$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa File: d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa (raw, json) Hash identifier: iozjDS3bqOVuK0WB41p2dUJb4upT05LpjqGl5Yqfbj4= Subject key identifier: 72:C4:4A:6C:92:6E:D5:A1:D5:AD:5E:B3:8B:DD:59:0D:54:01:AC:AE Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584DB07586A5E570D80EB7A2DF80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:86:a5:e5:70:d8:0e:b7:a2:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=5a3eebde-cc92-4e68-bc06-0901c31cb295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:c6:70:54:90:2e:95:76:36:7b:e8:7d:7c: c8:bd:81:06:ff:93:be:7f:98:ff:54:27:cd:79:08: b4:ce:8a:c2:29:fd:aa:7a:67:86:18:03:f8:b8:27: 42:f7:a8:c7:16:ac:f8:cd:cd:d4:b1:1c:8e:d7:6d: ac:b6:5e:f0:71:cc:6d:23:67:b9:20:ff:0b:f5:bd: 13:46:6a:4d:e3:06:5c:e4:cd:dc:07:4c:5b:3e:a5: 53:48:6d:d6:ae:11:9f:51:c9:f4:de:9a:a9:7e:de: 7e:ce:5d:db:fc:d6:77:f5:95:69:ff:a2:42:b0:3d: ad:1c:8c:18:79:61:6b:26:fc:c1:03:bc:7d:dd:94: 4f:84:19:37:a6:9a:3a:47:bd:9c:02:1e:af:e5:7e: 9d:9b:f2:a4:26:c2:eb:b0:0e:7c:1e:70:48:db:31: 76:47:dd:1d:b1:20:4a:21:53:ed:52:dc:6f:83:79: 41:85:3b:3b:61:34:20:00:4b:d2:ac:5e:12:e6:1b: f7:67:58:03:29:af:82:89:bf:4c:20:6a:df:58:2a: f5:b4:cc:a9:00:34:4d:a8:d4:2b:18:eb:56:0c:fb: 24:53:de:ca:0f:c5:11:fc:e1:94:19:08:68:2f:bf: 10:8c:7f:90:fb:68:81:7d:db:39:67:0f:46:a9:fb: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C4:4A:6C:92:6E:D5:A1:D5:AD:5E:B3:8B:DD:59:0D:54:01:AC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:15:8b:e3:72:af:8c:1c:b4:8d:25:12:ae:42:03:ef:c6:0e: ea:10:85:c7:60:fc:c8:45:a2:3e:32:29:09:c3:29:26:23:66: 4b:c5:ed:1c:ce:08:f1:0b:eb:cb:6b:92:78:dd:02:26:66:8a: 43:9c:71:6b:7c:10:0d:6f:db:43:a7:1e:82:d1:55:43:59:4f: 2e:79:91:bc:11:93:de:33:9a:ff:95:bf:51:5b:46:82:c0:16: a6:43:0d:a4:41:f8:b2:d5:9b:cc:13:95:7a:51:5e:11:da:84: 06:9e:c1:3f:91:72:39:58:79:e6:08:74:96:7d:cb:09:32:ca: d8:91:cd:c3:5f:3d:3f:17:05:34:ae:52:69:e1:ac:86:f5:00: cd:60:8b:24:3b:a7:6f:b8:75:d3:bf:a4:0b:30:2d:2a:3c:f5: 8c:84:3a:79:a7:3d:13:73:df:67:0a:4a:be:96:2c:aa:18:ea: 64:ae:a5:7f:b6:29:5f:0f:8b:de:53:ca:97:1f:4c:b0:b0:0f: f6:3f:3d:46:94:d0:d5:3c:22:fd:d4:78:18:e3:2b:a4:c2:b2: 91:9a:d5:e2:d2:fc:49:31:d8:21:a8:5e:8f:77:ea:22:a8:ef: 34:b6:25:c9:82:35:74:5a:92:d7:92:00:38:b4:70:e1:5f:de: 36:63:b7:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdYal5XDYDrei34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk NWEzZWViZGUtY2M5Mi00ZTY4LWJjMDYtMDkwMWMzMWNiMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg3GcFSQLpV2NnvofXzIvYEG/5O+f5j/VCfN eQi0zorCKf2qemeGGAP4uCdC96jHFqz4zc3UsRyO122stl7wccxtI2e5IP8L9b0T RmpN4wZc5M3cB0xbPqVTSG3WrhGfUcn03pqpft5+zl3b/NZ39ZVp/6JCsD2tHIwY eWFrJvzBA7x93ZRPhBk3ppo6R72cAh6v5X6dm/KkJsLrsA58HnBI2zF2R90dsSBK IVPtUtxvg3lBhTs7YTQgAEvSrF4S5hv3Z1gDKa+Cib9MIGrfWCr1tMypADRNqNQr GOtWDPskU97KD8UR/OGUGQhoL78QjH+Q+2iBfds5Zw9GqfuKlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLESmySbtWh1a1es4vdWQ1UAayuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDdjYjAwOGEtNjlkOS0z MzM1LTk2NGUtNGQxM2M2ZTZmOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwVi+Nyr4wctI0lEq5CA+/GDuoQhcdg/MhFoj4yKQnDKSYjZkvF7RzO CPEL68trknjdAiZmikOccWt8EA1v20OnHoLRVUNZTy55kbwRk94zmv+Vv1FbRoLA FqZDDaRB+LLVm8wTlXpRXhHahAaewT+RcjlYeeYIdJZ9ywkyytiRzcNfPT8XBTSu UmnhrIb1AM1giyQ7p2+4ddO/pAswLSo89YyEOnmnPRNz32cKSr6WLKoY6mSupX+2 KV8Pi95TypcfTLCwD/Y/PUaU0NU8Iv3UeBjjK6TCspGa1eLS/Ekx2CGoXo936iKo 7zS2JcmCNXRakteSADi0cOFf3jZjt3M= -----END CERTIFICATE-----Generated at Sun May 3 16:15:57 2026 by rpki-client