$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa File: a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa (raw, json) Hash identifier: oWKQtf5gpjwFruNnQQi5ojCxEJhp5440ngsQ/9AfI1E= Subject key identifier: 9F:B9:F1:DF:ED:3C:F0:A5:7E:EA:A7:9B:F2:B4:D9:67:D1:27:0C:05 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584BA0D246160733CF53A38F6080 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 147.124.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:46:16:07:33:cf:53:a3:8f:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=1689664d-2ab4-4088-8851-546793fa7798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:8b:b5:52:48:62:70:79:57:4e:cd:43:87: 74:d5:f5:42:a5:18:40:70:d6:a0:64:8a:bc:5a:9e: 2c:73:00:5d:9e:13:3f:01:63:89:21:0f:80:b8:dc: 50:ec:9c:bd:c1:e4:43:e8:44:de:6a:16:13:61:14: 44:28:6e:ae:37:4e:54:e9:69:bc:39:be:42:ea:0a: a8:28:7e:6e:cb:c4:d3:69:15:fb:7a:3c:87:fb:92: 5e:fb:01:fd:9e:f9:1c:d5:c3:8a:01:9a:f2:68:fb: 3c:87:61:e1:e4:6a:2d:f3:81:e2:d6:fb:9b:b1:c2: ac:e2:42:42:b8:96:a2:05:6c:5e:46:8b:8a:dc:a3: 07:0f:2f:3e:2a:0f:d4:c1:2c:cd:cc:e7:57:11:e4: 9c:43:e6:23:11:45:c5:40:2d:2c:e2:9c:67:55:c0: 39:c6:f8:09:5a:a4:5b:bf:88:2c:45:ec:e8:1d:6d: f9:93:95:91:7f:bc:c9:28:59:0f:4c:5c:98:92:65: 9e:73:e3:7e:1a:56:0e:cd:54:d1:f9:1a:1a:6d:2b: 3b:40:b0:3b:6a:4a:b9:50:f0:91:c5:f2:de:8e:24: e2:89:10:f5:1e:0c:c8:f1:3a:6e:03:4c:e6:a5:78: 14:36:6b:c2:ca:fa:bc:99:a0:30:de:22:e6:64:38: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B9:F1:DF:ED:3C:F0:A5:7E:EA:A7:9B:F2:B4:D9:67:D1:27:0C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f1:91:dc:e8:0a:14:60:b7:e3:2b:f1:c3:5e:6d:91:d0:1d: 7e:d2:25:84:63:c9:06:ee:a3:5a:a9:f7:a6:4a:aa:f1:64:60: e2:b1:7d:5d:68:f4:cd:c5:a0:48:54:97:6f:06:e9:8f:81:6e: 64:2c:a2:f6:68:29:58:da:f9:34:b4:5a:f6:ca:a7:94:d7:f8: 79:94:31:e9:56:f6:cc:f4:37:c6:58:c9:60:87:0f:2c:19:af: a2:82:db:7b:fa:0b:af:8f:0a:69:88:f9:52:b2:dd:37:a4:cf: 38:f3:89:75:42:3c:26:2a:67:f8:8f:76:59:60:65:17:ec:b6: 8e:e8:aa:69:9f:b4:fd:ec:b9:69:41:fc:22:d5:41:45:0f:96: 1e:c9:76:e4:6c:9c:e7:e7:3e:59:ee:0a:67:ca:97:20:62:e2: 58:66:1c:ef:78:bc:b9:04:f6:5f:23:42:29:24:ea:c6:86:c5: fd:83:fc:50:eb:f6:65:fa:bf:43:cc:cc:91:c6:cf:94:ca:e6: ff:30:12:e6:49:97:5a:1f:30:3a:11:8d:a6:2f:db:43:c7:03: 33:96:81:f3:83:89:37:95:c5:8a:8e:bc:91:31:1d:bb:f9:64: 69:0f:67:85:af:3a:48:9a:6e:2c:b4:87:da:49:ae:51:88:19: f3:e1:e2:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kYWBzPPU6OPYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MTY4OTY2NGQtMmFiNC00MDg4LTg4NTEtNTQ2NzkzZmE3Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoSLtVJIYnB5V07NQ4d01fVCpRhAcNagZIq8 Wp4scwBdnhM/AWOJIQ+AuNxQ7Jy9weRD6ETeahYTYRREKG6uN05U6Wm8Ob5C6gqo KH5uy8TTaRX7ejyH+5Je+wH9nvkc1cOKAZryaPs8h2Hh5Got84Hi1vubscKs4kJC uJaiBWxeRouK3KMHDy8+Kg/UwSzNzOdXEeScQ+YjEUXFQC0s4pxnVcA5xvgJWqRb v4gsRezoHW35k5WRf7zJKFkPTFyYkmWec+N+GlYOzVTR+RoabSs7QLA7akq5UPCR xfLejiTiiRD1HgzI8TpuA0zmpXgUNmvCyvq8maAw3iLmZDjZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+58d/tPPClfuqnm/K02WfRJwwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYTY3ZGMyNWYtZGQzZi0z NTFiLTg2ZDMtMWMzNDdiNThiZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzxkdzoChRgt+Mr8cNebZHQHX7SJYRjyQbuo1qp96ZKqvFkYOKxfV1o 9M3FoEhUl28G6Y+BbmQsovZoKVja+TS0WvbKp5TX+HmUMelW9sz0N8ZYyWCHDywZ r6KC23v6C6+PCmmI+VKy3TekzzjziXVCPCYqZ/iPdllgZRfsto7oqmmftP3suWlB /CLVQUUPlh7JduRsnOfnPlnuCmfKlyBi4lhmHO94vLkE9l8jQikk6saGxf2D/FDr 9mX6v0PMzJHGz5TK5v8wEuZJl1ofMDoRjaYv20PHAzOWgfODiTeVxYqOvJExHbv5 ZGkPZ4WvOkiabiy0h9pJrlGIGfPh4po= -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:14 2025 by rpki-client