$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa File: 907eb120-fd28-3e62-bc45-055d0743dc4a.roa (raw, json) Hash identifier: tq6nLC7vO1m0olvsjfmKyJIFRizOjla/ddXDsKroIdc= Subject key identifier: 4D:4D:55:71:44:D6:45:04:78:47:B6:A6:BF:7F:C1:15:32:93:B9:B2 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D237A2FAD06767CE2A2883940 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 147.124.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2f:ad:06:76:7c:e2:a2:88:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e340c592-47d5-405b-a113-2c9d80c8c553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:68:69:ac:05:bc:f0:f4:c3:7c:78:e1:8c: c2:8f:cd:b5:46:e4:28:14:f7:35:fa:e1:d5:d9:19: 80:de:8f:78:02:61:3f:d7:1a:fd:40:24:20:b5:a5: 59:f0:be:0d:0f:47:2b:b1:8e:86:f6:33:06:2a:6e: 22:d7:d5:15:08:ea:54:54:9c:11:55:0a:2b:df:3e: 8a:da:81:8a:fa:6d:01:4b:e2:37:a3:c4:2c:77:70: 8a:11:09:cd:61:ae:71:d1:ab:6e:d3:08:fa:91:81: 7d:f7:50:40:0f:e5:e0:11:1b:a8:ed:ef:de:ed:3d: d2:16:40:2c:01:ef:87:b5:ab:9e:0c:ec:2c:a9:d7: 3b:1e:c1:06:6d:19:ec:53:ab:e3:d3:e3:d1:77:ed: 44:c3:d5:0c:77:1a:7c:ae:b4:ba:93:4d:46:5a:e8: e8:78:67:2f:23:8e:90:19:f2:59:85:8e:14:83:9a: 32:47:96:36:8a:66:ab:a8:27:a7:e8:75:8c:ea:dc: 81:67:9a:23:9d:13:e0:dc:d5:46:f2:c9:cd:c2:99: ab:e1:41:bb:7e:fb:86:24:b8:2b:1a:a8:ee:cd:a5: 15:71:e3:f2:47:fc:62:8d:fe:ff:ff:a9:59:28:a6: 01:d7:ef:0c:3b:71:23:63:24:60:36:c0:cb:b9:18: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:55:71:44:D6:45:04:78:47:B6:A6:BF:7F:C1:15:32:93:B9:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:75:7a:5b:29:54:04:5e:e8:2a:81:d7:a2:f7:ef:8b:7b:a9: 9e:72:90:cd:dc:42:7b:e2:bc:85:e3:c1:e5:f8:75:27:41:3c: 63:eb:c3:3c:f2:8f:4e:de:f1:65:22:2a:12:16:23:ba:be:c3: f9:c9:fd:42:0b:5a:7d:a7:62:ad:dd:b8:72:ac:e3:4a:c3:d0: da:0b:f7:bc:34:ee:e8:a4:dd:95:2b:fb:06:1f:fb:5d:73:8f: 8e:16:17:8b:c4:12:dd:51:57:cc:0c:e0:50:3c:4b:27:9f:dd: a2:d4:03:bd:1e:b3:30:ad:7e:ac:90:c2:30:87:47:24:c3:d2: 84:10:c9:76:ba:81:d9:69:b1:aa:25:69:bf:89:46:41:ff:1a: 5b:97:c9:a1:85:4c:a6:c7:be:50:19:6b:ce:e6:32:98:4a:77: 72:77:5c:1a:e6:92:3a:d2:b7:e0:5f:e6:0f:f1:64:0d:3a:f1: 9f:d1:15:4f:df:27:f4:89:7e:e4:32:41:96:41:92:3e:1a:34: 87:fa:12:ca:a6:cd:a7:6f:05:fa:89:a3:53:6e:9f:a2:31:73: 7d:4f:22:d9:c5:32:a1:7a:8c:6a:4d:5f:c2:da:60:06:36:c2: fd:61:f2:d9:8a:fe:b6:ee:92:2f:dc:6a:42:e5:53:4c:8b:49: ff:81:19:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jei+tBnZ84qKIOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTM0MGM1OTItNDdkNS00MDViLWExMTMtMmM5ZDgwYzhjNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHtoaawFvPD0w3x44YzCj821RuQoFPc1+uHV 2RmA3o94AmE/1xr9QCQgtaVZ8L4ND0crsY6G9jMGKm4i19UVCOpUVJwRVQor3z6K 2oGK+m0BS+I3o8Qsd3CKEQnNYa5x0atu0wj6kYF991BAD+XgERuo7e/e7T3SFkAs Ae+HtaueDOwsqdc7HsEGbRnsU6vj0+PRd+1Ew9UMdxp8rrS6k01GWujoeGcvI46Q GfJZhY4Ug5oyR5Y2imarqCen6HWM6tyBZ5ojnRPg3NVG8snNwpmr4UG7fvuGJLgr GqjuzaUVcePyR/xijf7//6lZKKYB1+8MO3EjYyRgNsDLuRgS3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1NVXFE1kUEeEe2pr9/wRUyk7myMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOTA3ZWIxMjAtZmQyOC0z ZTYyLWJjNDUtMDU1ZDA3NDNkYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl1elspVARe6CqB16L374t7qZ5ykM3cQnvivIXjweX4dSdBPGPrwzzy j07e8WUiKhIWI7q+w/nJ/UILWn2nYq3duHKs40rD0NoL97w07uik3ZUr+wYf+11z j44WF4vEEt1RV8wM4FA8Syef3aLUA70eszCtfqyQwjCHRyTD0oQQyXa6gdlpsaol ab+JRkH/GluXyaGFTKbHvlAZa87mMphKd3J3XBrmkjrSt+Bf5g/xZA068Z/RFU/f J/SJfuQyQZZBkj4aNIf6EsqmzadvBfqJo1Nun6Ixc31PItnFMqF6jGpNX8LaYAY2 wv1h8tmK/rbuki/cakLlU0yLSf+BGf4= -----END CERTIFICATE-----Generated at Thu Mar 19 15:34:43 2026 by rpki-client