$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa File: 880de72b-888b-3dde-b1b4-c86038197a8a.roa (raw, json) Hash identifier: ZVIx94jcNN9ipTG1dBH7j8pAF4kuPcWk4vZQdsflkTI= Subject key identifier: 97:62:A3:30:9A:88:23:D4:14:CF:51:26:DC:34:E4:EB:D2:3A:31:C1 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584DD1F5C537F880BF2C7454D280 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa Signing time: Wed 13 May 2026 13:00:31 +0000 ROA not before: Wed 13 May 2026 13:00:31 +0000 ROA not after: Tue 11 Aug 2026 13:00:31 +0000 asID: 396982 IP address blocks: 147.124.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:f5:c5:37:f8:80:bf:2c:74:54:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: May 13 13:00:31 2026 GMT Not After : Aug 11 13:00:31 2026 GMT Subject: CN=06e4581e-ec88-487b-89e6-81a09e263888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:6f:b3:1b:70:c7:10:35:d5:1d:17:8c:fa: db:0d:3d:34:a7:28:5b:4d:1a:bd:7e:2a:75:5f:40: d6:ac:53:63:63:c7:b4:f4:45:2f:3a:70:7b:ed:30: 0f:b1:2e:7d:5a:b4:c2:ca:4c:c3:ad:25:0c:0d:6d: 3a:c5:ea:f6:5a:95:b4:c2:48:66:ff:99:ca:7d:17: 26:43:d9:d9:95:27:63:b7:0c:9b:ac:30:85:95:2b: 06:43:74:75:69:45:b3:d4:fc:69:c6:80:5f:f5:8e: 18:a0:8d:11:06:c9:0a:8f:95:43:56:bc:58:6b:f3: 7d:33:ff:70:a3:ac:d1:2d:5e:5a:9d:dd:fe:9e:7f: 95:58:70:e0:f6:ed:fa:27:2a:58:8f:8c:ec:d4:40: ca:ef:58:53:9e:07:99:d1:47:40:1e:e8:5d:c5:b3: 97:ca:ca:7a:56:6f:8a:b7:8f:89:f1:13:d3:17:e9: 7c:05:5c:44:71:30:94:27:cf:f7:99:b6:be:12:7b: 02:8b:d5:4a:10:fe:96:bb:03:9f:eb:e9:76:88:3d: cd:cf:1d:71:6f:d0:69:9b:18:c8:20:7d:7c:e8:4d: dd:3d:db:83:05:2c:16:8c:b5:dd:24:b2:f4:85:ca: e2:db:bf:08:84:84:0b:39:5c:1d:d1:c9:06:fd:d3: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:A3:30:9A:88:23:D4:14:CF:51:26:DC:34:E4:EB:D2:3A:31:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:31:9e:7f:a1:5b:4e:5b:0a:c3:1a:1c:a0:38:3a:82:3d:5c: 91:6e:2c:82:af:fa:ae:1c:92:58:fd:ca:0f:45:6b:90:04:8e: 83:29:41:a7:0d:00:00:09:b9:4d:07:24:19:df:3a:d9:52:72: a0:8b:33:4d:25:45:34:f5:90:a4:f1:46:eb:0a:82:e9:c0:ef: ca:ee:a3:68:54:c5:cb:a0:ef:9a:e7:66:12:21:72:f7:c4:4a: 22:67:47:66:7e:cb:b7:fa:9c:e1:79:9d:9c:2c:a1:b8:c0:28: d2:e2:3a:22:22:19:ce:1d:0f:20:fa:89:8f:5f:e2:5e:e4:93: 38:b4:72:14:52:9e:93:80:e7:57:1a:4d:0d:7a:a1:58:fd:69: 31:18:f9:99:06:04:ab:b1:64:85:06:b6:3c:cc:ee:b8:2f:1f: 4a:d4:9a:94:93:59:5f:77:69:c9:65:95:25:02:2c:54:04:ed: a5:93:94:cc:a9:a4:77:52:ce:ae:65:24:30:10:18:84:ea:33: ad:b4:27:d8:c1:9e:a2:1f:bf:29:5f:d0:4a:e2:09:9f:3b:d0: dd:0d:55:6a:3e:e1:bc:33:e6:67:fe:e5:f1:2b:47:bc:9d:5d: 9c:97:bb:a7:42:7f:18:34:ed:f2:19:36:8b:91:de:32:eb:50: 83:8d:df:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9cU3+IC/LHRU0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk MDZlNDU4MWUtZWM4OC00ODdiLTg5ZTYtODFhMDllMjYzODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD5vsxtwxxA11R0XjPrbDT00pyhbTRq9fip1 X0DWrFNjY8e09EUvOnB77TAPsS59WrTCykzDrSUMDW06xer2WpW0wkhm/5nKfRcm Q9nZlSdjtwybrDCFlSsGQ3R1aUWz1PxpxoBf9Y4YoI0RBskKj5VDVrxYa/N9M/9w o6zRLV5and3+nn+VWHDg9u36JypYj4zs1EDK71hTngeZ0UdAHuhdxbOXysp6Vm+K t4+J8RPTF+l8BVxEcTCUJ8/3mba+EnsCi9VKEP6WuwOf6+l2iD3Nzx1xb9BpmxjI IH186E3dPduDBSwWjLXdJLL0hcri278IhIQLOVwd0ckG/dNRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdiozCaiCPUFM9RJtw05OvSOjHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvODgwZGU3MmItODg4Yi0z ZGRlLWIxYjQtYzg2MDM4MTk3YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMxnn+hW05bCsMaHKA4OoI9XJFuLIKv+q4cklj9yg9Fa5AEjoMpQacN AAAJuU0HJBnfOtlScqCLM00lRTT1kKTxRusKgunA78ruo2hUxcug75rnZhIhcvfE SiJnR2Z+y7f6nOF5nZwsobjAKNLiOiIiGc4dDyD6iY9f4l7kkzi0chRSnpOA51ca TQ16oVj9aTEY+ZkGBKuxZIUGtjzM7rgvH0rUmpSTWV93aclllSUCLFQE7aWTlMyp pHdSzq5lJDAQGITqM620J9jBnqIfvylf0EriCZ870N0NVWo+4bwz5mf+5fErR7yd XZyXu6dCfxg07fIZNouR3jLrUION34k= -----END CERTIFICATE-----Generated at Sat Jun 13 17:50:52 2026 by rpki-client