$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa File: c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa (raw, json) Hash identifier: pucOs82ZDymIjAVMaTKBgtHp/z0zTaJ5MH+BUpwS3Lw= Subject key identifier: 11:A2:66:BC:79:3F:94:FF:22:71:04:4B:74:DE:C4:A7:F4:7E:7D:EA Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584F15CCE63EE53E714B8321BDE0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 147.124.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e6:3e:e5:3e:71:4b:83:21:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=ff5551c3-c740-4907-a006-30de76425562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:2d:bd:ee:e8:07:8d:09:06:fe:b9:30:69: 31:a7:5b:d6:36:cc:e1:02:15:3a:57:6d:4f:2f:56: 58:e3:8b:51:8e:be:92:77:c6:6e:c7:b1:a7:0d:3a: 14:a4:ed:e5:9d:1b:e9:5e:22:e7:a2:6b:81:63:11: 5f:a4:50:d3:61:97:f6:be:82:ed:c9:a9:89:29:fa: 53:eb:f4:26:7f:fb:70:66:1a:a2:c2:26:ea:a9:18: 67:0d:7f:74:c3:d3:5f:95:51:7d:59:b8:0d:05:4c: 8e:c5:87:6c:3e:bd:67:0f:cd:f2:e3:4b:a3:50:7a: 2a:19:4a:1f:67:81:cc:93:1a:24:82:90:d5:9f:ce: 4c:6c:5f:26:6b:ab:d7:e6:68:89:59:e0:2f:0d:23: 81:4b:ac:47:53:99:4a:26:59:a7:90:5b:8b:4f:e4: 84:63:da:f2:88:21:9b:3a:23:80:de:d8:f9:09:55: 6d:3e:3e:94:9c:18:b2:6d:2c:a3:ed:36:11:b0:3c: 78:42:45:3a:d1:9e:40:ea:c1:70:3f:09:67:f3:89: bb:03:3b:30:1b:b5:77:14:a6:8a:b9:fc:d4:7b:1e: 3b:83:4f:af:7f:2d:d9:eb:79:4d:44:c6:41:f4:1d: 62:6f:63:2e:d3:1f:02:aa:cb:9b:cb:35:a7:78:02: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A2:66:BC:79:3F:94:FF:22:71:04:4B:74:DE:C4:A7:F4:7E:7D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:36:7e:2e:42:4c:b8:96:e1:fa:c5:4b:96:33:b7:1b:5a:58: fc:c3:2d:c8:41:50:d2:8a:5f:f2:22:44:ff:86:75:8f:83:98: ec:19:64:0f:61:db:2b:5f:3a:a5:0d:db:22:21:b9:f7:89:b8: d7:28:f2:a2:1c:f6:8f:d9:46:7a:4a:3f:95:a1:35:b0:c5:37: c3:82:68:14:d9:d2:19:13:18:6f:26:a7:ac:76:c3:f3:49:1a: 43:85:55:7d:9a:1c:33:01:4b:4c:f8:1e:72:d5:bb:43:4e:da: 6b:47:50:d5:eb:12:98:0c:2b:f2:3b:6d:1d:e0:27:12:10:1a: 1a:99:2e:62:9c:98:85:d9:93:11:db:c6:b6:18:57:d3:3a:e0: 17:ac:5b:70:8e:44:ee:f0:08:bf:0e:35:86:8e:da:b5:58:50: c1:c6:21:f1:f2:62:5f:9e:b4:17:7f:a1:d4:11:76:14:21:8e: 37:8f:17:60:54:85:1a:e1:40:18:59:ca:94:ad:0b:ac:6f:32: 4c:ff:2c:3e:56:0a:63:a3:05:31:83:3f:d5:4e:ea:88:ac:9f: f4:e4:9e:55:42:29:31:f2:d2:88:f0:39:73:e0:3f:06:1c:1c: 1d:24:c1:be:f7:89:8d:84:7a:71:22:04:e6:4f:0d:f2:98:7a: e2:2e:cd:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOY+5T5xS4MhveAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmY1NTUxYzMtYzc0MC00OTA3LWEwMDYtMzBkZTc2NDI1NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPQtve7oB40JBv65MGkxp1vWNszhAhU6V21P L1ZY44tRjr6Sd8Zux7GnDToUpO3lnRvpXiLnomuBYxFfpFDTYZf2voLtyamJKfpT 6/Qmf/twZhqiwibqqRhnDX90w9NflVF9WbgNBUyOxYdsPr1nD83y40ujUHoqGUof Z4HMkxokgpDVn85MbF8ma6vX5miJWeAvDSOBS6xHU5lKJlmnkFuLT+SEY9ryiCGb OiOA3tj5CVVtPj6UnBiybSyj7TYRsDx4QkU60Z5A6sFwPwln84m7AzswG7V3FKaK ufzUex47g0+vfy3Z63lNRMZB9B1ib2Mu0x8CqsubyzWneAKU0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGiZrx5P5T/InEES3TexKf0fn3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYzYwY2FhZWItNGQ2ZC0z ZTdkLTg1NDMtZDg3NDNmMzNmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH02fi5CTLiW4frFS5YztxtaWPzDLchBUNKKX/IiRP+GdY+DmOwZZA9h 2ytfOqUN2yIhufeJuNco8qIc9o/ZRnpKP5WhNbDFN8OCaBTZ0hkTGG8mp6x2w/NJ GkOFVX2aHDMBS0z4HnLVu0NO2mtHUNXrEpgMK/I7bR3gJxIQGhqZLmKcmIXZkxHb xrYYV9M64BesW3CORO7wCL8ONYaO2rVYUMHGIfHyYl+etBd/odQRdhQhjjePF2BU hRrhQBhZypStC6xvMkz/LD5WCmOjBTGDP9VO6oisn/TknlVCKTHy0ojwOXPgPwYc HB0kwb73iY2EenEiBOZPDfKYeuIuzbk= -----END CERTIFICATE-----Generated at Wed Sep 23 03:24:41 2026 by rpki-client