$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa File: 9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa (raw, json) Hash identifier: SnRqwIrH4HD0hnMzo0JrVYXxv9LLLjwwwyBW0eRFMxk= Subject key identifier: A4:89:9F:B5:6A:A1:98:3C:05:A0:5A:7A:0C:65:85:BA:1D:B5:A7:F1 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584B62020C3885B727965CE65A40 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 16509 IP address blocks: 147.124.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0c:38:85:b7:27:96:5c:e6:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d4e3f114-018e-424d-b928-e6d26f714be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:97:e8:9f:2e:99:66:09:ec:d5:42:55:28: b1:fd:9a:de:c6:88:40:44:eb:03:85:8a:1b:22:6c: b2:a3:72:99:f8:ae:70:25:ee:8b:c5:f7:f1:a4:b7: 5c:81:4d:8f:e3:9d:f1:29:b7:0e:7d:e8:0e:4a:c6: a7:04:ea:ab:2a:82:51:67:8c:2b:41:f4:5d:b0:f2: d2:4a:37:f5:49:81:04:81:49:54:5e:71:37:b3:8c: 14:53:fb:94:fe:64:93:d4:8c:e8:99:55:ac:b7:01: 53:55:bd:84:0e:18:5e:05:95:45:76:37:f5:87:68: db:0d:b0:ce:6e:20:41:b9:e0:69:17:cf:d4:e4:fb: 9c:56:55:02:11:3c:65:17:c9:99:08:96:20:9e:67: 61:d3:5b:8d:ef:8f:e7:82:34:9c:4f:62:3d:bf:98: 4f:dc:d2:86:50:1c:b2:b9:d8:9f:12:e4:cf:c8:98: 23:13:f1:03:2b:df:64:c8:be:52:be:be:fa:f2:cf: 27:3a:b4:45:f3:c0:06:67:07:bb:80:8e:ea:91:f4: 71:ad:19:1b:43:c8:7d:7b:18:b5:8a:40:e7:14:5e: 5d:f7:36:32:88:5b:6a:bd:77:7c:2a:11:a5:71:73: fa:5d:7e:d3:3a:81:f9:0d:e8:f1:c9:a7:b4:03:7c: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:89:9F:B5:6A:A1:98:3C:05:A0:5A:7A:0C:65:85:BA:1D:B5:A7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f5:b1:61:d3:45:03:70:d3:95:bb:e4:bf:3e:81:52:02:c7: 0e:16:62:1b:b7:67:0e:04:ac:49:67:7a:00:f6:10:94:61:7f: 79:90:9d:b8:00:1b:f4:2e:b9:a7:ca:31:e7:e5:05:6b:3d:da: b5:4c:14:35:dc:51:37:6b:e6:35:94:e2:cb:ea:8c:a8:f1:39: 67:d4:1a:82:81:f9:fa:46:40:c7:65:81:c1:88:33:81:2f:7b: 55:29:27:8d:c0:ff:64:50:98:10:86:1e:94:92:e3:6f:6b:59: 75:75:45:43:f1:95:42:28:a7:ff:df:7e:47:38:4d:ba:32:b8: 5c:03:44:12:c3:d0:d0:6f:dd:95:9d:c6:d8:02:62:e3:39:a0: 40:8b:35:cd:6b:d7:1a:b7:4f:eb:cd:a3:83:79:33:e2:ea:2f: 79:63:a5:71:ae:03:94:c3:7b:d6:86:c7:d9:37:36:77:ed:6b: 7c:f6:b6:99:c6:ba:e9:a9:81:d6:83:f1:0b:1c:ed:ed:cf:9d: 76:36:18:c6:ee:be:46:14:4b:e8:cb:b9:fb:0b:a3:b0:e4:16: 2d:e2:e4:31:3e:a2:86:8f:2b:e7:44:8b:7d:62:f4:2e:85:6e: 75:4a:ce:27:c8:d4:64:41:74:af:db:f2:53:51:74:04:e8:fd: 14:bb:95:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgw4hbcnllzmWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDRlM2YxMTQtMDE4ZS00MjRkLWI5MjgtZTZkMjZmNzE0YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwCX6J8umWYJ7NVCVSix/ZrexohAROsDhYob Imyyo3KZ+K5wJe6LxffxpLdcgU2P453xKbcOfegOSsanBOqrKoJRZ4wrQfRdsPLS Sjf1SYEEgUlUXnE3s4wUU/uU/mST1IzomVWstwFTVb2EDhheBZVFdjf1h2jbDbDO biBBueBpF8/U5PucVlUCETxlF8mZCJYgnmdh01uN74/ngjScT2I9v5hP3NKGUByy udifEuTPyJgjE/EDK99kyL5Svr768s8nOrRF88AGZwe7gI7qkfRxrRkbQ8h9exi1 ikDnFF5d9zYyiFtqvXd8KhGlcXP6XX7TOoH5Dejxyae0A3zLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSJn7VqoZg8BaBaegxlhbodtafxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOWMwOWMxYTgtYzNlMi0z OTgwLWFjNGYtNjYyYTNiM2NiY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn1sWHTRQNw05W75L8+gVICxw4WYhu3Zw4ErElnegD2EJRhf3mQnbgA G/QuuafKMeflBWs92rVMFDXcUTdr5jWU4svqjKjxOWfUGoKB+fpGQMdlgcGIM4Ev e1UpJ43A/2RQmBCGHpSS429rWXV1RUPxlUIop//ffkc4TboyuFwDRBLD0NBv3ZWd xtgCYuM5oECLNc1r1xq3T+vNo4N5M+LqL3ljpXGuA5TDe9aGx9k3Nnfta3z2tpnG uumpgdaD8Qsc7e3PnXY2GMbuvkYUS+jLufsLo7DkFi3i5DE+ooaPK+dEi31i9C6F bnVKzifI1GRBdK/b8lNRdATo/RS7lYQ= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:30 2025 by rpki-client