$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa File: 20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json) Hash identifier: woXLwvqwf+hZGVPCkyJw3CSLKH6pv0OfktOcEoZhN6M= Subject key identifier: 84:12:3C:93:0B:8C:82:26:7C:CD:77:72:82:65:3D:EB:48:6E:C7:68 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584E35FF13FDDF49510585987B00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 396982 IP address blocks: 147.124.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:13:fd:df:49:51:05:85:98:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=f04429b8-7e5c-4ed1-b1ba-dd092009c6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:32:3d:c0:41:48:c5:0f:d7:47:61:89:e0: 7b:84:d8:31:30:97:c6:6a:10:eb:73:ae:2b:13:4d: 94:e4:e9:06:c5:7b:b9:08:4e:f8:fb:06:50:8f:89: b9:56:ba:39:4d:0c:8d:b2:5d:17:75:b0:74:99:49: f8:c7:e9:e3:7b:cc:08:c4:6c:31:02:47:7d:3d:53: be:7e:27:ce:46:bd:5e:e8:ec:43:12:03:84:ad:c4: 39:a3:a0:39:8c:73:03:29:4f:42:b4:0f:91:46:ab: d4:3e:dd:13:8a:b0:6e:d4:4e:38:70:86:d1:59:3a: ae:20:85:41:bd:e5:74:d3:25:6b:96:ca:70:38:ad: b4:40:0d:a3:37:9d:ab:36:a5:0d:f1:ff:72:23:0d: 8c:5a:f7:2f:08:31:38:43:04:49:a0:97:c3:32:fb: 52:cd:8e:c2:50:11:c3:06:05:0b:e1:69:06:04:7e: e2:e1:92:78:53:2e:b5:1f:f7:82:64:e5:38:6b:a9: 5e:78:eb:0c:df:af:12:33:d9:be:6f:3e:fd:9a:2a: 9e:fe:88:44:96:ff:75:a5:2b:4e:31:8b:30:da:23: ee:98:07:f6:b6:bd:9a:bc:f5:87:d8:bb:0e:af:6e: f1:6a:85:2f:04:50:85:cc:70:48:e5:c1:41:84:96: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:3C:93:0B:8C:82:26:7C:CD:77:72:82:65:3D:EB:48:6E:C7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:df:2a:26:a0:33:5e:4b:ea:3d:e2:d4:f6:b6:e8:c9:7a:09: 3e:5e:ba:7a:b7:81:e9:82:37:2d:2a:eb:01:f3:17:c7:9c:f9: 5d:c8:ff:62:5a:53:14:bf:00:9f:22:10:e6:99:e5:e9:93:fc: 05:02:90:b0:e2:8f:36:52:34:06:ff:33:77:6a:17:8a:c0:3a: c5:a1:06:08:fb:18:7b:af:e8:4a:a3:19:7a:79:6f:b1:71:eb: 99:7e:a9:56:bf:41:8d:72:55:fb:09:e9:d5:91:6f:25:1b:bc: bf:8b:59:c9:ca:23:e9:12:18:6f:aa:6f:8b:df:d9:c7:26:0a: d0:0f:1e:d9:97:64:8e:ef:a0:bd:c3:f8:3a:c5:6b:d5:a2:86: f5:00:48:27:cf:17:a3:13:2a:e9:5c:76:89:ac:1c:4a:f9:c6: 5a:b8:89:86:e7:49:30:ee:f6:4d:1f:84:ca:ee:f5:48:8e:f0: ab:78:8c:1b:b1:49:3d:47:ed:17:9c:42:67:af:bc:e8:b8:5f: 07:59:24:df:9a:ab:2a:83:ff:ad:b4:fa:14:ec:c1:16:8e:9b: 0b:2b:e8:c8:25:9c:87:5b:18:ad:b6:8c:4e:bd:47:b2:d5:6d: 49:8e:09:f0:7f:54:ef:60:63:c5:49:77:03:f8:70:5b:ff:92: 02:a7:ff:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xP930lRBYWYewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZjA0NDI5YjgtN2U1Yy00ZWQxLWIxYmEtZGQwOTIwMDljNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIAyPcBBSMUP10dhieB7hNgxMJfGahDrc64r E02U5OkGxXu5CE74+wZQj4m5Vro5TQyNsl0XdbB0mUn4x+nje8wIxGwxAkd9PVO+ fifORr1e6OxDEgOErcQ5o6A5jHMDKU9CtA+RRqvUPt0TirBu1E44cIbRWTquIIVB veV00yVrlspwOK20QA2jN52rNqUN8f9yIw2MWvcvCDE4QwRJoJfDMvtSzY7CUBHD BgUL4WkGBH7i4ZJ4Uy61H/eCZOU4a6leeOsM368SM9m+bz79miqe/ohElv91pStO MYsw2iPumAf2tr2avPWH2LsOr27xaoUvBFCFzHBI5cFBhJZowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQSPJMLjIImfM13coJlPetIbsdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7fKiagM15L6j3i1Pa26Ml6CT5eunq3gemCNy0q6wHzF8ec+V3I/2Ja UxS/AJ8iEOaZ5emT/AUCkLDijzZSNAb/M3dqF4rAOsWhBgj7GHuv6EqjGXp5b7Fx 65l+qVa/QY1yVfsJ6dWRbyUbvL+LWcnKI+kSGG+qb4vf2ccmCtAPHtmXZI7voL3D +DrFa9WihvUASCfPF6MTKulcdomsHEr5xlq4iYbnSTDu9k0fhMru9UiO8Kt4jBux ST1H7RecQmevvOi4XwdZJN+aqyqD/620+hTswRaOmwsr6MglnIdbGK22jE69R7LV bUmOCfB/VO9gY8VJdwP4cFv/kgKn/5s= -----END CERTIFICATE-----Generated at Wed Jun 24 15:52:10 2026 by rpki-client