$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa File: 4f7fc206-638d-3fed-8702-51154262e297.roa (raw, json) Hash identifier: xpqZ4uObBZbuUQ0SicVRtOzahER1wJTGMrf9y7dddmI= Subject key identifier: 63:8B:B0:4B:FC:DD:53:7E:45:2C:02:B7:15:0C:52:21:97:A4:8A:BC Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584B1AD18EA98D1227A105EBE280 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 147.124.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8e:a9:8d:12:27:a1:05:eb:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=cb59837e-e9e5-4a33-b8ac-d3a925121128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:ce:9c:99:5f:b9:98:49:3f:9a:d3:28:55: aa:79:76:f3:0d:78:ae:d1:b9:62:3d:dc:22:6a:46: d8:94:b8:8e:6d:2c:18:e2:47:b8:04:88:2b:67:0a: b8:65:ff:af:c3:d7:4b:94:cc:b3:86:d2:e4:6b:ba: 32:37:dc:ab:71:06:dc:b8:7c:a1:24:1d:21:63:9e: d8:7b:97:7f:4f:be:71:8a:bc:74:4a:57:55:c5:a8: bc:ee:d4:18:49:97:85:70:6b:64:24:64:42:b0:81: f8:4a:c7:82:26:9d:05:e9:d3:62:14:0a:d4:3b:74: d2:2e:e9:fe:e5:c7:f4:4c:b8:a1:3a:34:a9:26:ac: c2:54:74:13:dc:52:21:e2:9e:3f:e7:d3:e8:58:2b: 97:fa:24:2c:39:73:9c:13:6b:e9:ed:f4:c7:85:05: c9:91:85:d0:1b:bd:24:1e:37:96:b1:06:9e:e7:8c: 09:6e:c2:05:96:0c:d4:b3:0e:2d:44:38:cd:be:61: c1:e6:df:91:4c:6d:a8:9c:4a:fc:43:21:1f:50:b3: a0:f0:f7:bc:f7:d9:76:7b:bc:14:db:00:82:1b:eb: 69:31:b5:b6:a0:01:5e:d7:fa:a8:16:d4:2b:fc:f0: a8:42:2e:cb:07:ca:1d:82:79:79:21:2c:57:13:ff: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:B0:4B:FC:DD:53:7E:45:2C:02:B7:15:0C:52:21:97:A4:8A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:84:18:63:c3:69:f7:c4:3e:38:3d:f3:b5:36:2a:0c:8e:3a: 18:69:cb:e0:8d:c3:a3:04:0e:6d:26:4f:6d:67:a0:6d:b4:63: fb:d7:4b:83:6c:ba:90:3d:58:77:7a:32:a9:1c:95:c5:ee:b3: 41:eb:5d:cc:89:06:34:ca:4c:d2:8e:48:cf:37:c6:67:c6:79: 2b:7f:52:01:b1:9c:d1:82:19:01:e5:b3:5b:cf:c6:2b:52:3c: d5:2e:d7:69:ef:77:8a:c2:5d:1c:82:bc:7f:c6:4c:37:d7:6f: 86:99:e0:d9:60:ca:96:eb:c9:ce:0a:c3:b7:02:9c:6b:0d:64: 9a:58:09:f6:c1:0e:43:12:28:f3:39:c8:57:e5:e7:f5:99:76: 02:72:77:c5:dd:7d:43:f6:cc:69:65:67:ac:43:8c:86:dc:56: 61:2f:ed:d7:a3:ea:fe:15:e2:be:3f:c5:a9:f7:e2:92:90:e1: 55:46:13:7d:e7:ab:e8:54:5b:79:ab:bc:a9:2e:d0:6f:fa:43: a2:5b:53:47:8a:b9:a1:e1:08:df:fc:22:62:13:69:79:2a:75: 62:6e:12:4d:26:e4:f3:05:df:ee:f7:3e:87:d2:8b:9e:21:1f: bd:d0:cd:db:7c:01:40:88:1e:75:ac:41:c8:c1:4b:1b:9e:05: 06:1f:09:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Y6pjRInoQXr4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2I1OTgzN2UtZTllNS00YTMzLWI4YWMtZDNhOTI1MTIxMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0/OnJlfuZhJP5rTKFWqeXbzDXiu0bliPdwi akbYlLiObSwY4ke4BIgrZwq4Zf+vw9dLlMyzhtLka7oyN9yrcQbcuHyhJB0hY57Y e5d/T75xirx0SldVxai87tQYSZeFcGtkJGRCsIH4SseCJp0F6dNiFArUO3TSLun+ 5cf0TLihOjSpJqzCVHQT3FIh4p4/59PoWCuX+iQsOXOcE2vp7fTHhQXJkYXQG70k HjeWsQae54wJbsIFlgzUsw4tRDjNvmHB5t+RTG2onEr8QyEfULOg8Pe899l2e7wU 2wCCG+tpMbW2oAFe1/qoFtQr/PCoQi7LB8odgnl5ISxXE/8d6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOLsEv83VN+RSwCtxUMUiGXpIq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNGY3ZmMyMDYtNjM4ZC0z ZmVkLTg3MDItNTExNTQyNjJlMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGEGGPDaffEPjg987U2KgyOOhhpy+CNw6MEDm0mT21noG20Y/vXS4Ns upA9WHd6MqkclcXus0HrXcyJBjTKTNKOSM83xmfGeSt/UgGxnNGCGQHls1vPxitS PNUu12nvd4rCXRyCvH/GTDfXb4aZ4Nlgypbryc4Kw7cCnGsNZJpYCfbBDkMSKPM5 yFfl5/WZdgJyd8XdfUP2zGllZ6xDjIbcVmEv7dej6v4V4r4/xan34pKQ4VVGE33n q+hUW3mrvKku0G/6Q6JbU0eKuaHhCN/8ImITaXkqdWJuEk0m5PMF3+73PofSi54h H73Qzdt8AUCIHnWsQcjBSxueBQYfCbk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:45 2025 by rpki-client