA:3A:35:0D:16:6F:0B:57:0D:CB:C1:D5:48:F3:59:18 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584B3126F8CE5326BCB1D2C661C0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 396982 IP address blocks: 147.124.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f8:ce:53:26:bc:b1:d2:c6:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=cd65c8a9-97a1-43f1-8a57-643c5af7d473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:6f:37:fe:eb:44:f9:e3:9c:cd:32:35:40: 26:fe:5e:07:82:a0:51:b7:f0:b0:60:85:2f:6d:e4: fa:5b:67:09:76:2f:2f:04:7a:76:03:d6:d4:79:05: 96:92:21:96:3a:64:fc:43:d7:5f:19:e7:b3:a8:10: ca:1a:9f:3e:c6:22:65:2b:a2:27:1f:e5:28:fd:82: 22:e1:1f:ef:fd:13:ff:79:8a:60:cb:b1:93:b7:b8: 05:88:4e:40:18:fb:1b:fb:c5:1c:7a:03:98:d3:f3: 49:72:2d:5c:07:de:ab:76:45:38:2c:ba:5b:69:38: 29:e8:ba:cf:cc:45:83:41:7d:d8:f4:35:68:cc:65: f7:87:43:29:5a:61:0d:b2:ca:ac:65:67:a7:5a:d6: 5d:8b:31:72:b9:2a:a9:b6:b2:ce:11:94:bf:ef:de: 31:75:77:4c:d3:f3:08:94:2b:c1:c7:87:5d:81:4e: 0b:25:03:fd:8b:d6:23:48:3e:a7:75:48:8f:09:f3: 00:5c:29:8d:05:3f:dc:fe:5f:e7:9e:e8:53:dd:76: f1:72:a5:98:b9:ab:44:69:b8:d0:b2:b3:a1:5f:68: ff:c4:a7:c9:c3:c0:25:75:22:34:11:94:d7:94:83: 19:56:6a:1a:ef:ff:c0:c6:37:a1:e8:4e:e3:d7:67: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CA:81:B5:FA:3A:35:0D:16:6F:0B:57:0D:CB:C1:D5:48:F3:59:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:24:57:a1:8e:f9:9a:73:81:31:c4:55:17:47:46:02:2f:3a: b8:7e:3e:ba:74:cf:50:35:f1:02:61:65:19:be:fc:5e:3c:f4: 63:0c:6d:73:07:b3:6f:f2:87:fa:11:82:f3:2c:d9:3e:54:fd: 5b:f6:ff:1b:30:cd:18:53:e5:d3:a7:08:70:8e:2e:8e:31:ca: d4:ba:cb:17:16:b7:ee:44:7f:ae:1b:6e:f3:86:cd:72:ff:55: 0d:cb:7d:3a:8b:3a:3a:71:48:ef:a0:71:71:d5:35:19:b7:f2: 92:d1:c6:fb:af:ac:fe:7b:8b:ed:23:ae:21:29:65:a3:ee:c1: 13:5f:7a:b7:ed:7e:da:a0:87:87:cf:63:7d:4f:65:73:0d:2e: 8b:c9:ce:a3:a1:77:33:b7:ff:1e:37:54:f9:bb:00:18:09:19: f5:0f:9e:81:d1:b6:8a:d4:f6:e8:4a:80:ab:73:06:02:58:af: ec:e7:bd:9b:63:fa:54:55:22:8f:c6:b2:89:d2:f5:a5:27:55: ce:76:ef:fd:4b:90:24:0b:ca:5d:44:d3:c7:d3:fc:57:f3:49: 31:f0:0f:c8:15:50:a9:18:18:ef:fe:cb:c0:68:f2:22:0e:47: b5:e6:a1:9f:29:88:4f:9e:c0:eb:77:db:5c:88:5f:e2:59:04: 21:5c:9e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvjOUya8sdLGYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk Y2Q2NWM4YTktOTdhMS00M2YxLThhNTctNjQzYzVhZjdkNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS5vN/7rRPnjnM0yNUAm/l4HgqBRt/CwYIUv beT6W2cJdi8vBHp2A9bUeQWWkiGWOmT8Q9dfGeezqBDKGp8+xiJlK6InH+Uo/YIi 4R/v/RP/eYpgy7GTt7gFiE5AGPsb+8UcegOY0/NJci1cB96rdkU4LLpbaTgp6LrP zEWDQX3Y9DVozGX3h0MpWmENssqsZWenWtZdizFyuSqptrLOEZS/794xdXdM0/MI lCvBx4ddgU4LJQP9i9YjSD6ndUiPCfMAXCmNBT/c/l/nnuhT3XbxcqWYuatEabjQ srOhX2j/xKfJw8AldSI0EZTXlIMZVmoa7//Axjeh6E7j12fCEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbKgbX6OjUNFm8LVw3LwdVI81kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvODgwZGU3MmItODg4Yi0z ZGRlLWIxYjQtYzg2MDM4MTk3YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIkV6GO+ZpzgTHEVRdHRgIvOrh+Prp0z1A18QJhZRm+/F489GMMbXMH s2/yh/oRgvMs2T5U/Vv2/xswzRhT5dOnCHCOLo4xytS6yxcWt+5Ef64bbvOGzXL/ VQ3LfTqLOjpxSO+gcXHVNRm38pLRxvuvrP57i+0jriEpZaPuwRNferftftqgh4fP Y31PZXMNLovJzqOhdzO3/x43VPm7ABgJGfUPnoHRtorU9uhKgKtzBgJYr+znvZtj +lRVIo/GsonS9aUnVc527/1LkCQLyl1E08fT/FfzSTHwD8gVUKkYGO/+y8Bo8iIO R7XmoZ8piE+ewOt321yIX+JZBCFcnrg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:45 2025 by rpki-client