$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa File: 3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa (raw, json) Hash identifier: +KHt8A1tp7g9pRVBHRHux1vU1yOQRyObKzEqkibK/yc= Subject key identifier: 4D:82:40:20:7C:B0:55:EB:B6:F5:89:5C:6C:C0:D2:3E:A7:13:A7:64 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D9A201004598354821986C980 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 16509 IP address blocks: 147.124.164.0/24 maxlen: 24 147.124.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:10:04:59:83:54:82:19:86:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=a4e8a03b-fde2-4630-bad9-20fddc9b0955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:61:6c:90:25:bf:2e:e0:95:08:7f:1c:0d: 95:70:2d:7a:fa:20:50:dc:8f:b7:fa:ef:4f:35:2c: b7:54:85:0a:f2:01:fb:8b:5d:c7:da:b5:e6:90:b4: 42:07:4c:4d:2f:22:96:23:d9:06:a3:0d:7d:e6:4e: a3:9c:cf:52:fc:d9:ce:92:29:b2:c5:0c:59:fd:c8: 2a:b7:fb:93:e0:00:dc:f6:1d:38:19:43:4a:33:09: e9:eb:81:b1:f4:1d:ba:66:a8:2b:4c:49:8a:4b:e6: cd:dd:d3:40:af:00:ae:99:2e:25:33:96:6e:ca:6d: 81:df:a8:3b:b7:95:c0:9a:49:92:b3:2e:02:e0:13: 47:ec:48:41:c6:dc:01:82:13:4c:05:7a:88:2d:67: 32:b6:86:b0:25:d8:1f:b0:be:40:71:50:61:34:78: f0:40:47:a2:56:69:87:9e:28:b8:2a:4a:83:bb:4e: d3:18:70:ba:55:37:55:72:2b:b7:5b:af:42:b2:f2: cf:98:21:88:a4:ef:24:ec:03:2c:6c:d3:47:ff:bb: 12:8e:9c:5b:5d:02:83:09:5b:20:ee:50:59:fa:86: cb:7a:11:74:cd:93:9c:d6:01:a3:ca:fe:ea:c5:64: 9e:1f:77:50:cd:f3:de:a6:d3:e7:d3:d1:58:0c:77: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:82:40:20:7C:B0:55:EB:B6:F5:89:5C:6C:C0:D2:3E:A7:13:A7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8f:63:2a:09:2d:18:03:36:d9:fa:65:e2:06:44:d1:82:6e: 3c:57:bc:46:79:5a:27:8d:3b:8c:b1:64:17:78:27:5c:2a:8b: be:d0:6b:32:c1:9a:35:cd:df:8c:f9:70:17:c3:06:11:a8:14: 05:6f:8b:94:36:32:8a:6e:65:21:c5:93:df:b3:a2:be:5f:9e: fc:4a:5e:ba:21:4c:89:a5:93:d3:d0:91:ef:73:66:5e:7a:0a: e7:e6:12:58:69:f1:a1:03:82:5e:7b:28:43:f9:a8:dd:c2:ee: a8:d1:ce:aa:b4:37:c9:91:8b:10:a2:36:a9:c7:a0:31:10:65: 3b:16:27:2c:c1:fa:5e:8c:ee:b2:42:38:9d:b8:22:9f:35:30: 1d:f7:bd:8b:6a:79:11:1d:6f:eb:51:e9:0b:43:68:d5:a2:9c: 89:e0:c0:69:9b:98:d1:79:02:4f:23:bd:85:58:36:ee:8e:b1: 6f:7d:e3:cf:0b:59:d5:b3:05:8b:8c:f2:49:54:62:f4:bd:ba: bb:e2:9a:04:6f:3c:d9:2a:ca:37:5b:ba:fb:5c:52:1a:c6:5b: 3c:7f:15:dc:fe:a3:71:49:05:ca:73:b2:95:87:37:54:fa:8b: 09:4b:e0:1f:4a:ab:cd:54:35:84:aa:3b:72:67:23:8f:c7:61: 3e:23:f5:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBAEWYNUghmGyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YTRlOGEwM2ItZmRlMi00NjMwLWJhZDktMjBmZGRjOWIwOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4lhbJAlvy7glQh/HA2VcC16+iBQ3I+3+u9P NSy3VIUK8gH7i13H2rXmkLRCB0xNLyKWI9kGow195k6jnM9S/NnOkimyxQxZ/cgq t/uT4ADc9h04GUNKMwnp64Gx9B26ZqgrTEmKS+bN3dNArwCumS4lM5Zuym2B36g7 t5XAmkmSsy4C4BNH7EhBxtwBghNMBXqILWcytoawJdgfsL5AcVBhNHjwQEeiVmmH nii4KkqDu07TGHC6VTdVciu3W69CsvLPmCGIpO8k7AMsbNNH/7sSjpxbXQKDCVsg 7lBZ+obLehF0zZOc1gGjyv7qxWSeH3dQzfPeptPn09FYDHf8zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2CQCB8sFXrtvWJXGzA0j6nE6dkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvM2EzYmY2ZTctYWVhYy0z ZWVhLWIyMGQtMmJmYzZiZWQyYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3ykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACPYyoJLRgDNtn6ZeIGRNGCbjxXvEZ5WieNO4yxZBd4J1wqi77QazLB mjXN34z5cBfDBhGoFAVvi5Q2MopuZSHFk9+zor5fnvxKXrohTImlk9PQke9zZl56 CufmElhp8aEDgl57KEP5qN3C7qjRzqq0N8mRixCiNqnHoDEQZTsWJyzB+l6M7rJC OJ24Ip81MB33vYtqeREdb+tR6QtDaNWinIngwGmbmNF5Ak8jvYVYNu6OsW99488L WdWzBYuM8klUYvS9urvimgRvPNkqyjdbuvtcUhrGWzx/Fdz+o3FJBcpzspWHN1T6 iwlL4B9Kq81UNYSqO3JnI4/HYT4j9VE= -----END CERTIFICATE-----Generated at Sun May 3 14:50:40 2026 by rpki-client