$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9d3bc681-7b26-3446-9a9b-f04034baf701.roa File: 9d3bc681-7b26-3446-9a9b-f04034baf701.roa (raw, json) Hash identifier: qWf3Smu18KyShnyblM8e9DayqUYPkFU3zKm43YGNWBs= Subject key identifier: C2:A9:D6:D6:B2:A4:DB:0E:69:EB:33:76:EA:A3:F6:ED:2B:A2:F6:8E Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D80FFE1177F9A21C8F4FE5880 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9d3bc681-7b26-3446-9a9b-f04034baf701.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 147.124.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e1:17:7f:9a:21:c8:f4:fe:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=48e1cacb-7acc-49a0-8537-ad3c3642de8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c2:e7:c6:7e:e8:e8:8d:53:a5:47:04:af:1e: c0:bb:71:66:84:5f:73:30:a3:3d:91:f3:e4:73:d1: 60:1c:73:d7:0e:f1:48:e4:b4:77:4b:87:f0:a7:96: a4:95:80:f6:b9:8d:21:e8:69:00:45:96:5e:78:08: e5:ed:e8:ac:b6:8e:6b:0b:f8:77:24:14:ca:d7:e9: f1:33:9b:3d:f1:a1:38:ec:6e:50:6d:0f:c1:f1:81: 0b:47:aa:7d:87:1f:cb:79:e6:26:50:d5:ae:67:00: fa:d8:56:e4:29:77:ec:2e:f2:eb:74:13:11:1f:ab: 2e:7c:30:dd:4b:40:3c:5a:f1:89:3c:56:65:e0:db: 37:25:71:49:48:cd:b5:36:0b:cb:47:ba:0f:5a:35: 00:64:f7:ee:4d:8a:1a:da:ae:f3:64:2a:88:ff:79: 1f:14:63:a2:de:ea:4c:c4:ba:cb:13:13:3a:d2:2f: c2:90:26:13:80:49:57:57:b8:ec:62:23:f3:65:be: 3a:ff:a4:64:a9:d8:13:63:ec:fa:4c:66:4e:2d:e3: f1:95:8a:66:ec:4c:18:5c:b5:ea:7c:f7:b1:93:00: 91:56:df:81:2f:fd:92:52:1c:fe:e4:12:3a:25:9b: 06:44:56:1c:9c:6b:9b:8c:4a:40:6a:f2:a7:23:c7: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:D6:D6:B2:A4:DB:0E:69:EB:33:76:EA:A3:F6:ED:2B:A2:F6:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9d3bc681-7b26-3446-9a9b-f04034baf701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f2:2f:70:13:a7:d8:25:a4:d2:d8:5d:7a:b6:7e:84:78:a1: 44:4a:2f:72:d1:62:73:04:2b:64:b8:b1:d0:1d:6d:11:f5:0b: 22:49:8d:61:3b:bd:3a:b2:2f:4b:ee:5a:a4:75:a3:13:e2:d9: 45:5c:21:7a:6f:6d:5b:d1:3f:bd:e4:8e:7f:62:d5:d8:03:61: 67:34:3d:61:e1:65:a1:a9:02:b1:58:03:71:e9:2e:73:a7:2c: b2:63:ea:e2:7a:00:5d:f8:e0:c2:fc:1b:a7:86:b8:b9:bf:74: bc:4c:3b:e4:f0:f5:fb:4e:14:07:47:ad:93:05:75:35:6b:2d: b4:31:89:a2:d7:55:3f:7d:7e:65:75:21:b4:5b:17:f6:3d:1f: dd:1d:27:ba:d3:3f:c6:7e:d7:b6:06:d7:ff:1a:1b:c0:0d:55: a1:38:6c:21:57:25:1b:aa:a3:cf:de:40:ba:d5:80:70:3b:97: 6b:bb:5c:c5:52:da:6f:25:c2:33:28:93:b7:a7:a5:61:55:52: 44:70:d4:d9:3c:e4:3d:64:76:4c:84:03:6e:40:2d:04:6b:c3: 7c:44:c4:6d:2f:ed:3c:1d:d7:16:4f:3a:22:0a:9c:d7:4b:aa: 3a:b4:f4:da:c7:be:6f:0b:f8:89:73:dd:c5:4b:93:8b:51:a3: c9:d5:26:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+EXf5ohyPT+WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NDhlMWNhY2ItN2FjYy00OWEwLTg1MzctYWQzYzM2NDJkZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8Lnxn7o6I1TpUcErx7Au3FmhF9zMKM9kfPk c9FgHHPXDvFI5LR3S4fwp5aklYD2uY0h6GkARZZeeAjl7eisto5rC/h3JBTK1+nx M5s98aE47G5QbQ/B8YELR6p9hx/LeeYmUNWuZwD62FbkKXfsLvLrdBMRH6sufDDd S0A8WvGJPFZl4Ns3JXFJSM21NgvLR7oPWjUAZPfuTYoa2q7zZCqI/3kfFGOi3upM xLrLExM60i/CkCYTgElXV7jsYiPzZb46/6RkqdgTY+z6TGZOLePxlYpm7EwYXLXq fPexkwCRVt+BL/2SUhz+5BI6JZsGRFYcnGubjEpAavKnI8dfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKp1taypNsOaeszduqj9u0rovaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOWQzYmM2ODEtN2IyNi0z NDQ2LTlhOWItZjA0MDM0YmFmNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHyL3ATp9glpNLYXXq2foR4oURKL3LRYnMEK2S4sdAdbRH1CyJJjWE7 vTqyL0vuWqR1oxPi2UVcIXpvbVvRP73kjn9i1dgDYWc0PWHhZaGpArFYA3HpLnOn LLJj6uJ6AF344ML8G6eGuLm/dLxMO+Tw9ftOFAdHrZMFdTVrLbQxiaLXVT99fmV1 IbRbF/Y9H90dJ7rTP8Z+17YG1/8aG8ANVaE4bCFXJRuqo8/eQLrVgHA7l2u7XMVS 2m8lwjMok7enpWFVUkRw1Nk85D1kdkyEA25ALQRrw3xExG0v7Twd1xZPOiIKnNdL qjq09NrHvm8L+Ilz3cVLk4tRo8nVJsc= -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:26 2026 by rpki-client