$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa File: 3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa (raw, json) Hash identifier: PxKYg5ZQ5tQs+YrKzatFcUyk5QN+Cdcga8ixCdaqoTI= Subject key identifier: F5:46:8A:FC:FE:EB:54:6F:00:89:32:29:C9:3E:26:97:43:A2:0E:45 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584EB8474F00467106256AD26E80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 396982 IP address blocks: 147.124.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:4f:00:46:71:06:25:6a:d2:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=fd36f2ed-a991-4c6d-bbf9-c89019491ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:89:55:28:cb:8e:47:1c:bf:36:01:18:77: e3:43:4a:8b:0e:14:b2:2c:5d:1c:88:c7:f4:20:26: 99:cd:aa:3a:26:c6:7e:6a:29:13:3c:1c:1a:15:0f: 28:70:0c:a1:93:b0:63:fd:6d:b5:bb:13:51:fd:7f: dc:11:66:66:2c:19:72:ad:53:f3:c8:63:a6:96:08: c5:f7:37:8c:c0:8c:69:84:5d:59:5d:40:3a:69:4b: 08:ca:09:44:06:46:c3:d4:2d:51:5b:95:37:6b:72: 3c:35:66:2f:0e:cc:84:36:7b:a8:55:8e:7a:3a:b0: 91:92:32:6f:4a:a1:3f:ad:85:a7:1d:cc:ab:68:c7: 63:72:ba:de:7f:2f:85:b0:2b:c3:ad:11:41:8a:17: 27:25:8b:60:f2:ca:03:08:4b:d2:2a:f5:c9:e9:fb: 45:9a:a3:a6:50:a2:1f:07:14:72:bc:50:f1:fb:78: 06:ac:1f:f4:aa:ee:4c:cd:74:ea:21:d6:90:70:c7: d3:86:17:1c:da:31:fc:b9:8c:44:f9:9c:13:61:ee: 81:73:43:95:a2:71:f8:6d:08:56:50:c7:5d:41:b9: a2:e2:c0:ef:68:57:7f:64:e8:9e:98:9d:8f:bc:cc: 4e:31:c5:8e:25:34:b3:fd:0e:99:69:ed:88:be:6a: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:46:8A:FC:FE:EB:54:6F:00:89:32:29:C9:3E:26:97:43:A2:0E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3065e96d-1fcf-38f3-ae48-bfeb2a17afa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ce:cc:ac:5b:47:4b:9f:3e:06:fa:75:ff:6e:1a:bf:59:f5: 19:37:a1:50:d8:f3:7a:e4:7c:ee:d3:30:71:0f:20:47:1d:46: fe:46:e8:12:9c:d6:cd:fc:b6:e3:d8:dd:d7:93:59:91:fa:97: 05:ce:8a:a5:e2:d2:e4:a1:e9:18:49:87:6c:5b:74:8a:64:fc: e2:a9:14:48:39:e7:82:e5:dc:4d:39:40:db:ea:6f:6e:c7:a4: 76:d5:cf:b7:b1:56:eb:cd:2e:8a:a6:ed:16:bd:df:5d:a4:7f: e4:b2:79:26:c2:2c:93:ce:10:99:af:89:35:ff:34:f8:74:f3: ff:1e:a1:44:ae:07:85:8e:57:8b:d7:92:70:19:67:f9:19:3b: 26:f7:93:7f:96:a9:b0:6f:b8:06:6b:d0:2a:5a:1b:e4:68:7e: 22:b8:bd:ef:53:78:12:d1:b9:a8:0c:8f:d8:24:27:e3:f7:0c: 05:ce:fc:fa:72:7b:f5:3a:a2:86:e4:46:49:ac:c6:f1:6c:2b: 96:f4:24:82:68:96:ab:9c:a2:f3:7a:93:75:f1:f4:30:e6:e8: 1e:42:53:96:c2:04:98:47:5b:04:9a:ce:b2:a8:c2:29:80:d1: 0c:1a:dd:35:01:9f:e3:f2:40:2a:64:9d:0d:f0:4b:32:0b:3d: 27:24:ec:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R08ARnEGJWrSboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZmQzNmYyZWQtYTk5MS00YzZkLWJiZjktYzg5MDE5NDkxZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoquJVSjLjkccvzYBGHfjQ0qLDhSyLF0ciMf0 ICaZzao6JsZ+aikTPBwaFQ8ocAyhk7Bj/W21uxNR/X/cEWZmLBlyrVPzyGOmlgjF 9zeMwIxphF1ZXUA6aUsIyglEBkbD1C1RW5U3a3I8NWYvDsyENnuoVY56OrCRkjJv SqE/rYWnHcyraMdjcrrefy+FsCvDrRFBihcnJYtg8soDCEvSKvXJ6ftFmqOmUKIf BxRyvFDx+3gGrB/0qu5MzXTqIdaQcMfThhcc2jH8uYxE+ZwTYe6Bc0OVonH4bQhW UMddQbmi4sDvaFd/ZOiemJ2PvMxOMcWOJTSz/Q6Zae2IvmpBsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVGivz+61RvAIkyKck+JpdDog5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMzA2NWU5NmQtMWZjZi0z OGYzLWFlNDgtYmZlYjJhMTdhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjOzKxbR0ufPgb6df9uGr9Z9Rk3oVDY83rkfO7TMHEPIEcdRv5G6BKc 1s38tuPY3deTWZH6lwXOiqXi0uSh6RhJh2xbdIpk/OKpFEg554Ll3E05QNvqb27H pHbVz7exVuvNLoqm7Ra9312kf+SyeSbCLJPOEJmviTX/NPh08/8eoUSuB4WOV4vX knAZZ/kZOyb3k3+WqbBvuAZr0CpaG+RofiK4ve9TeBLRuagMj9gkJ+P3DAXO/Ppy e/U6oobkRkmsxvFsK5b0JIJolqucovN6k3Xx9DDm6B5CU5bCBJhHWwSazrKowimA 0Qwa3TUBn+PyQCpknQ3wSzILPSck7CI= -----END CERTIFICATE-----Generated at Sat Aug 22 20:21:31 2026 by rpki-client