$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/61f6adaa-82a4-3895-9926-db7992945d1d.roa File: 61f6adaa-82a4-3895-9926-db7992945d1d.roa (raw, json) Hash identifier: UP77dLeyMLgGvlNYpIqX2oW/7dfv0iTlQ2EpskGlF6E= Subject key identifier: 8C:91:F8:A1:71:4A:03:F5:8B:EA:B2:12:39:62:31:F8:57:56:96:15 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584BA0D2462D4D8B4FAD708EAB20 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/61f6adaa-82a4-3895-9926-db7992945d1d.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 147.124.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:46:2d:4d:8b:4f:ad:70:8e:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=df9fe9fd-de78-4b66-b8b5-1b4d46b35254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:51:b0:4a:76:1d:9c:46:f9:94:ae:3f:5a: c8:1b:bd:a2:8d:b3:aa:48:24:c2:47:6f:ed:dd:4f: 62:de:d2:bd:9a:c7:27:98:7b:ce:ac:df:be:3d:48: 77:b6:57:de:9f:e5:48:ad:37:00:a9:89:fb:4b:ad: 43:d1:9b:49:ec:8e:f6:f0:23:65:19:47:94:c3:eb: 37:63:2d:8a:85:f7:8a:fb:03:7f:c8:6b:84:13:cc: 13:a2:87:61:11:ed:56:ce:83:c4:c3:59:fb:e7:69: b8:d9:eb:02:5d:44:6d:d7:d1:ea:df:1f:5f:af:62: 89:b2:62:18:04:73:29:68:81:ca:5d:b2:fa:09:f4: ba:aa:c7:b8:5b:6b:fc:b2:7a:93:e2:de:6b:fa:18: fc:c0:bd:e5:03:1f:8c:eb:53:54:27:80:04:83:35: 43:25:66:f2:4c:9f:b3:63:53:22:be:31:48:78:86: b7:24:2a:73:42:46:75:a5:91:6b:25:94:b3:88:0f: ca:55:77:36:56:2e:de:3e:eb:25:f1:df:41:c2:32: a6:13:93:b0:04:0f:1e:a8:d7:fe:aa:cb:18:f9:81: 9d:20:f3:bf:13:b5:f6:12:cb:df:c5:fc:b3:ec:ee: 9a:e7:8f:ab:bf:a1:b5:4e:d3:ce:49:ba:d1:eb:a7: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:F8:A1:71:4A:03:F5:8B:EA:B2:12:39:62:31:F8:57:56:96:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/61f6adaa-82a4-3895-9926-db7992945d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ff:28:66:46:56:89:60:54:cb:4b:b0:38:6f:06:d6:b8:01: f8:e9:eb:f5:c6:01:ba:84:27:eb:52:41:7a:64:43:a9:b5:75: 85:0e:09:bc:89:39:36:63:eb:4e:37:a4:48:45:c8:f3:19:70: 9d:a0:63:f0:ce:d7:e1:c5:61:f5:39:6a:6b:02:b1:60:40:d7: cc:4a:1c:e8:13:25:cc:5b:b0:f5:65:b4:e2:f1:30:ad:ca:a1: 47:66:ec:47:32:e3:08:91:ec:ec:20:2a:65:25:d1:ca:f8:b6: ae:30:26:5a:45:73:03:17:2d:74:1f:66:e0:19:ef:86:38:3e: aa:bd:2c:25:c4:e8:92:5e:0a:5c:9d:a6:d7:f0:32:cd:74:fd: 3e:e0:e7:3f:cc:39:c5:bb:36:ad:bc:b1:98:7b:a1:e4:f5:15: 51:1e:8e:15:ec:b3:4e:93:de:33:20:d2:23:64:4b:79:88:76: 38:6e:b3:14:3b:81:38:f2:15:0c:08:bf:1a:2e:8f:df:a6:f6: 93:4e:ab:20:15:36:2f:39:ec:df:1e:ea:e9:59:7c:9e:b2:4a: 5c:1e:fa:7a:f5:c1:79:ce:25:ce:5d:cc:d8:08:31:33:bf:14: 45:b4:a8:ba:39:ca:72:c7:1c:06:38:0e:67:89:b1:cd:f2:03: 7f:ef:a3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kYtTYtPrXCOqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZGY5ZmU5ZmQtZGU3OC00YjY2LWI4YjUtMWI0ZDQ2YjM1MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmChRsEp2HZxG+ZSuP1rIG72ijbOqSCTCR2/t 3U9i3tK9mscnmHvOrN++PUh3tlfen+VIrTcAqYn7S61D0ZtJ7I728CNlGUeUw+s3 Yy2KhfeK+wN/yGuEE8wToodhEe1WzoPEw1n752m42esCXURt19Hq3x9fr2KJsmIY BHMpaIHKXbL6CfS6qse4W2v8snqT4t5r+hj8wL3lAx+M61NUJ4AEgzVDJWbyTJ+z Y1MivjFIeIa3JCpzQkZ1pZFrJZSziA/KVXc2Vi7ePusl8d9BwjKmE5OwBA8eqNf+ qssY+YGdIPO/E7X2Esvfxfyz7O6a54+rv6G1TtPOSbrR66fUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyR+KFxSgP1i+qyEjliMfhXVpYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNjFmNmFkYWEtODJhNC0z ODk1LTk5MjYtZGI3OTkyOTQ1ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3/KGZGVolgVMtLsDhvBta4Afjp6/XGAbqEJ+tSQXpkQ6m1dYUOCbyJ OTZj6043pEhFyPMZcJ2gY/DO1+HFYfU5amsCsWBA18xKHOgTJcxbsPVltOLxMK3K oUdm7Ecy4wiR7OwgKmUl0cr4tq4wJlpFcwMXLXQfZuAZ74Y4Pqq9LCXE6JJeClyd ptfwMs10/T7g5z/MOcW7Nq28sZh7oeT1FVEejhXss06T3jMg0iNkS3mIdjhusxQ7 gTjyFQwIvxouj9+m9pNOqyAVNi857N8e6ulZfJ6ySlwe+nr1wXnOJc5dzNgIMTO/ FEW0qLo5ynLHHAY4DmeJsc3yA3/voyM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:30 2025 by rpki-client