$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa File: d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa (raw, json) Hash identifier: NPnzW1M2Xp1C3tu05eGc1lfldieGdhfOE9Qx5jZqY2w= Subject key identifier: CE:13:EB:69:A0:15:42:77:4B:8F:CC:66:5C:FF:3C:D9:D9:F4:40:86 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584F331D23E5A3E46BD57D243600 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:23:e5:a3:e4:6b:d5:7d:24:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=f6c56672-f986-43dc-a8fc-61f873032344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:99:9a:d9:d1:ce:d1:76:79:81:f3:dc:b0: f5:b7:25:1d:86:6f:80:7f:98:68:92:63:a6:e2:74: 15:5d:47:65:0c:c9:a7:6b:63:20:2d:49:04:68:97: 65:e5:24:2e:6e:59:2b:c9:3e:a5:38:3d:ff:f3:f2: fc:9f:0e:35:03:f9:62:35:ce:bf:a8:78:c9:af:af: f6:3b:ad:3a:ad:ef:9b:5d:4b:f1:cc:1a:c6:f9:5f: 1b:7a:14:99:db:54:b6:ae:5f:42:ec:bb:e6:8a:ea: 45:8e:54:ef:12:10:64:d3:37:2f:b8:8c:20:bf:90: 89:5d:93:3e:8c:82:d2:fe:0f:3d:5a:5c:b4:95:88: 77:85:14:af:2b:75:49:ec:df:7d:a2:2d:3b:21:9b: 58:91:36:51:59:d5:7d:e1:7d:6d:83:d3:b4:09:22: a1:96:c6:e7:af:10:2e:8a:ce:9b:7c:55:cb:91:96: 6f:d0:5e:3c:9e:36:0d:d3:88:56:46:96:40:19:11: e2:dd:99:5f:b6:96:43:c2:3d:9a:87:5e:4e:8c:39: 01:56:b2:7a:84:5f:8c:15:1f:d6:86:33:3f:95:4f: 0f:61:b7:a9:81:e9:e0:55:5c:91:d7:4d:0f:6c:a3: 56:0d:86:64:66:fa:6c:a9:c1:49:65:1b:51:a8:ee: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:13:EB:69:A0:15:42:77:4B:8F:CC:66:5C:FF:3C:D9:D9:F4:40:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2d:af:67:23:f2:7f:c2:69:47:b2:7a:d7:98:86:62:b1:e3: 70:f7:2f:1e:53:60:dc:5e:71:de:2d:47:ec:5f:6b:c5:f6:3c: 10:77:8c:bd:03:51:df:0f:1d:a9:c1:60:52:cf:4d:47:c3:bd: 08:20:c4:2a:af:b6:6c:7f:7a:43:7e:97:80:2e:36:df:45:20: 61:94:0e:fe:55:81:a2:aa:fa:09:19:1c:ce:6f:d9:fa:11:35: fb:6b:1e:a7:92:66:2b:bd:ed:25:cc:55:66:40:97:63:e1:9b: 3e:29:02:6c:e6:bc:c7:cd:18:25:72:9c:8b:a7:c1:0e:ba:cb: e0:ad:bb:e6:83:78:6e:3f:6e:2f:77:81:7c:d6:14:50:6a:28: 14:9d:64:a9:19:d3:c6:0c:4c:ed:07:c3:88:df:11:f9:a3:72: cd:d5:a8:31:24:67:aa:4a:c3:d3:19:12:ee:b8:ca:0b:04:bc: ba:2d:c1:21:09:dd:13:49:33:7d:74:34:cb:cb:54:88:5a:ae: d4:dc:3f:77:f3:8b:3c:bf:c8:1a:91:d3:e7:61:43:51:20:ac: 6f:34:93:31:c7:49:fd:f9:d2:c2:d7:86:40:e1:ba:d7:9e:9b: 1f:ec:fd:db:24:87:b0:13:43:05:e2:34:ab:d7:67:e1:ce:d1: ef:06:a9:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSPlo+Rr1X0kNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZjZjNTY2NzItZjk4Ni00M2RjLWE4ZmMtNjFmODczMDMyMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsyZmtnRztF2eYHz3LD1tyUdhm+Af5hokmOm 4nQVXUdlDMmna2MgLUkEaJdl5SQublkryT6lOD3/8/L8nw41A/liNc6/qHjJr6/2 O606re+bXUvxzBrG+V8behSZ21S2rl9C7LvmiupFjlTvEhBk0zcvuIwgv5CJXZM+ jILS/g89Wly0lYh3hRSvK3VJ7N99oi07IZtYkTZRWdV94X1tg9O0CSKhlsbnrxAu is6bfFXLkZZv0F48njYN04hWRpZAGRHi3ZlftpZDwj2ah15OjDkBVrJ6hF+MFR/W hjM/lU8PYbepgengVVyR100PbKNWDYZkZvpsqcFJZRtRqO4+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4T62mgFUJ3S4/MZlz/PNnZ9ECGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDdjYjAwOGEtNjlkOS0z MzM1LTk2NGUtNGQxM2M2ZTZmOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHItr2cj8n/CaUeyeteYhmKx43D3Lx5TYNxecd4tR+xfa8X2PBB3jL0D Ud8PHanBYFLPTUfDvQggxCqvtmx/ekN+l4AuNt9FIGGUDv5VgaKq+gkZHM5v2foR NftrHqeSZiu97SXMVWZAl2Phmz4pAmzmvMfNGCVynIunwQ66y+Ctu+aDeG4/bi93 gXzWFFBqKBSdZKkZ08YMTO0Hw4jfEfmjcs3VqDEkZ6pKw9MZEu64ygsEvLotwSEJ 3RNJM310NMvLVIhartTcP3fzizy/yBqR0+dhQ1EgrG80kzHHSf350sLXhkDhutee mx/s/dskh7ATQwXiNKvXZ+HO0e8Gqcc= -----END CERTIFICATE-----Generated at Sat Sep 26 07:24:50 2026 by rpki-client