$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa File: 3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa (raw, json) Hash identifier: /TGFA48c21xkNQbSZl42kkBhghOxmMH1KoBARmspWFI= Subject key identifier: 9A:16:C3:0D:5A:3B:A4:62:DA:5B:A3:E0:60:5A:58:18:32:87:D8:48 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D35E1E1AC15DD1D63106F2540 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa Signing time: Wed 18 Mar 2026 15:14:32 +0000 ROA not before: Wed 18 Mar 2026 15:14:32 +0000 ROA not after: Tue 16 Jun 2026 15:14:32 +0000 asID: 396982 IP address blocks: 147.124.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:e1:e1:ac:15:dd:1d:63:10:6f:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 18 15:14:32 2026 GMT Not After : Jun 16 15:14:32 2026 GMT Subject: CN=5a8b9028-928c-4a8c-8c0e-fca7dd825a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:2a:b4:a5:72:2b:0b:49:36:1d:79:5a:68: 7d:11:76:cd:4c:5f:08:96:39:50:25:f8:ba:fc:ef: 89:4b:f8:bc:3b:13:85:be:b7:5a:b9:98:1f:1c:a9: b8:b2:06:04:3b:b0:48:f0:dc:22:4c:4c:27:07:2d: 34:22:b8:c0:25:77:63:8a:13:eb:c7:86:09:cc:87: 53:5a:2a:38:ec:e2:8a:ab:a4:4c:c0:8e:f1:fa:1d: 0b:ac:36:6f:25:7a:d1:b2:80:18:41:43:73:d1:41: 01:83:fa:bc:89:74:af:c8:94:58:30:9f:eb:21:8f: 20:00:4f:5d:e6:08:0e:6d:23:36:06:48:4f:81:75: fe:44:7b:db:b9:ea:f2:9c:a4:bd:84:97:4c:0f:b1: c3:6d:dc:d2:68:09:98:0f:0d:76:e4:1b:7c:2e:b0: e5:02:4f:0f:65:c1:4f:25:b7:a8:03:42:1e:6b:44: 2b:90:6b:69:87:4a:16:57:65:5a:1d:57:ac:39:f8: 6a:54:89:34:36:34:57:70:c2:e6:ac:d0:18:66:bd: 99:dc:b7:f0:68:51:a3:62:9f:15:35:f8:01:ca:97: b9:e6:e9:c0:49:e2:6e:9b:94:27:8a:9f:fa:57:1c: 88:79:12:53:75:72:75:c6:7c:2a:5b:7b:df:c5:7c: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:16:C3:0D:5A:3B:A4:62:DA:5B:A3:E0:60:5A:58:18:32:87:D8:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b4:50:b3:d8:f6:2a:a0:52:26:f8:38:9e:ab:2a:9e:e0:ed: dc:a6:45:61:4a:a0:48:a7:56:73:da:ea:60:17:2b:66:f2:84: d4:57:f6:3b:af:df:3d:d0:37:d4:b6:63:54:68:23:a5:a7:f6: 62:d2:74:fb:f5:ae:5f:13:69:3b:88:c8:4c:ff:ca:6d:3b:8c: ac:0c:41:d1:b5:82:94:0d:3c:74:75:51:fb:40:2b:d7:eb:75: 8e:7b:fb:28:f1:22:e6:05:0c:00:42:57:10:63:2a:6e:23:b6: 1a:c1:cd:d6:b3:22:77:3c:66:fa:ee:c1:3c:2f:e8:74:aa:e3: 5c:6d:47:24:d6:92:01:b3:29:7f:94:a2:3e:2c:ea:f2:9b:f9: e2:f2:4f:f9:e3:0c:fe:ec:90:1e:f8:5f:4e:de:1b:88:5a:3b: 93:1c:4c:7a:4d:76:a2:9c:f4:24:84:fa:f2:23:f9:fd:58:93: 81:e5:f4:f4:88:5a:7e:9f:df:83:b1:37:ed:77:97:c8:c0:27: f9:8e:22:a3:89:e8:5a:46:32:fa:31:3d:a7:3e:28:bc:c2:fe: 7c:dc:e0:4f:35:0d:04:23:78:4d:20:ae:ad:42:29:e4:54:31: 21:6b:0c:69:33:e9:83:cd:30:95:0b:30:01:2b:0d:76:84:24: 21:44:a3:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE014eGsFd0dYxBvJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDMxODE1MTQzMloXDTI2MDYxNjE1MTQzMlowLzEtMCsGA1UEAxMk NWE4YjkwMjgtOTI4Yy00YThjLThjMGUtZmNhN2RkODI1YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGEqtKVyKwtJNh15Wmh9EXbNTF8IljlQJfi6 /O+JS/i8OxOFvrdauZgfHKm4sgYEO7BI8NwiTEwnBy00IrjAJXdjihPrx4YJzIdT Wio47OKKq6RMwI7x+h0LrDZvJXrRsoAYQUNz0UEBg/q8iXSvyJRYMJ/rIY8gAE9d 5ggObSM2BkhPgXX+RHvbuerynKS9hJdMD7HDbdzSaAmYDw125Bt8LrDlAk8PZcFP JbeoA0Iea0QrkGtph0oWV2VaHVesOfhqVIk0NjRXcMLmrNAYZr2Z3LfwaFGjYp8V NfgBype55unASeJum5Qnip/6VxyIeRJTdXJ1xnwqW3vfxXyGAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoWww1aO6Ri2luj4GBaWBgyh9hIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMzA2NWU5NmQtMWZjZi0z OGYzLWFlNDgtYmZlYjJhMTdhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC0ULPY9iqgUib4OJ6rKp7g7dymRWFKoEinVnPa6mAXK2byhNRX9juv 3z3QN9S2Y1RoI6Wn9mLSdPv1rl8TaTuIyEz/ym07jKwMQdG1gpQNPHR1UftAK9fr dY57+yjxIuYFDABCVxBjKm4jthrBzdazInc8ZvruwTwv6HSq41xtRyTWkgGzKX+U oj4s6vKb+eLyT/njDP7skB74X07eG4haO5McTHpNdqKc9CSE+vIj+f1Yk4Hl9PSI Wn6f34OxN+13l8jAJ/mOIqOJ6FpGMvoxPac+KLzC/nzc4E81DQQjeE0grq1CKeRU MSFrDGkz6YPNMJULMAErDXaEJCFEo3I= -----END CERTIFICATE-----Generated at Thu Mar 19 15:37:32 2026 by rpki-client