$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa File: 20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json) Hash identifier: kpL2kemNZEe+UtQhl1BshlwyqnbuYZN/NMVp87vX+fE= Subject key identifier: E7:F6:97:A9:CF:54:56:71:25:F4:E9:F5:51:28:6E:16:59:66:21:4E Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584B95A78F4947CC89FD3980A700 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 147.124.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8f:49:47:cc:89:fd:39:80:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5672deb8-feba-469e-a32c-4d9bb2548ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:6e:6f:92:8f:8f:1e:49:f8:16:7a:e8:b7: dc:a9:b0:7c:2b:cb:3d:58:ad:69:5f:20:51:59:b1: 89:1c:c9:80:c2:c3:8e:58:ef:33:f9:4b:e6:d5:6b: 74:d4:66:ec:6d:2a:dd:43:20:55:f3:75:b7:1c:b4: de:32:d7:70:cb:fd:38:2d:4d:25:87:30:53:0e:c0: 10:05:ef:40:af:9e:23:d2:a6:fa:cf:81:9f:96:1f: c3:63:0a:bb:7c:26:49:09:56:2a:40:da:b4:e4:38: 4e:04:92:a8:a8:3a:38:3e:a7:c4:ec:d9:09:0f:91: ae:a3:ab:1c:72:2f:bb:b5:26:e9:d3:91:87:ee:a6: 02:a6:f4:bc:e6:24:0e:4e:90:31:d2:e7:71:4c:13: f7:46:16:79:68:d9:78:79:57:0d:c2:8c:81:7b:b5: a0:91:3a:0d:e5:97:27:97:10:70:be:8a:2c:c9:a2: 59:2f:8b:ab:f1:ed:12:78:05:06:d0:7b:f6:0a:ca: 51:68:47:c1:4c:6b:bb:ab:da:66:51:35:35:4a:75: 1c:22:cf:f9:fb:b2:c8:d0:b3:d4:67:09:98:cd:72: 62:be:a6:6d:d1:a7:1e:ad:23:d6:61:05:dc:ea:c0: dc:52:cc:8b:56:db:b8:ab:15:4b:14:37:45:cc:02: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F6:97:A9:CF:54:56:71:25:F4:E9:F5:51:28:6E:16:59:66:21:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:68:a4:1e:d2:41:b5:15:85:62:52:b8:a0:56:66:73:9d:08: 24:36:30:8a:87:70:f5:97:eb:bd:71:62:03:cb:39:89:cc:23: 4e:fd:ff:cb:4a:9a:02:d1:48:ab:31:9a:56:2c:00:8b:0c:dc: ad:33:ce:2f:47:34:da:c0:17:19:36:30:85:c4:1d:1c:8b:49: f8:18:ed:3f:78:9b:53:0e:1a:98:a1:88:b9:da:b2:e8:c9:28: 34:99:6f:51:26:93:70:77:d6:dd:10:c2:cf:24:39:67:df:c8: f7:8d:41:92:e9:46:d7:b2:c0:21:47:29:5c:d0:26:91:40:b0: f4:e4:b0:e2:37:0b:f7:64:32:11:7e:b3:36:fa:45:c0:a4:02: 79:c2:97:26:29:65:ef:cf:45:ed:53:42:cb:a6:cd:be:7b:44: d1:df:91:be:ed:29:97:dc:53:a0:78:0c:6d:82:0d:3b:2d:54: fd:61:51:57:88:b9:36:bf:d6:82:2d:47:b2:53:56:65:29:ed: 8f:f8:07:c6:b4:a8:59:e4:e8:18:e5:18:47:fc:0e:e7:11:52: 64:5b:84:5a:1d:d4:41:6b:1e:35:1e:fd:a6:9e:e9:f2:a2:83: 1b:c6:89:ec:52:d0:b9:44:61:77:c4:75:d2:c3:5c:f9:e5:e7: 8e:91:06:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp49JR8yJ/TmApwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTY3MmRlYjgtZmViYS00NjllLWEzMmMtNGQ5YmIyNTQ4Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhRub5KPjx5J+BZ66LfcqbB8K8s9WK1pXyBR WbGJHMmAwsOOWO8z+Uvm1Wt01GbsbSrdQyBV83W3HLTeMtdwy/04LU0lhzBTDsAQ Be9Ar54j0qb6z4Gflh/DYwq7fCZJCVYqQNq05DhOBJKoqDo4PqfE7NkJD5Guo6sc ci+7tSbp05GH7qYCpvS85iQOTpAx0udxTBP3RhZ5aNl4eVcNwoyBe7WgkToN5Zcn lxBwvoosyaJZL4ur8e0SeAUG0Hv2CspRaEfBTGu7q9pmUTU1SnUcIs/5+7LI0LPU ZwmYzXJivqZt0acerSPWYQXc6sDcUsyLVtu4qxVLFDdFzALzLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf2l6nPVFZxJfTp9VEobhZZZiFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9opB7SQbUVhWJSuKBWZnOdCCQ2MIqHcPWX671xYgPLOYnMI079/8tK mgLRSKsxmlYsAIsM3K0zzi9HNNrAFxk2MIXEHRyLSfgY7T94m1MOGpihiLnasujJ KDSZb1Emk3B31t0Qws8kOWffyPeNQZLpRteywCFHKVzQJpFAsPTksOI3C/dkMhF+ szb6RcCkAnnClyYpZe/PRe1TQsumzb57RNHfkb7tKZfcU6B4DG2CDTstVP1hUVeI uTa/1oItR7JTVmUp7Y/4B8a0qFnk6BjlGEf8DucRUmRbhFod1EFrHjUe/aae6fKi gxvGiexS0LlEYXfEddLDXPnl546RBpw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:16 2025 by rpki-client