$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa File: 3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa (raw, json) Hash identifier: u63nxpXxKoXKpoq6QmZgbtLCF82RvvvGg5W5VgqFCKM= Subject key identifier: 8E:E6:7E:E0:38:A0:8D:5C:14:8E:03:93:F2:35:EC:90:80:92:52:CF Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584F5A3310BB868D7205B4A54CA0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 147.124.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:10:bb:86:8d:72:05:b4:a5:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=42caab2b-33f3-4e6d-a892-9fff998c0618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7d:55:a3:b6:36:e6:73:51:1e:29:29:84:b4: 6a:10:cc:af:8b:f6:ee:43:3f:84:4b:53:fc:73:06: 47:94:0a:cb:e9:1c:ac:b4:fe:94:bd:07:39:05:b2: 87:58:4a:de:11:44:1a:a6:3e:a2:b2:54:fc:14:bc: 95:4e:f2:af:bd:8d:b6:13:b9:0d:61:08:66:4d:5c: 37:fb:c3:b7:77:68:ee:b8:c1:c5:4c:16:3b:c9:36: f4:71:fd:4b:7c:bb:14:3d:fa:d8:b5:a3:32:9c:ae: 68:bc:75:7a:e2:04:cb:6d:fc:9e:b1:21:63:a0:e7: c7:8c:1f:90:af:99:dc:fe:a2:38:ce:58:a2:9e:c4: 9e:5b:f7:40:5b:f6:46:81:d5:36:d3:90:82:ee:aa: 40:c5:a0:d3:95:43:f7:3d:28:4d:2f:e3:7b:21:67: 9f:9a:10:05:41:22:28:c4:d1:52:c6:62:84:dc:c5: 35:22:bf:fd:1f:7b:ec:ac:6f:01:16:c0:8c:df:89: a4:b5:f0:9c:13:47:14:d1:79:73:e8:70:44:6e:7e: e5:41:00:90:60:74:7a:87:78:66:81:31:dd:9f:c7: 39:bd:f0:52:6e:fb:40:9d:09:82:46:92:37:16:b5: 0b:7d:be:4c:9d:89:d4:e8:ee:a7:04:cd:4d:61:8e: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E6:7E:E0:38:A0:8D:5C:14:8E:03:93:F2:35:EC:90:80:92:52:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6a:ef:17:e6:1d:eb:8a:82:58:16:90:fc:82:3a:4c:51:e7: 7e:3a:22:91:13:eb:b8:30:d9:cb:38:05:18:07:6d:33:4d:be: 8c:8e:4e:c0:70:cf:91:56:c6:6d:a6:8c:4b:5d:8c:fd:90:15: ef:a1:56:b1:0f:53:fb:0c:02:c8:22:97:de:e5:86:bc:38:df: 11:7e:a7:77:04:0c:69:94:6b:63:c5:d7:67:ba:3e:2c:32:9f: 20:81:e7:48:33:3a:4d:c7:11:09:a1:1d:c7:95:88:02:28:38: 4f:88:6f:39:68:b1:6d:b3:c9:af:b3:cc:f4:ea:a5:f5:92:f7: fc:02:89:e2:5e:73:69:48:4e:79:8b:9a:b6:6d:b9:14:29:b3: 59:9c:cf:6a:9f:75:68:f2:19:03:20:b1:45:29:b8:6a:5b:8b: 76:a2:a2:a3:22:8f:84:26:1e:8e:bd:06:97:fc:da:01:7e:f3: bc:96:e7:db:bf:13:77:29:c8:db:10:fd:42:40:71:b7:be:07: c0:3a:f4:3f:a6:33:0a:90:b4:1c:f7:e7:81:d3:f5:b9:90:e6: f5:77:61:61:f0:52:ff:ba:0e:a8:e6:59:2d:25:9d:5e:0b:36: fb:1c:44:4f:2b:1b:7e:7d:b8:e8:76:ea:db:4c:e0:b6:b1:72: 94:47:14:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxC7ho1yBbSlTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDJjYWFiMmItMzNmMy00ZTZkLWE4OTItOWZmZjk5OGMwNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX1Vo7Y25nNRHikphLRqEMyvi/buQz+ES1P8 cwZHlArL6RystP6UvQc5BbKHWEreEUQapj6islT8FLyVTvKvvY22E7kNYQhmTVw3 +8O3d2juuMHFTBY7yTb0cf1LfLsUPfrYtaMynK5ovHV64gTLbfyesSFjoOfHjB+Q r5nc/qI4zliinsSeW/dAW/ZGgdU205CC7qpAxaDTlUP3PShNL+N7IWefmhAFQSIo xNFSxmKE3MU1Ir/9H3vsrG8BFsCM34mktfCcE0cU0Xlz6HBEbn7lQQCQYHR6h3hm gTHdn8c5vfBSbvtAnQmCRpI3FrULfb5MnYnU6O6nBM1NYY4F3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7mfuA4oI1cFI4Dk/I17JCAklLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMzA2NWU5NmQtMWZjZi0z OGYzLWFlNDgtYmZlYjJhMTdhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhq7xfmHeuKglgWkPyCOkxR5346IpET67gw2cs4BRgHbTNNvoyOTsBw z5FWxm2mjEtdjP2QFe+hVrEPU/sMAsgil97lhrw43xF+p3cEDGmUa2PF12e6Piwy nyCB50gzOk3HEQmhHceViAIoOE+IbzlosW2zya+zzPTqpfWS9/wCieJec2lITnmL mrZtuRQps1mcz2qfdWjyGQMgsUUpuGpbi3aioqMij4QmHo69Bpf82gF+87yW59u/ E3cpyNsQ/UJAcbe+B8A69D+mMwqQtBz354HT9bmQ5vV3YWHwUv+6DqjmWS0lnV4L NvscRE8rG359uOh26ttM4LaxcpRHFJw= -----END CERTIFICATE-----Generated at Wed Oct 7 04:27:10 2026 by rpki-client