$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa File: a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa (raw, json) Hash identifier: RZCRaSkFZQ7b9h71sSSXcNKetsCi7Gw8Xj8gWd0FYAE= Subject key identifier: 6E:33:8C:AA:35:F8:58:C1:AD:C0:12:D9:78:3A:91:C0:FD:8F:EC:82 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584E4129CA099887A0086390FDF0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 16509 IP address blocks: 147.124.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:ca:09:98:87:a0:08:63:90:fd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=2ea17642-b532-4037-95da-845fa3adda2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:bf:70:01:63:72:57:96:1c:ee:cb:8d:d6: d6:8c:54:34:c0:cd:a9:cf:52:79:48:00:a6:db:6b: 8c:95:d4:fe:18:20:c7:ca:7e:57:8b:b0:6d:f7:ce: eb:37:af:d4:ed:54:bf:e0:a3:39:e5:82:e6:52:af: 1d:ec:e2:dc:74:bc:87:cd:3a:34:82:70:e8:67:6c: ef:09:53:4e:b1:2a:3f:7a:d6:60:4c:5c:1a:76:18: 18:a5:a3:cf:5c:a9:02:aa:0b:d2:62:02:43:bf:ad: 5d:77:86:0e:cb:e2:6c:94:52:35:53:38:7f:de:79: 5e:33:c7:cd:33:e2:57:bd:47:a9:17:db:61:04:02: 72:df:24:8c:15:c6:ed:d3:62:9e:ad:ed:84:b5:b6: 00:0d:d7:af:f7:92:e0:9f:48:89:a9:f7:a1:f9:05: 9c:0f:be:a4:b4:e6:3e:c7:e2:62:c4:4c:38:d3:c0: 42:1c:bb:0a:f9:e9:2b:4c:0d:4f:6a:df:64:d1:be: db:a6:84:7e:e5:bb:d0:d2:6c:9c:9c:81:1c:f7:7b: 57:7a:f9:37:75:6c:1f:e0:7c:7a:82:d7:ec:72:83: 91:50:63:79:8e:2c:1a:44:36:67:b4:5b:aa:c9:6a: 13:23:06:10:b8:c3:91:2d:19:55:b9:2a:f7:9a:12: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:33:8C:AA:35:F8:58:C1:AD:C0:12:D9:78:3A:91:C0:FD:8F:EC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:de:94:4c:2d:68:86:4b:7d:e0:4a:46:3f:01:42:94:17:f6: 33:b1:c9:d1:e1:2e:bf:24:b5:01:d1:8b:c7:b6:13:58:e5:b8: 7a:d0:57:33:b4:b4:68:52:f5:62:33:d3:9b:68:8b:22:43:42: 0e:9b:08:fa:7e:77:7f:36:4b:cc:04:ea:0e:a1:18:8f:96:d1: 85:59:8a:eb:44:17:1d:09:13:03:7c:b9:70:f8:fc:bc:8f:07: 49:60:44:1e:f5:72:21:25:4f:60:b5:3e:bc:f8:4d:e2:1d:99: 00:8c:6e:4c:e7:7c:29:94:ac:6a:f8:78:c1:7b:d5:e1:ec:87: 79:fd:c1:87:b1:e5:76:32:c5:29:0d:9b:b0:06:c6:f8:57:c9: 23:0b:c9:a7:83:7c:de:66:2f:cc:7c:e5:48:cc:88:75:d0:5b: 00:15:55:0e:7d:fb:6d:56:e5:8d:43:62:1d:15:1c:d8:01:a1: 9f:4f:ce:2f:06:cf:6f:72:72:02:dc:d1:c2:e8:96:63:2c:e9: 03:59:fd:4e:72:12:42:2c:ef:8a:1f:b1:e2:64:54:97:e6:9e: 57:41:84:60:1f:a9:a7:62:41:13:6e:2f:73:a3:17:fc:e8:64: b6:39:3c:27:2f:f3:04:b9:a0:76:c4:5e:c6:86:e0:53:52:9c: 7e:ee:c8:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKcoJmIegCGOQ/fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk MmVhMTc2NDItYjUzMi00MDM3LTk1ZGEtODQ1ZmEzYWRkYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr+/cAFjcleWHO7LjdbWjFQ0wM2pz1J5SACm 22uMldT+GCDHyn5Xi7Bt987rN6/U7VS/4KM55YLmUq8d7OLcdLyHzTo0gnDoZ2zv CVNOsSo/etZgTFwadhgYpaPPXKkCqgvSYgJDv61dd4YOy+JslFI1Uzh/3nleM8fN M+JXvUepF9thBAJy3ySMFcbt02Kere2EtbYADdev95Lgn0iJqfeh+QWcD76ktOY+ x+JixEw408BCHLsK+ekrTA1Pat9k0b7bpoR+5bvQ0mycnIEc93tXevk3dWwf4Hx6 gtfscoORUGN5jiwaRDZntFuqyWoTIwYQuMORLRlVuSr3mhLDjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4zjKo1+FjBrcAS2Xg6kcD9j+yCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYTY3ZGMyNWYtZGQzZi0z NTFiLTg2ZDMtMWMzNDdiNThiZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjelEwtaIZLfeBKRj8BQpQX9jOxydHhLr8ktQHRi8e2E1jluHrQVzO0 tGhS9WIz05toiyJDQg6bCPp+d382S8wE6g6hGI+W0YVZiutEFx0JEwN8uXD4/LyP B0lgRB71ciElT2C1Prz4TeIdmQCMbkznfCmUrGr4eMF71eHsh3n9wYex5XYyxSkN m7AGxvhXySMLyaeDfN5mL8x85UjMiHXQWwAVVQ59+21W5Y1DYh0VHNgBoZ9Pzi8G z29ycgLc0cLolmMs6QNZ/U5yEkIs74ofseJkVJfmnldBhGAfqadiQRNuL3OjF/zo ZLY5PCcv8wS5oHbEXsaG4FNSnH7uyFc= -----END CERTIFICATE-----Generated at Wed Jun 24 15:47:23 2026 by rpki-client