$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa File: 48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa (raw, json) Hash identifier: HXU+40tp+pUu10tgNAZrkNTv80HAwOsTldEFo2gVsQs= Subject key identifier: 2B:39:2B:CF:B0:13:26:EA:69:67:68:E3:09:76:5E:6A:94:3E:03:7C Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AB4EB6A61329FED2E3897EC00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 16509 IP address blocks: 147.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6a:61:32:9f:ed:2e:38:97:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=addcee19-4759-4ed0-b6cd-af070b766108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:71:9d:81:b6:05:0e:a9:c2:de:6c:ca:6a: 7a:15:7c:bb:a2:82:85:96:67:29:4b:f4:f6:a0:b1: e9:6e:99:9a:f1:49:3f:f1:57:95:d3:12:8f:fb:56: ee:50:32:8f:95:12:6d:94:60:41:08:9f:ac:05:92: 2b:10:70:fb:3e:72:36:99:b4:3a:b4:80:02:2f:d3: 0a:31:78:01:2c:82:ee:b3:86:24:fb:db:d2:b8:8d: 22:6a:99:1c:52:2f:25:8f:60:5a:30:13:a6:b8:56: a0:7b:5b:5f:ec:40:c5:ca:06:87:12:08:3b:59:cb: 0c:4b:5c:bd:de:a5:97:f8:9d:35:41:e3:0f:26:71: 4f:a3:83:65:bb:a9:34:0f:bb:09:04:18:0e:36:62: 2d:fa:64:af:56:a2:28:fb:aa:5c:ff:56:bb:bf:a1: 76:82:fc:07:ba:ea:cc:ac:bb:c8:50:95:e8:82:f4: 91:ba:a9:16:c5:9a:7f:af:84:ef:3b:09:3f:c9:aa: b8:58:bf:ed:c9:cd:19:67:d4:e5:be:bc:9b:fa:ea: f4:f1:53:4e:09:f6:4a:36:9a:7b:e3:7b:12:5e:85: 23:e8:25:29:3c:42:c2:2e:5b:4c:2f:c9:b0:c2:80: 33:5a:16:88:f6:7e:f3:c5:d8:47:23:b4:f3:ba:83: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:39:2B:CF:B0:13:26:EA:69:67:68:E3:09:76:5E:6A:94:3E:03:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:14:9a:7f:e6:aa:e9:ce:a9:ff:a8:d8:ae:f5:dd:54:0a:5e: e1:73:c2:0c:33:34:57:72:b7:fc:67:b4:ba:02:4a:70:ae:09: b1:f4:93:20:0a:1a:38:3d:87:57:97:53:c8:93:d0:98:39:f5: c4:94:4a:aa:20:45:ce:9b:13:ff:af:73:a3:1c:1b:e6:64:69: c5:02:aa:37:88:98:57:57:67:04:5e:02:51:7a:da:63:d8:60: db:87:ed:e7:ba:5b:21:0f:24:cb:f0:76:f6:ec:9e:13:63:d3: ec:01:0e:94:5e:ce:78:b5:dd:16:95:4a:fa:c2:3e:16:c3:d6: d1:f5:07:37:e6:3b:1f:00:9a:d3:56:6c:a0:74:34:fd:50:b9: a5:7d:0d:f3:eb:f2:b8:1f:73:68:45:e3:30:6e:3c:f9:be:be: 29:53:0d:ff:23:fc:1b:b0:6b:fa:04:76:81:bc:7b:7f:2e:16: 42:8f:38:45:be:00:6a:a7:cd:f9:d6:14:13:d5:84:81:4b:e4: 60:6a:93:9d:fc:93:98:39:38:58:55:17:09:ba:2d:91:85:fb: 6a:ba:72:72:db:6a:83:82:58:b3:16:3a:ee:85:35:6f:5d:e1: f5:24:7f:0d:1a:95:35:8b:93:2d:f6:e0:76:be:0a:e4:e9:e9: 62:9a:e7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq062phMp/tLjiX7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWRkY2VlMTktNDc1OS00ZWQwLWI2Y2QtYWYwNzBiNzY2MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw49xnYG2BQ6pwt5symp6FXy7ooKFlmcpS/T2 oLHpbpma8Uk/8VeV0xKP+1buUDKPlRJtlGBBCJ+sBZIrEHD7PnI2mbQ6tIACL9MK MXgBLILus4Yk+9vSuI0iapkcUi8lj2BaMBOmuFage1tf7EDFygaHEgg7WcsMS1y9 3qWX+J01QeMPJnFPo4Nlu6k0D7sJBBgONmIt+mSvVqIo+6pc/1a7v6F2gvwHuurM rLvIUJXogvSRuqkWxZp/r4TvOwk/yaq4WL/tyc0ZZ9Tlvryb+ur08VNOCfZKNpp7 43sSXoUj6CUpPELCLltML8mwwoAzWhaI9n7zxdhHI7TzuoPgfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs5K8+wEybqaWdo4wl2XmqUPgN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNDhmMjZmYzktMDhiMC0z ZTFiLTk3YmYtYzBmMGZlZTU0ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoUmn/mqunOqf+o2K713VQKXuFzwgwzNFdyt/xntLoCSnCuCbH0kyAK Gjg9h1eXU8iT0Jg59cSUSqogRc6bE/+vc6McG+ZkacUCqjeImFdXZwReAlF62mPY YNuH7ee6WyEPJMvwdvbsnhNj0+wBDpRezni13RaVSvrCPhbD1tH1BzfmOx8AmtNW bKB0NP1QuaV9DfPr8rgfc2hF4zBuPPm+vilTDf8j/Buwa/oEdoG8e38uFkKPOEW+ AGqnzfnWFBPVhIFL5GBqk538k5g5OFhVFwm6LZGF+2q6cnLbaoOCWLMWOu6FNW9d 4fUkfw0alTWLky324Ha+CuTp6WKa57M= -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:43 2025 by rpki-client