$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa File: 5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa (raw, json) Hash identifier: yBCQ0Szjb4gtZJuvofnclQVWjD/4t0GZJOnAKfRJPRg= Subject key identifier: 03:16:62:55:B9:12:C4:0C:A4:8E:08:E7:F3:3D:4F:C3:8A:B2:36:D0 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D4C4B454E9DCA9E58292E5370 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa Signing time: Thu 26 Mar 2026 15:54:40 +0000 ROA not before: Thu 26 Mar 2026 15:54:40 +0000 ROA not after: Wed 24 Jun 2026 15:54:40 +0000 asID: 396982 IP address blocks: 147.124.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:4b:45:4e:9d:ca:9e:58:29:2e:53:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 26 15:54:40 2026 GMT Not After : Jun 24 15:54:40 2026 GMT Subject: CN=ff749401-4284-4c92-aac1-f60b231c5c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:47:2b:45:27:4c:c9:8e:83:e8:91:6e:b1: b6:58:4c:fc:d0:37:a3:04:3f:a7:f0:56:2f:4f:63: 6e:dc:4a:87:c9:07:9b:ff:37:7c:5f:12:0e:e5:5a: 6b:27:d4:47:92:b0:a7:21:c7:0a:ef:b7:55:ee:95: 07:4d:65:eb:d2:1d:4a:cb:c3:44:07:a8:32:68:40: 33:f4:76:73:00:0a:44:01:1a:26:f5:a6:0e:9c:ad: c5:f8:fa:89:81:67:e9:dc:f4:1c:bf:0b:41:26:d7: 6e:53:81:d8:1b:ab:52:ec:6e:ef:60:ed:94:e4:92: 77:1b:79:c3:4b:8e:91:83:ff:89:e4:21:76:e9:d8: df:00:01:38:1c:22:82:53:ac:4b:fa:2d:39:6c:08: f1:79:1a:6e:11:31:f1:f1:2c:e3:5a:4a:9b:9a:a8: 6e:2f:74:5c:41:13:2d:5d:4d:57:cd:65:17:ea:77: 17:69:16:33:a3:c3:e7:57:13:7d:2f:d5:9d:72:59: 59:90:52:45:d0:5d:8a:42:85:d2:9f:d8:bc:97:47: 14:44:a4:8a:65:08:ca:ee:eb:2c:2f:a2:b9:b6:9b: 4c:69:8a:45:f2:bf:9f:0a:8b:48:1b:cd:6d:20:e1: 67:cc:a3:9b:96:f5:b4:20:80:f2:40:0f:1e:28:a9: 13:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:16:62:55:B9:12:C4:0C:A4:8E:08:E7:F3:3D:4F:C3:8A:B2:36:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b5:ff:0d:f3:4d:b4:b7:09:16:4c:f3:1f:07:ac:05:d2:46: 73:d6:f8:82:0b:8c:d6:04:29:31:01:69:7c:f7:4b:b1:68:61: 83:35:23:82:54:de:67:77:b6:9d:4c:3a:9b:48:36:64:98:d1: 10:37:1e:1f:09:30:30:34:d5:41:f3:44:4e:ea:85:0e:a1:26: 04:b0:50:85:0e:34:37:f3:ee:4b:fd:da:cb:42:3a:97:2b:9b: bf:80:a8:03:d7:d0:3f:cf:40:99:63:7f:51:5e:99:4a:8b:f8: 99:eb:d7:33:93:c9:de:aa:f1:66:cd:11:08:5d:45:b1:a5:00: 11:5b:1e:11:e2:a8:1f:a6:fb:09:ed:24:39:8b:d1:0c:20:36: 00:3f:40:d7:cb:7c:47:eb:ad:80:ff:b5:cb:03:5d:4d:d4:2a: d5:16:c6:17:65:83:df:b2:68:3e:9d:dc:a2:d9:2c:26:7c:b5: 13:59:7b:09:89:e2:29:92:8b:fb:2f:b2:0b:fd:b5:22:47:3a: b3:3b:e0:93:bf:fb:73:64:42:82:85:3f:aa:c6:19:2b:f3:75: 28:48:40:82:f3:75:fb:5b:ba:b0:bf:67:7f:a2:51:1b:65:01: 0b:b0:66:ba:ed:2c:67:5f:18:48:ba:4b:8c:6c:00:11:59:8d: fc:91:d6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1MS0VOncqeWCkuU3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDMyNjE1NTQ0MFoXDTI2MDYyNDE1NTQ0MFowLzEtMCsGA1UEAxMk ZmY3NDk0MDEtNDI4NC00YzkyLWFhYzEtZjYwYjIzMWM1YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1JHK0UnTMmOg+iRbrG2WEz80DejBD+n8FYv T2Nu3EqHyQeb/zd8XxIO5VprJ9RHkrCnIccK77dV7pUHTWXr0h1Ky8NEB6gyaEAz 9HZzAApEARom9aYOnK3F+PqJgWfp3PQcvwtBJtduU4HYG6tS7G7vYO2U5JJ3G3nD S46Rg/+J5CF26djfAAE4HCKCU6xL+i05bAjxeRpuETHx8SzjWkqbmqhuL3RcQRMt XU1XzWUX6ncXaRYzo8PnVxN9L9WdcllZkFJF0F2KQoXSn9i8l0cURKSKZQjK7uss L6K5tptMaYpF8r+fCotIG81tIOFnzKOblvW0IIDyQA8eKKkTOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMWYlW5EsQMpI4I5/M9T8OKsjbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNWYzZWM4Y2ItYmE4MC0z ZTRlLTk2N2YtNjQyNjZhYTdmNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu1/w3zTbS3CRZM8x8HrAXSRnPW+IILjNYEKTEBaXz3S7FoYYM1I4JU 3md3tp1MOptINmSY0RA3Hh8JMDA01UHzRE7qhQ6hJgSwUIUONDfz7kv92stCOpcr m7+AqAPX0D/PQJljf1FemUqL+Jnr1zOTyd6q8WbNEQhdRbGlABFbHhHiqB+m+wnt JDmL0QwgNgA/QNfLfEfrrYD/tcsDXU3UKtUWxhdlg9+yaD6d3KLZLCZ8tRNZewmJ 4imSi/svsgv9tSJHOrM74JO/+3NkQoKFP6rGGSvzdShIQILzdftburC/Z3+iURtl AQuwZrrtLGdfGEi6S4xsABFZjfyR1oA= -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:19 2026 by rpki-client