$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa File: c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa (raw, json) Hash identifier: 2tiGYixl39xxw4WcPk2CbPrLnmeB5Xh4LAhRh94F4yY= Subject key identifier: 2A:8F:3A:69:0E:C9:49:26:C6:21:71:50:91:2C:F2:EC:99:64:6B:26 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AF25676683D5BF1F26A686F80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 147.124.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:76:68:3d:5b:f1:f2:6a:68:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=28d37754-724f-4499-a7c6-da828abf1a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:29:ba:11:eb:cb:01:f8:e1:eb:62:72:50: c7:56:78:e1:e5:13:f6:e4:16:75:66:f6:dd:0c:79: 6c:49:e1:23:7b:08:9e:10:20:3e:6e:45:4c:99:5a: 1b:37:be:61:42:ad:4b:58:68:ae:b6:97:a0:f9:3b: 2f:ac:25:d2:d6:f6:13:4f:0f:9b:17:01:2f:e5:43: bd:33:2e:d0:47:a6:0d:33:89:37:bb:b1:ca:ce:c2: 17:bf:db:80:73:19:c4:0f:e3:70:fe:8d:da:2c:b0: 63:1b:ff:1e:4a:35:59:1e:94:68:bc:20:d7:8a:86: 94:6c:03:4f:31:0f:91:dd:37:34:54:f6:38:ce:8e: c6:b4:d9:f5:25:72:82:fa:d0:7b:92:06:1c:5d:a8: 2d:fc:ac:7f:04:2c:e7:0f:d9:4a:3b:4e:9c:72:0c: e0:f7:6f:ca:0d:d1:cb:01:12:a3:00:9c:1c:d8:4b: 10:ce:d6:28:7e:7a:e9:08:8c:70:bc:7a:5f:19:1e: c2:ea:99:31:19:d5:9a:bc:f7:5c:02:72:f1:a5:8c: 64:e9:1a:2a:b2:43:94:57:c8:e0:79:57:fe:fd:57: 8c:0e:78:f6:56:20:0f:52:13:d8:4d:b8:ba:de:1b: c1:26:94:d7:98:e4:00:1d:43:08:7c:73:c9:b1:bf: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8F:3A:69:0E:C9:49:26:C6:21:71:50:91:2C:F2:EC:99:64:6B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d0:a0:61:f7:0c:8c:dc:a1:2e:33:b2:e5:f9:37:98:a0:63: d1:64:a5:4b:64:38:13:b1:a3:2f:da:9a:fb:f1:41:b0:22:1d: 98:7f:bb:38:75:5c:96:51:16:0b:db:9e:8b:38:7d:90:d7:00: 13:28:92:ae:35:1a:e1:20:da:2a:5e:ee:18:24:e2:1d:1f:4f: c0:37:88:de:05:40:ad:c2:6e:d2:93:e3:6b:06:51:13:0d:b6: 79:1b:94:6d:08:6e:a1:e5:8e:f3:22:36:f3:26:16:c7:64:83: c3:55:05:fc:7d:c8:0f:06:e2:14:78:6d:19:3d:c4:59:91:c5: 3b:b8:2f:0c:4c:65:49:c0:d4:9b:1b:2e:fc:2e:2a:ff:3b:a1: 19:ad:3d:d1:7c:29:46:c9:b7:4c:cc:fa:5f:a4:75:e2:33:a1: 2b:af:6a:c3:87:ba:c4:b2:48:e0:69:af:82:b8:06:c6:60:ff: 9b:ad:af:71:11:81:c4:2c:1a:8b:08:fc:3c:48:21:76:5f:3e: 53:f2:8d:06:a3:b1:b5:c6:ad:6c:3d:c4:76:76:ba:f8:be:77: cb:a2:fc:d6:66:7c:24:b3:2e:a3:86:fa:37:25:c5:19:76:6d: 60:30:10:cb:99:5d:a8:f9:e9:bb:c7:9e:18:4e:69:7c:fa:1e: 29:cd:ac:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnZoPVvx8mpob4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjhkMzc3NTQtNzI0Zi00NDk5LWE3YzYtZGE4MjhhYmYxYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/wpuhHrywH44eticlDHVnjh5RP25BZ1Zvbd DHlsSeEjewieECA+bkVMmVobN75hQq1LWGiutpeg+TsvrCXS1vYTTw+bFwEv5UO9 My7QR6YNM4k3u7HKzsIXv9uAcxnED+Nw/o3aLLBjG/8eSjVZHpRovCDXioaUbANP MQ+R3Tc0VPY4zo7GtNn1JXKC+tB7kgYcXagt/Kx/BCznD9lKO06ccgzg92/KDdHL ARKjAJwc2EsQztYofnrpCIxwvHpfGR7C6pkxGdWavPdcAnLxpYxk6RoqskOUV8jg eVf+/VeMDnj2ViAPUhPYTbi63hvBJpTXmOQAHUMIfHPJsb+7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqPOmkOyUkmxiFxUJEs8uyZZGsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYzYwY2FhZWItNGQ2ZC0z ZTdkLTg1NDMtZDg3NDNmMzNmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLQoGH3DIzcoS4zsuX5N5igY9FkpUtkOBOxoy/amvvxQbAiHZh/uzh1 XJZRFgvbnos4fZDXABMokq41GuEg2ipe7hgk4h0fT8A3iN4FQK3CbtKT42sGURMN tnkblG0IbqHljvMiNvMmFsdkg8NVBfx9yA8G4hR4bRk9xFmRxTu4LwxMZUnA1Jsb LvwuKv87oRmtPdF8KUbJt0zM+l+kdeIzoSuvasOHusSySOBpr4K4BsZg/5utr3ER gcQsGosI/DxIIXZfPlPyjQajsbXGrWw9xHZ2uvi+d8ui/NZmfCSzLqOG+jclxRl2 bWAwEMuZXaj56bvHnhhOaXz6HinNrEM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:39:34 2025 by rpki-client