$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa File: 880de72b-888b-3dde-b1b4-c86038197a8a.roa (raw, json) Hash identifier: cc8NUFNMZ5Qr7NKFIn8PKmPSlSza23jXSn8tWpWA6DU= Subject key identifier: 14:A0:8F:DB:65:05:D8:84:06:AD:A8:9E:DD:FA:77:A5:44:2F:59:13 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584EA787FA5673575F3718433680 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 147.124.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:fa:56:73:57:5f:37:18:43:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8bf049e2-f530-42bc-b829-965c7e292fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:e3:33:13:f5:b7:c3:ba:5d:95:9b:23:51: ca:ef:e8:c0:8d:f4:f3:cf:dd:cb:52:a2:58:79:6a: 98:db:37:72:02:db:1d:3a:dd:c9:99:a1:70:50:e4: 04:10:ce:1f:2e:ce:fe:f8:fc:6f:f3:28:b1:2f:bf: f2:53:df:3a:2a:72:b8:f2:c5:3e:5a:b5:a1:7c:d5: 05:5a:ba:d0:f4:6e:14:5b:e5:a2:38:74:c2:67:44: 15:9a:be:83:dc:3b:b5:f1:32:c8:21:0c:c6:d7:28: f7:60:b7:69:88:ff:79:f5:17:ff:c3:6d:2e:fd:a9: a5:82:8f:07:ad:62:91:54:dc:23:4d:36:89:17:c3: 4c:8c:23:3f:2d:df:04:48:80:2c:43:f1:e8:ca:d0: 59:3e:b1:1b:7e:bd:fe:67:5e:61:dd:1d:46:8a:2c: cb:d8:b2:18:fe:b8:01:8a:d2:e7:6c:c5:78:05:96: 48:3e:36:f3:ba:ce:a8:7c:01:33:02:c2:2c:71:44: 22:c4:15:61:1a:80:f3:a1:c2:da:82:30:24:f5:b5: 15:2e:c3:35:bf:af:c8:3b:12:da:4e:bd:17:f0:c8: 11:f1:68:21:3f:a8:c6:3d:c5:55:f3:10:ea:65:6a: 9d:3e:91:a4:6a:7d:1a:7f:a9:11:5b:74:2e:0f:bc: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A0:8F:DB:65:05:D8:84:06:AD:A8:9E:DD:FA:77:A5:44:2F:59:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4c:56:01:d8:a6:67:b2:0e:fa:e8:66:f8:1e:ce:80:d1:79: c7:aa:10:b3:8c:48:94:35:e2:0f:52:42:de:59:be:18:81:5a: 20:65:a6:4f:04:85:2b:be:b6:0e:e5:f4:68:5e:34:21:25:cf: d5:b6:cc:65:99:10:7d:0f:d6:77:74:ad:39:4d:f2:a9:9b:ad: de:10:51:ea:71:f0:d9:4e:38:80:09:4d:0d:41:e6:65:0d:8a: a9:cc:8c:c8:8a:a6:ff:28:33:a2:1d:7c:e7:ae:1a:dc:f4:9a: 14:03:b8:81:e8:aa:a6:c4:81:64:44:a0:31:2a:68:87:57:e0: c8:bd:9f:2e:44:12:f1:49:41:d9:be:95:4a:32:85:48:e9:92: 4e:2d:4a:ba:b3:cc:6f:ff:e5:e0:57:b4:d2:4d:5e:47:ab:88: 0e:4c:65:e5:82:44:b1:2c:ee:7a:37:9f:a0:e1:ff:51:75:0a: ba:4e:98:69:23:e1:ad:ae:54:e6:d3:eb:68:2c:39:10:df:61: 4a:23:98:fd:03:db:9e:2d:c6:96:0d:99:eb:6d:76:e2:be:52: 56:90:2c:e3:ca:a6:c9:a1:78:3a:ec:a2:57:bd:6b:17:3f:11: d8:a1:45:09:7c:85:a2:d7:62:00:d9:b6:f2:e5:a5:02:03:f1: e5:7f:4b:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/pWc1dfNxhDNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGJmMDQ5ZTItZjUzMC00MmJjLWI4MjktOTY1YzdlMjkyZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zTjMxP1t8O6XZWbI1HK7+jAjfTzz93LUqJY eWqY2zdyAtsdOt3JmaFwUOQEEM4fLs7++Pxv8yixL7/yU986KnK48sU+WrWhfNUF WrrQ9G4UW+WiOHTCZ0QVmr6D3Du18TLIIQzG1yj3YLdpiP959Rf/w20u/amlgo8H rWKRVNwjTTaJF8NMjCM/Ld8ESIAsQ/HoytBZPrEbfr3+Z15h3R1GiizL2LIY/rgB itLnbMV4BZZIPjbzus6ofAEzAsIscUQixBVhGoDzocLagjAk9bUVLsM1v6/IOxLa Tr0X8MgR8WghP6jGPcVV8xDqZWqdPpGkan0af6kRW3QuD7wNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSgj9tlBdiEBq2ont36d6VEL1kTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvODgwZGU3MmItODg4Yi0z ZGRlLWIxYjQtYzg2MDM4MTk3YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBMVgHYpmeyDvroZvgezoDReceqELOMSJQ14g9SQt5ZvhiBWiBlpk8E hSu+tg7l9GheNCElz9W2zGWZEH0P1nd0rTlN8qmbrd4QUepx8NlOOIAJTQ1B5mUN iqnMjMiKpv8oM6IdfOeuGtz0mhQDuIHoqqbEgWREoDEqaIdX4Mi9ny5EEvFJQdm+ lUoyhUjpkk4tSrqzzG//5eBXtNJNXkeriA5MZeWCRLEs7no3n6Dh/1F1CrpOmGkj 4a2uVObT62gsORDfYUojmP0D254txpYNmettduK+UlaQLOPKpsmheDrsole9axc/ EdihRQl8haLXYgDZtvLlpQID8eV/Szs= -----END CERTIFICATE-----Generated at Thu Aug 20 23:37:55 2026 by rpki-client