$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa File: 3244e627-103d-3ceb-9e4e-605b4c86ee79.roa (raw, json) Hash identifier: y5WRVbA6XWRp3SnmaMM+Z32BPpSZCaDAECOC+Dc2xF4= Subject key identifier: B4:41:A8:10:88:82:E1:17:79:6D:CE:BB:C6:42:98:F0:A8:59:33:AC Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584F3E47E885B70414D82C5D5A58 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 147.124.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e8:85:b7:04:14:d8:2c:5d:5a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=1d6a8d12-296f-457b-bd84-06c7bc611fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:31:55:92:46:a2:5e:9b:b4:33:d3:69:61: 2b:85:73:c1:7a:83:d5:4e:07:ad:e5:fc:ec:31:bc: 68:ad:74:c5:fb:b2:28:89:2e:33:09:41:ff:84:9c: 1e:0c:df:ef:ac:a2:c0:21:c9:77:95:14:76:4e:7c: 3a:ce:f9:2a:48:17:11:3d:4d:2a:6c:d5:54:97:50: d3:72:01:6c:dd:46:70:85:aa:1c:27:ac:1f:3c:ff: 08:d6:69:f7:80:1d:e3:9d:59:99:50:54:d2:ec:de: ca:b1:67:a6:bd:a4:70:28:9d:d7:f9:f5:3d:79:45: c8:23:8a:62:6f:6e:44:4c:30:f1:82:63:dd:af:02: 95:32:71:80:a4:23:3b:d1:97:1c:10:cc:ec:fb:e6: e7:82:a6:8b:27:b4:59:6f:4a:5e:a9:03:1c:0f:44: 13:ec:ef:f6:8d:41:ba:62:60:63:64:40:4f:f0:12: 23:37:60:cb:68:80:a0:a9:e9:4a:87:85:15:37:88: 92:88:41:ad:36:9c:14:e9:04:94:db:2b:77:ab:28: df:f5:f3:79:43:3e:1c:da:14:fc:38:a0:0c:c8:e0: 1a:7f:22:18:4d:9b:a9:cd:b2:e4:23:3f:e3:81:81: cb:80:cc:b6:5a:9b:64:b1:39:ad:5e:1f:e7:09:0b: cc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:A8:10:88:82:E1:17:79:6D:CE:BB:C6:42:98:F0:A8:59:33:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5e:0f:fa:ff:9f:a4:10:dc:52:1d:07:18:ce:8b:72:f3:d8: 84:66:75:bf:a8:7a:36:a2:55:99:bd:b9:3d:c4:0c:23:51:1f: 9f:47:7f:b8:e7:8b:bc:6a:3c:9b:de:4e:58:7c:22:6b:0a:73: c3:e3:20:40:42:43:ef:f9:d5:f6:51:8e:9f:44:60:69:4b:18: 0c:ab:e2:42:aa:2c:8a:93:12:7e:e8:bf:96:65:76:8c:3f:56: e7:e0:3e:86:2f:c1:9a:45:56:38:6b:a0:cd:83:82:3a:d9:03: d8:89:b4:de:2a:00:03:cd:ae:c4:90:7b:10:a9:a7:1d:6e:8d: 5d:ae:a7:c3:99:09:46:53:1a:b5:09:d6:6f:71:95:14:8d:6a: 3d:39:ef:f4:0f:0e:a9:87:d8:cc:06:2a:6f:46:e8:3c:8c:34: 72:5e:c7:db:25:89:31:81:2c:b0:78:dd:f0:11:c8:c9:d1:a7: 35:32:33:fb:59:86:bd:da:d6:1f:8b:9a:02:4c:67:de:fc:2d: e8:1d:ea:85:54:07:88:4f:12:1d:b8:36:14:7a:f4:4e:59:2f: a3:c8:a2:48:51:b3:35:55:34:90:28:c0:4c:e5:05:c8:3e:e0: 04:7f:02:51:5c:79:d7:35:bf:24:75:02:ec:d3:33:33:03:d9: 7e:85:30:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+iFtwQU2CxdWlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MWQ2YThkMTItMjk2Zi00NTdiLWJkODQtMDZjN2JjNjExZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWAxVZJGol6btDPTaWErhXPBeoPVTget5fzs MbxorXTF+7IoiS4zCUH/hJweDN/vrKLAIcl3lRR2Tnw6zvkqSBcRPU0qbNVUl1DT cgFs3UZwhaocJ6wfPP8I1mn3gB3jnVmZUFTS7N7KsWemvaRwKJ3X+fU9eUXII4pi b25ETDDxgmPdrwKVMnGApCM70ZccEMzs++bngqaLJ7RZb0peqQMcD0QT7O/2jUG6 YmBjZEBP8BIjN2DLaICgqelKh4UVN4iSiEGtNpwU6QSU2yt3qyjf9fN5Qz4c2hT8 OKAMyOAafyIYTZupzbLkIz/jgYHLgMy2WptksTmtXh/nCQvMvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRBqBCIguEXeW3Ou8ZCmPCoWTOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMzI0NGU2MjctMTAzZC0z Y2ViLTllNGUtNjA1YjRjODZlZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACheD/r/n6QQ3FIdBxjOi3Lz2IRmdb+oejaiVZm9uT3EDCNRH59Hf7jn i7xqPJveTlh8ImsKc8PjIEBCQ+/51fZRjp9EYGlLGAyr4kKqLIqTEn7ov5Zldow/ VufgPoYvwZpFVjhroM2DgjrZA9iJtN4qAAPNrsSQexCppx1ujV2up8OZCUZTGrUJ 1m9xlRSNaj057/QPDqmH2MwGKm9G6DyMNHJex9sliTGBLLB43fARyMnRpzUyM/tZ hr3a1h+LmgJMZ978Legd6oVUB4hPEh24NhR69E5ZL6PIokhRszVVNJAowEzlBcg+ 4AR/AlFcedc1vyR1AuzTMzMD2X6FMOc= -----END CERTIFICATE-----Generated at Wed Sep 23 10:22:49 2026 by rpki-client