$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa File: 20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json) Hash identifier: urr+Yj/3on+GtKDWlZGbTFoXqCClOSZzFocFp2xhcAo= Subject key identifier: D7:2F:83:11:D2:B6:91:A3:9B:F7:69:13:22:79:A9:45:42:D8:AA:ED Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AB4EB6E1F1EB7BE6CD4B82D80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 396982 IP address blocks: 147.124.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6e:1f:1e:b7:be:6c:d4:b8:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6323602d-bb57-47cd-ae3a-5aa33272253a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:2e:69:fa:66:dc:b5:28:92:f9:24:08:63: af:7e:39:55:93:09:39:2a:72:2a:2e:21:9d:7f:34: c6:55:5a:9e:6c:34:74:f8:9b:58:7d:7c:ff:77:05: a0:c1:8b:d5:fa:1d:ef:01:3b:96:d4:99:fe:d0:3f: 92:76:5a:f6:92:3d:66:19:66:27:02:3a:3e:1d:88: b5:4c:60:63:ac:85:42:f9:d8:6f:fc:1e:5e:b9:10: d9:52:87:50:0e:3a:fc:ea:a9:4e:1b:1d:ca:e5:9d: 68:7a:15:d1:5d:a7:16:f2:ed:3c:5a:04:e3:3c:55: c3:58:d4:f7:bd:0e:4e:7e:5a:b1:1a:61:3f:e8:0b: f6:f0:82:30:6c:4a:12:3a:ba:c9:7d:a3:8f:fd:60: 40:36:41:0b:2d:c2:d7:84:2d:91:51:86:82:f0:d7: 49:57:43:88:bb:d2:8b:ca:95:4e:80:f0:38:e0:1f: 8d:08:8d:3e:c7:ac:ff:24:27:da:cb:e2:6c:9d:f6: a1:59:cb:04:cc:ea:2f:04:f8:df:ba:b8:96:52:2a: 4c:ef:6e:9c:43:59:66:b9:14:48:3e:5b:20:e7:f1: ad:a7:94:37:f1:e2:cb:42:40:44:eb:57:d4:32:66: 0b:a0:6c:e4:b9:e7:01:8b:a3:5b:fc:67:f3:f1:69: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2F:83:11:D2:B6:91:A3:9B:F7:69:13:22:79:A9:45:42:D8:AA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:09:29:be:a0:cd:98:bc:1d:22:d4:bd:17:17:0c:fc:81:02: 87:6a:98:63:6b:f5:e0:30:95:b3:b7:e9:77:da:c1:4e:a9:b1: 13:6b:80:08:07:c4:24:2b:be:83:3b:46:5f:a0:29:23:8b:7b: 49:43:38:6c:40:3f:9f:5f:83:f2:81:d5:06:ad:85:32:3b:74: 1f:14:98:10:79:5e:ce:41:00:f2:91:4d:29:05:20:04:c8:e3: b3:c3:4a:6b:d5:c6:13:2c:05:71:0c:46:8f:3c:db:9b:99:15: 49:eb:99:b1:2a:39:f3:24:ca:8d:43:50:45:e9:9d:6f:00:c8: ea:0d:11:18:09:e8:d9:97:61:4b:d3:f1:b4:58:c6:a1:8d:6a: d3:70:ff:4c:b1:53:a5:48:e0:a1:e1:98:df:74:c6:9e:60:cf: c9:b4:c0:01:1a:c1:d5:1a:27:27:8a:89:de:7a:e7:57:68:b3: 73:95:86:ef:8d:6c:55:72:6c:ce:51:e8:91:a5:43:23:bb:45: 2b:4a:66:e8:73:92:61:4e:67:69:48:53:5e:d7:04:0e:5b:88: d4:a4:3e:b6:31:b4:9f:20:9d:e8:65:71:95:aa:46:a7:16:5c: 32:0f:c6:5b:0d:7e:bc:39:8b:6c:34:99:e8:fb:97:c9:fa:ba: b3:76:3d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0624fHre+bNS4LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjMyMzYwMmQtYmI1Ny00N2NkLWFlM2EtNWFhMzMyNzIyNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nEuafpm3LUokvkkCGOvfjlVkwk5KnIqLiGd fzTGVVqebDR0+JtYfXz/dwWgwYvV+h3vATuW1Jn+0D+Sdlr2kj1mGWYnAjo+HYi1 TGBjrIVC+dhv/B5euRDZUodQDjr86qlOGx3K5Z1oehXRXacW8u08WgTjPFXDWNT3 vQ5OflqxGmE/6Av28IIwbEoSOrrJfaOP/WBANkELLcLXhC2RUYaC8NdJV0OIu9KL ypVOgPA44B+NCI0+x6z/JCfay+JsnfahWcsEzOovBPjfuriWUipM726cQ1lmuRRI Plsg5/Gtp5Q38eLLQkBE61fUMmYLoGzkuecBi6Nb/Gfz8WkuowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcvgxHStpGjm/dpEyJ5qUVC2KrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoJKb6gzZi8HSLUvRcXDPyBAodqmGNr9eAwlbO36XfawU6psRNrgAgH xCQrvoM7Rl+gKSOLe0lDOGxAP59fg/KB1QathTI7dB8UmBB5Xs5BAPKRTSkFIATI 47PDSmvVxhMsBXEMRo8825uZFUnrmbEqOfMkyo1DUEXpnW8AyOoNERgJ6NmXYUvT 8bRYxqGNatNw/0yxU6VI4KHhmN90xp5gz8m0wAEawdUaJyeKid5651dos3OVhu+N bFVybM5R6JGlQyO7RStKZuhzkmFOZ2lIU17XBA5biNSkPrYxtJ8gnehlcZWqRqcW XDIPxlsNfrw5i2w0mej7l8n6urN2PaU= -----END CERTIFICATE-----Generated at Wed Aug 6 07:51:59 2025 by rpki-client