$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa File: 9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa (raw, json) Hash identifier: 360gPKgbJaxXeek8TgQDAOxfhEELXsaKgPLCI3fMS70= Subject key identifier: 8B:45:51:94:50:41:EA:D3:7C:2A:BF:93:C2:AF:99:F6:94:01:43:CA Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584A8146540F01BEA61901ED2000 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 16509 IP address blocks: 147.124.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:54:0f:01:be:a6:19:01:ed:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=0e02685c-f6a3-483e-9c25-16dc6077e890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:6d:48:b6:eb:87:a0:49:f8:04:2a:76:44: da:34:f2:1a:c7:9e:60:4c:e9:5c:f6:5f:40:bf:6b: 0f:38:e3:49:d3:8c:88:75:f6:b2:ad:75:51:70:bb: 8f:8b:8c:2b:44:29:bd:4d:49:0b:3b:71:9f:25:de: 71:9b:a5:ef:7b:e1:1f:50:77:b6:7f:8f:7c:81:23: 27:98:cd:c4:5f:11:bf:b1:a6:03:a5:c0:20:ce:ef: 2d:34:20:9b:b2:53:82:de:51:50:f6:7a:61:6e:9a: c4:a9:d8:68:9e:ab:17:cb:c2:13:05:a0:fd:30:02: 36:a6:58:97:25:5d:57:12:31:ab:42:ba:4f:30:eb: e7:76:b1:c2:91:6c:3e:2a:bb:3a:d6:d8:c6:49:f4: 1f:c7:1f:35:96:b0:2c:ac:0b:4a:56:41:06:08:e5: 4b:56:19:c2:34:09:30:f0:fb:b0:69:20:c7:7d:c8: 69:e8:48:b1:aa:57:03:89:c7:36:34:3a:e9:33:31: a2:15:89:e8:60:ce:b5:c9:13:81:10:29:ec:9e:7c: bb:ae:26:ec:c4:5e:4f:67:89:f9:8b:ab:06:e8:27: 5b:7d:82:8c:3a:95:f4:4e:be:e7:e8:d7:c5:1f:64: f6:18:40:e9:38:b8:4b:4f:aa:2b:8e:de:b3:fd:d8: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:45:51:94:50:41:EA:D3:7C:2A:BF:93:C2:AF:99:F6:94:01:43:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:1a:a1:91:be:8c:9b:0a:ef:d1:8b:b1:a2:fe:62:f8:29:a4: f7:ff:2e:bd:df:c0:da:70:f9:a6:97:88:9b:92:ae:38:76:6c: a2:85:fb:5d:cd:42:b0:08:6b:77:b5:c9:f6:30:b8:50:ba:fb: 25:e5:dc:c1:6a:84:4d:6b:45:2f:8b:9d:38:c8:15:7a:74:10: 1f:bb:24:d0:53:a1:40:1a:1e:38:29:c6:14:f9:14:b3:7e:01: 1d:66:1e:60:6a:d1:12:2c:86:55:c2:29:ff:48:a3:e9:4e:56: ac:11:e4:8a:94:b0:f5:28:ad:56:a2:52:34:98:4f:82:f6:54: e4:0d:29:db:9f:c5:78:a8:40:a8:8d:e2:bc:f0:da:64:da:d3: e7:09:a9:a2:9a:a7:da:c5:db:8a:f8:e8:72:38:ad:d9:2f:3b: 30:e9:cf:66:6b:2c:66:b9:55:00:23:e3:54:2b:a7:ea:92:54: dd:5c:b5:99:62:c4:9a:93:9a:6c:af:50:08:e2:18:7e:f3:93: d0:74:e3:76:57:5b:d6:ad:b7:38:5c:90:39:1e:44:db:9a:7a: 71:f3:f7:51:7d:63:72:13:1d:a6:13:5f:70:1a:37:cd:79:f2: e5:df:bf:f1:3d:d4:34:57:c5:c9:6e:46:99:b4:af:38:ee:43: 5d:27:54:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlQPAb6mGQHtIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MGUwMjY4NWMtZjZhMy00ODNlLTljMjUtMTZkYzYwNzdlODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxptSLbrh6BJ+AQqdkTaNPIax55gTOlc9l9A v2sPOONJ04yIdfayrXVRcLuPi4wrRCm9TUkLO3GfJd5xm6Xve+EfUHe2f498gSMn mM3EXxG/saYDpcAgzu8tNCCbslOC3lFQ9nphbprEqdhonqsXy8ITBaD9MAI2pliX JV1XEjGrQrpPMOvndrHCkWw+Krs61tjGSfQfxx81lrAsrAtKVkEGCOVLVhnCNAkw 8PuwaSDHfchp6EixqlcDicc2NDrpMzGiFYnoYM61yROBECnsnny7ribsxF5PZ4n5 i6sG6CdbfYKMOpX0Tr7n6NfFH2T2GEDpOLhLT6orjt6z/dhcFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItFUZRQQerTfCq/k8KvmfaUAUPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOWMwOWMxYTgtYzNlMi0z OTgwLWFjNGYtNjYyYTNiM2NiY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgaoZG+jJsK79GLsaL+YvgppPf/Lr3fwNpw+aaXiJuSrjh2bKKF+13N QrAIa3e1yfYwuFC6+yXl3MFqhE1rRS+LnTjIFXp0EB+7JNBToUAaHjgpxhT5FLN+ AR1mHmBq0RIshlXCKf9Io+lOVqwR5IqUsPUorVaiUjSYT4L2VOQNKdufxXioQKiN 4rzw2mTa0+cJqaKap9rF24r46HI4rdkvOzDpz2ZrLGa5VQAj41Qrp+qSVN1ctZli xJqTmmyvUAjiGH7zk9B043ZXW9attzhckDkeRNuaenHz91F9Y3ITHaYTX3AaN815 8uXfv/E91DRXxcluRpm0rzjuQ10nVDs= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:03 2025 by rpki-client