$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa File: c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa (raw, json) Hash identifier: /0YfEbIm1+7Ll3YIcqTOxtS0KiUoMEF5pNhqImXb25E= Subject key identifier: E4:C9:91:99:FD:AD:54:BE:71:55:F5:66:FF:8E:63:BF:B2:D1:67:3D Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D9325431A88C05C69D7829600 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 147.124.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:43:1a:88:c0:5c:69:d7:82:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=4fa7401e-6292-497b-b72e-9e5e12b4cbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:43:65:d6:7b:0a:4b:c5:54:89:3b:bb:e1:d9: a7:55:8c:3d:fa:6b:c8:18:ff:5a:e0:33:b0:c1:35: 5f:72:e8:4d:6a:0a:a2:7f:fb:35:7e:2b:30:e2:87: 51:56:8c:63:0d:6e:a7:5f:cb:9c:4c:52:55:95:8d: 19:59:10:b0:dd:63:ed:b4:8d:aa:7f:58:6f:d9:53: 49:61:dd:54:bf:e0:db:68:51:31:b7:42:44:5c:6a: d7:4c:9f:1c:5e:07:52:f8:9a:68:2e:55:bc:1a:9e: 59:36:09:91:2b:23:43:e2:eb:0b:95:15:f1:6f:51: 8a:29:73:9f:f6:ec:e1:89:56:6d:30:78:ee:9a:e3: 57:eb:75:85:ba:8b:6e:77:0f:3d:07:32:3b:5b:94: 66:be:f0:50:d8:66:e0:b9:36:0e:d4:82:18:5d:5c: 9f:d0:dd:b0:e9:00:e5:01:8b:c8:5b:fa:81:af:0b: 71:97:d3:33:d1:c2:6f:69:a8:0e:3f:23:8d:31:f3: bd:5d:67:d5:c8:10:33:ec:3c:0d:a7:2a:21:83:35: d3:78:95:5a:8e:e3:be:1f:b5:8d:2d:5b:76:26:db: 58:93:6a:d6:ad:7c:12:c1:75:f0:c9:ab:f2:ed:57: ce:cf:1f:48:23:e2:f9:54:d9:c6:38:c9:03:80:3a: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C9:91:99:FD:AD:54:BE:71:55:F5:66:FF:8E:63:BF:B2:D1:67:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:52:71:84:ac:13:42:39:27:b8:58:6b:b9:6e:29:59:c5:ec: 89:ea:e4:66:8e:90:3b:0e:1d:a9:ae:0e:c7:03:d3:1d:3f:95: ce:96:1a:92:2b:0e:ec:74:29:af:47:51:9d:b9:55:ab:60:92: c9:88:cd:b7:5c:68:9c:72:38:55:af:a8:ab:f0:a0:f6:a6:ad: de:06:ac:17:06:a7:ff:43:7c:fb:1c:99:90:45:15:e5:2c:f8: d0:bd:e5:57:96:1d:e3:ca:50:e7:70:56:25:5a:e7:af:0a:e1: e9:90:a8:d9:e2:d6:9f:1d:7d:4d:b3:f1:7f:6e:68:de:43:dd: d2:3d:ae:88:25:c3:10:1f:d5:c8:07:53:8e:df:a6:db:13:fd: a6:ff:d9:32:c5:95:30:23:26:56:e9:26:19:42:ac:8c:9a:6d: dc:65:69:14:27:fc:5e:e7:05:82:22:4d:a1:3e:3d:21:7c:1b: 72:04:72:ce:f8:62:a0:60:59:4b:62:f1:5b:c6:b0:ba:bf:f5: da:98:05:a1:5d:8a:ab:4c:3e:e1:c6:02:e1:7c:31:e3:7b:de: 35:20:fa:2e:c3:13:ce:ff:f8:45:f8:82:0c:b4:2e:28:d2:07: 62:fd:64:9d:52:6f:b3:65:d4:c9:31:45:00:96:26:aa:82:53: 24:48:9f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUMaiMBcadeClgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NGZhNzQwMWUtNjI5Mi00OTdiLWI3MmUtOWU1ZTEyYjRjYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUNl1nsKS8VUiTu74dmnVYw9+mvIGP9a4DOw wTVfcuhNagqif/s1fisw4odRVoxjDW6nX8ucTFJVlY0ZWRCw3WPttI2qf1hv2VNJ Yd1Uv+DbaFExt0JEXGrXTJ8cXgdS+JpoLlW8Gp5ZNgmRKyND4usLlRXxb1GKKXOf 9uzhiVZtMHjumuNX63WFuotudw89BzI7W5RmvvBQ2GbguTYO1IIYXVyf0N2w6QDl AYvIW/qBrwtxl9Mz0cJvaagOPyONMfO9XWfVyBAz7DwNpyohgzXTeJVajuO+H7WN LVt2JttYk2rWrXwSwXXwyavy7VfOzx9II+L5VNnGOMkDgDqNGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTJkZn9rVS+cVX1Zv+OY7+y0Wc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYzYwY2FhZWItNGQ2ZC0z ZTdkLTg1NDMtZDg3NDNmMzNmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZScYSsE0I5J7hYa7luKVnF7Inq5GaOkDsOHamuDscD0x0/lc6WGpIr Dux0Ka9HUZ25VatgksmIzbdcaJxyOFWvqKvwoPamrd4GrBcGp/9DfPscmZBFFeUs +NC95VeWHePKUOdwViVa568K4emQqNni1p8dfU2z8X9uaN5D3dI9roglwxAf1cgH U47fptsT/ab/2TLFlTAjJlbpJhlCrIyabdxlaRQn/F7nBYIiTaE+PSF8G3IEcs74 YqBgWUti8VvGsLq/9dqYBaFdiqtMPuHGAuF8MeN73jUg+i7DE87/+EX4ggy0LijS B2L9ZJ1Sb7Nl1MkxRQCWJqqCUyRIn3I= -----END CERTIFICATE-----Generated at Sun May 3 15:32:49 2026 by rpki-client