$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa File: 69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa (raw, json) Hash identifier: dLfvxlC+y9xTrcAu51X2FkkL/qQ4XZooR0VYbF9iF/c= Subject key identifier: 29:87:B2:ED:07:BF:7D:CD:4F:4D:02:47:47:D9:27:9F:93:98:29:93 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AF9513B8AF4152A7673223880 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 14618 IP address blocks: 147.124.164.0/24 maxlen: 24 147.124.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3b:8a:f4:15:2a:76:73:22:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=5a14a95f-f03f-4c35-9f0c-9199f9942948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:48:ae:bc:31:3d:3d:5a:48:c4:a9:93:b5: 99:d4:9e:ef:53:6f:ce:75:c5:12:a2:ae:3e:c8:55: cc:54:39:f1:46:77:61:59:e3:49:4e:27:7a:80:72: 96:7c:ce:ab:fb:d3:51:0a:31:4e:1e:ce:d9:43:4b: 46:e0:d8:7a:68:b5:84:a5:70:0e:44:7e:1e:fc:6d: f4:b5:8c:ae:ce:a1:4c:f5:1b:f3:3c:0f:07:d3:0c: c5:59:f7:3d:fd:d9:b3:69:2e:42:50:d4:00:3e:f0: 7c:76:41:86:3f:f2:8f:87:e0:4c:c4:4c:44:1e:4f: 55:7d:f0:d6:f7:49:58:63:91:db:f2:11:a3:5b:52: f2:b2:9f:ff:a1:0c:ff:c3:e3:23:d4:15:fd:6b:fd: 06:ae:73:d7:6c:f3:48:75:2d:0d:1d:34:58:b0:93: 8f:01:cb:dd:18:bd:3a:43:a1:40:8f:a0:e3:f5:8a: 66:d5:be:3a:48:03:39:b4:8c:3a:1a:e9:c1:61:34: 13:fa:9a:cb:b5:5b:87:5d:17:93:27:23:27:df:25: 37:5b:cc:76:d4:a9:22:b1:06:88:40:40:ff:eb:22: e5:e2:44:8a:22:31:a1:f6:d9:72:11:8c:26:eb:1d: 1d:fa:3b:57:16:5f:f8:d3:3d:11:a7:99:70:0e:c9: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:B2:ED:07:BF:7D:CD:4F:4D:02:47:47:D9:27:9F:93:98:29:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f6:94:90:d3:4b:b5:f6:f4:7f:93:d1:c4:15:1d:de:7c:9a: df:70:a0:c1:b8:5d:de:4c:b1:08:f7:3b:4e:ae:a7:00:90:d8: f3:1d:26:67:39:15:e8:da:0d:1b:4f:d5:e8:ae:79:f8:2d:a3: f6:cb:2d:39:4e:b2:60:c4:73:01:b9:6b:d5:1c:c0:95:4e:93: f8:09:75:db:76:7f:84:44:c5:56:3d:ff:d3:2b:c0:c3:44:ab: 6c:78:f5:74:40:c7:f0:dc:e5:cf:54:17:aa:76:4d:29:63:6a: e2:9b:5d:b0:80:9a:8d:78:ab:e2:e9:37:47:24:f8:da:35:57: 36:60:6e:67:35:cb:b4:f6:db:ab:52:68:24:44:be:76:4d:bc: 9f:dd:82:39:cd:3f:60:cd:94:c1:c8:23:0f:c1:91:1a:c1:14: fb:d8:b3:a4:75:34:7e:60:ec:e6:e6:7a:07:e7:1c:f3:c6:2d: 5a:54:c7:72:73:62:cf:e7:eb:1c:fa:86:de:c3:2e:98:89:ad: e1:45:f3:2c:bd:07:6f:69:d2:1f:7e:03:c0:0d:b6:7a:03:5f: b7:28:c5:0b:34:80:24:77:8c:b9:88:ad:34:91:65:6d:51:8f: 61:23:9d:8e:3c:a6:92:73:1b:58:11:57:0b:1c:4c:14:f9:99: c2:84:6e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UTuK9BUqdnMiOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWExNGE5NWYtZjAzZi00YzM1LTlmMGMtOTE5OWY5OTQyOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydZIrrwxPT1aSMSpk7WZ1J7vU2/OdcUSoq4+ yFXMVDnxRndhWeNJTid6gHKWfM6r+9NRCjFOHs7ZQ0tG4Nh6aLWEpXAORH4e/G30 tYyuzqFM9RvzPA8H0wzFWfc9/dmzaS5CUNQAPvB8dkGGP/KPh+BMxExEHk9VffDW 90lYY5Hb8hGjW1Lysp//oQz/w+Mj1BX9a/0GrnPXbPNIdS0NHTRYsJOPAcvdGL06 Q6FAj6Dj9Ypm1b46SAM5tIw6GunBYTQT+prLtVuHXReTJyMn3yU3W8x21KkisQaI QED/6yLl4kSKIjGh9tlyEYwm6x0d+jtXFl/40z0Rp5lwDsm3bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmHsu0Hv33NT00CR0fZJ5+TmCmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNjllYjViZDYtZGRiYi0z MzM4LTg4NTEtZWI1YjdhYjNmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3ykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT2lJDTS7X29H+T0cQVHd58mt9woMG4Xd5MsQj3O06upwCQ2PMdJmc5 FejaDRtP1eiuefgto/bLLTlOsmDEcwG5a9UcwJVOk/gJddt2f4RExVY9/9MrwMNE q2x49XRAx/Dc5c9UF6p2TSljauKbXbCAmo14q+LpN0ck+No1VzZgbmc1y7T226tS aCREvnZNvJ/dgjnNP2DNlMHIIw/BkRrBFPvYs6R1NH5g7ObmegfnHPPGLVpUx3Jz Ys/n6xz6ht7DLpiJreFF8yy9B29p0h9+A8ANtnoDX7coxQs0gCR3jLmIrTSRZW1R j2EjnY48ppJzG1gRVwscTBT5mcKEbiQ= -----END CERTIFICATE-----Generated at Tue Aug 26 12:26:26 2025 by rpki-client