$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa File: 9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa (raw, json) Hash identifier: 3GOOaDx9G1Cly7V0eA+R+p10x2oc6FirVnkUYhM5+cs= Subject key identifier: F5:93:34:4E:AA:A1:79:93:1A:E1:D2:72:D7:99:B9:EE:75:90:5E:20 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D237A2FBF76B02BEE82F77180 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 147.124.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2f:bf:76:b0:2b:ee:82:f7:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=64c6e90c-9681-4fc6-9849-87eb615aefe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:31:37:8f:9c:ec:40:e2:19:45:c4:ac:10:1e: df:e9:6d:e6:69:cf:35:ce:03:6d:38:6b:ec:12:48: 71:6c:13:3f:f0:8d:a3:81:0a:13:b1:07:7e:41:3b: 4a:08:a7:dd:57:b1:af:27:2e:8d:0e:cb:13:ec:c9: db:50:4e:7f:ad:30:54:aa:61:1f:51:f5:a6:11:c0: bd:85:e1:6e:ee:26:b8:3e:cd:87:19:95:0e:f4:1b: 1d:3c:e9:95:57:21:c8:a3:ab:fa:9e:8e:42:d7:29: 0e:4c:5c:f9:54:4e:f7:62:84:59:91:43:8f:64:0f: 8a:d4:ad:59:3f:c2:4d:13:db:33:43:3c:29:3f:7c: a3:09:25:1c:27:f1:93:d1:2b:47:84:b1:0d:11:44: eb:c7:be:e6:91:54:97:43:86:9e:ac:d1:c0:cf:99: 56:4a:04:53:52:58:b1:32:67:9a:c6:e4:ee:cb:1d: aa:be:d6:60:64:d4:78:8b:ee:e8:39:95:bf:56:dd: c0:1a:e2:65:0f:d9:6a:f3:9b:4c:9e:cf:f0:86:09: 52:54:32:46:dc:e6:f5:d9:37:ea:22:5a:f2:2e:99: 70:42:53:f1:cf:eb:10:73:48:e3:a3:b4:05:86:3b: fd:a2:5c:54:c2:97:38:c7:47:3b:e2:9b:dc:64:d6: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:93:34:4E:AA:A1:79:93:1A:E1:D2:72:D7:99:B9:EE:75:90:5E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4b:55:09:92:3e:b5:90:55:18:a9:05:ae:cd:7e:b3:b5:b8: aa:5d:7d:bc:30:b3:92:61:b6:16:52:40:e3:31:c8:85:b6:0d: 85:d3:eb:78:f7:61:e0:e4:5e:34:fc:c2:43:c1:99:54:06:26: 7b:29:a3:23:da:d1:2f:ec:64:94:ae:ec:eb:3e:73:98:98:23: 71:a1:78:9a:f1:6e:18:38:59:f3:89:73:1c:d7:d6:80:77:79: 01:6a:76:37:b9:24:eb:ca:48:3f:2f:13:89:02:de:f5:50:3e: 32:de:53:18:ce:f3:57:e0:6b:3c:d7:ba:6d:0c:28:cf:fd:43: c3:de:d4:59:37:d2:de:37:d3:61:59:e1:8e:5b:90:e6:b6:0a: b5:a7:4f:4a:2f:a2:31:e1:d7:8c:10:de:c1:c9:4d:26:85:45: e1:4c:6b:34:b2:da:d4:d8:06:85:c1:63:53:e6:4b:a5:78:b5: 4c:d6:da:02:ee:de:9b:9f:6c:cc:23:8d:b2:9a:2b:fd:b2:d2: 35:3a:2e:57:a9:80:21:96:79:e7:c5:69:2f:b6:e6:6f:5e:47: 47:5d:57:13:3a:fe:49:bd:8d:58:51:53:41:aa:9a:99:b3:86: 22:e7:44:0d:c5:f8:cc:e7:59:5f:38:a7:b1:a2:f8:6e:12:90: 81:78:2f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jei+/drAr7oL3cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NjRjNmU5MGMtOTY4MS00ZmM2LTk4NDktODdlYjYxNWFlZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TE3j5zsQOIZRcSsEB7f6W3mac81zgNtOGvs EkhxbBM/8I2jgQoTsQd+QTtKCKfdV7GvJy6NDssT7MnbUE5/rTBUqmEfUfWmEcC9 heFu7ia4Ps2HGZUO9BsdPOmVVyHIo6v6no5C1ykOTFz5VE73YoRZkUOPZA+K1K1Z P8JNE9szQzwpP3yjCSUcJ/GT0StHhLENEUTrx77mkVSXQ4aerNHAz5lWSgRTUlix MmeaxuTuyx2qvtZgZNR4i+7oOZW/Vt3AGuJlD9lq85tMns/whglSVDJG3Ob12Tfq IlryLplwQlPxz+sQc0jjo7QFhjv9olxUwpc4x0c74pvcZNY3RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWTNE6qoXmTGuHScteZue51kF4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOWMwOWMxYTgtYzNlMi0z OTgwLWFjNGYtNjYyYTNiM2NiY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtLVQmSPrWQVRipBa7NfrO1uKpdfbwws5JhthZSQOMxyIW2DYXT63j3 YeDkXjT8wkPBmVQGJnspoyPa0S/sZJSu7Os+c5iYI3GheJrxbhg4WfOJcxzX1oB3 eQFqdje5JOvKSD8vE4kC3vVQPjLeUxjO81fgazzXum0MKM/9Q8Pe1Fk30t4302FZ 4Y5bkOa2CrWnT0ovojHh14wQ3sHJTSaFReFMazSy2tTYBoXBY1PmS6V4tUzW2gLu 3pufbMwjjbKaK/2y0jU6LlepgCGWeefFaS+25m9eR0ddVxM6/km9jVhRU0Gqmpmz hiLnRA3F+MznWV84p7Gi+G4SkIF4L5g= -----END CERTIFICATE-----Generated at Thu Mar 19 12:32:48 2026 by rpki-client