$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa File: f85fae74-1058-3498-b9a0-3d961ddead7c.roa (raw, json) Hash identifier: pKFbW0jDF81XjBpG0G4XhvEta2bjVQr9VrOtIgBFs40= Subject key identifier: 71:5F:10:79:76:84:81:01:CC:18:D2:DC:71:4C:BA:4D:D0:21:0D:02 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584ED861DF3B94F28111968D6C00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 14618 IP address blocks: 147.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:df:3b:94:f2:81:11:96:8d:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=39efe812-e5d5-4973-9b23-2be95db3ee79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:c3:b5:62:ae:4e:44:ca:ee:de:c8:64:73: 85:cf:56:91:3d:0d:cf:c1:ef:a7:83:ec:d7:2a:50: ba:c6:56:05:09:96:47:c3:8d:22:1c:ba:c8:30:51: 7f:39:4f:54:05:12:43:d0:27:79:29:08:f8:c9:f2: 9d:53:52:05:a7:60:96:81:29:94:ab:90:94:bf:94: c8:ff:37:25:7d:61:6f:17:20:73:a6:de:62:35:8b: a9:4d:a6:ea:eb:95:ef:e1:4b:99:da:88:d7:af:a0: 82:2d:98:b6:b8:f3:9c:a0:17:22:a6:f6:24:62:a0: 55:da:9d:bc:78:22:93:db:e5:f9:9b:56:41:ec:98: 2e:ad:b3:55:51:21:32:25:09:7b:3e:1b:19:4f:9e: 6c:78:68:5d:e9:68:3f:f9:8c:c3:69:63:30:ac:e7: 9e:24:1c:a8:59:18:f2:ca:72:ff:fe:a9:7c:90:46: 4d:8f:af:15:37:cd:5d:33:0f:98:63:78:69:4e:8c: 8d:7c:c5:ba:65:27:b8:90:c3:6a:94:14:0a:6c:d1: 55:8b:f4:87:35:e5:17:e4:2f:75:df:32:6d:26:48: b9:39:72:de:68:f7:56:cb:94:4d:d3:4c:52:df:57: d8:fa:e8:7d:0d:b6:e7:d8:11:8a:cc:d6:8e:02:d7: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:10:79:76:84:81:01:CC:18:D2:DC:71:4C:BA:4D:D0:21:0D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4a:3b:3e:52:a0:f3:18:27:d9:c0:0b:2d:b0:fc:07:62:88: 5b:f8:ea:ae:5c:62:cd:b6:7b:ac:e1:c3:1c:c9:96:b5:39:54: 70:10:40:63:23:00:f8:40:dc:c9:bd:68:87:f3:03:55:fe:04: b3:db:54:f1:91:18:14:bc:2d:f4:15:b2:38:bc:ab:29:d1:d9: 67:3b:b9:9b:e1:a7:ed:64:c3:65:35:0c:d0:b3:c3:14:cb:32: a6:c1:81:41:e8:8a:d8:f3:e7:39:68:36:39:65:b3:d8:d1:69: c2:b9:b4:ca:3a:8d:8a:b9:e7:4a:63:e8:76:f4:df:6f:77:ec: 4f:88:5c:1f:bd:47:24:89:e4:8a:94:cd:68:80:b3:23:fc:c7: d7:49:20:13:b8:82:64:4a:13:dc:54:16:1a:6c:47:20:10:d0: ca:dd:ca:2a:c5:a5:4a:0f:60:02:45:4d:a3:1f:2e:09:ec:c9: 70:0b:46:67:07:14:b4:27:16:21:84:91:26:ab:74:36:3b:35: 77:4a:7a:83:45:ed:27:f9:5d:ed:fc:ac:47:c8:a7:9e:f7:94: f5:d3:59:17:7a:7a:2d:04:02:b2:a5:5b:12:76:88:e7:7e:2e: b4:fa:c7:8b:40:63:ac:90:03:6d:e6:a5:f2:7d:4a:1b:d2:30: 4c:00:8c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd87lPKBEZaNbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MzllZmU4MTItZTVkNS00OTczLTliMjMtMmJlOTVkYjNlZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPvDtWKuTkTK7t7IZHOFz1aRPQ3Pwe+ng+zX KlC6xlYFCZZHw40iHLrIMFF/OU9UBRJD0Cd5KQj4yfKdU1IFp2CWgSmUq5CUv5TI /zclfWFvFyBzpt5iNYupTabq65Xv4UuZ2ojXr6CCLZi2uPOcoBcipvYkYqBV2p28 eCKT2+X5m1ZB7JgurbNVUSEyJQl7PhsZT55seGhd6Wg/+YzDaWMwrOeeJByoWRjy ynL//ql8kEZNj68VN81dMw+YY3hpToyNfMW6ZSe4kMNqlBQKbNFVi/SHNeUX5C91 3zJtJki5OXLeaPdWy5RN00xS31fY+uh9Dbbn2BGKzNaOAtej0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFfEHl2hIEBzBjS3HFMuk3QIQ0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZjg1ZmFlNzQtMTA1OC0z NDk4LWI5YTAtM2Q5NjFkZGVhZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERKOz5SoPMYJ9nACy2w/AdiiFv46q5cYs22e6zhwxzJlrU5VHAQQGMj APhA3Mm9aIfzA1X+BLPbVPGRGBS8LfQVsji8qynR2Wc7uZvhp+1kw2U1DNCzwxTL MqbBgUHoitjz5zloNjlls9jRacK5tMo6jYq550pj6Hb032937E+IXB+9RySJ5IqU zWiAsyP8x9dJIBO4gmRKE9xUFhpsRyAQ0MrdyirFpUoPYAJFTaMfLgnsyXALRmcH FLQnFiGEkSardDY7NXdKeoNF7Sf5Xe38rEfIp573lPXTWRd6ei0EArKlWxJ2iOd+ LrT6x4tAY6yQA23mpfJ9ShvSMEwAjFc= -----END CERTIFICATE-----Generated at Thu Aug 20 21:58:15 2026 by rpki-client