$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa File: d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa (raw, json) Hash identifier: JVbD/aU5qDbIiMDnHvFGqfPfCDuY5B2huYvRm55hy8k= Subject key identifier: BB:E1:65:F7:F1:C8:C7:21:65:5B:08:CD:1D:30:D0:8C:BE:4D:E8:4D Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584CCFD744A0C83F5951E39A07C0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:44:a0:c8:3f:59:51:e3:9a:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=457bfdcd-4012-423f-9a86-37f7de482d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:b7:5d:84:2d:5e:3d:79:d1:d4:87:36:44: d5:d0:32:93:8e:5e:8b:54:e1:fa:f8:08:05:1d:e3: 0a:a3:a2:0f:08:b6:45:32:38:08:36:a2:b2:c2:9a: 6a:ed:76:fa:56:aa:dc:cc:e5:48:4f:e8:31:93:a1: 5b:94:1b:b5:99:ea:61:4d:e0:f4:73:9a:a7:50:e9: c3:e7:66:9a:49:af:45:75:4f:79:ee:38:c1:e5:3e: 3b:8b:43:ae:68:09:f8:28:42:8d:99:b1:6a:2b:95: 04:c3:7f:48:b9:86:0d:fc:5b:bc:c7:e4:86:b3:83: 94:8a:92:64:7a:c8:26:d8:f3:03:3f:bc:55:f5:90: f3:2f:2d:75:f9:3c:00:b5:4a:ba:19:1d:57:1d:d0: 5f:10:5d:e6:5d:88:41:ad:c4:86:a4:d4:57:78:9e: b9:f3:f4:9c:50:0b:d6:52:ef:41:19:62:ac:1d:1b: e9:3e:35:a4:33:e7:5e:6a:64:31:78:72:01:b0:78: 1f:09:64:8c:24:5a:f6:74:2b:a5:44:9c:6c:ed:bb: 94:0d:10:be:0b:b9:74:5c:b7:84:07:76:07:bc:9f: 87:dd:02:f5:1f:46:d8:29:44:7e:01:0f:65:9f:cc: d7:ac:83:f1:93:11:4f:ef:a0:a4:e2:cf:eb:f9:91: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E1:65:F7:F1:C8:C7:21:65:5B:08:CD:1D:30:D0:8C:BE:4D:E8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3f:e8:8e:2f:0a:b4:ab:18:fb:28:6c:86:33:54:bd:c5:af: 60:cf:95:f1:68:b6:9f:8f:8b:41:a2:ce:5a:56:38:c9:8a:ca: bc:99:b1:5d:d9:b2:5d:6a:3d:41:4d:d8:7b:40:90:16:ad:d7: 5b:71:11:b5:ef:df:c9:fc:09:73:41:bc:36:cd:29:8a:d6:55: 77:67:c7:19:e4:8f:ec:6a:0d:9a:05:36:40:59:05:b8:97:4c: 53:16:91:0b:ec:e1:59:02:74:df:bf:82:ab:4a:81:0a:8b:21: 30:9f:87:34:3e:72:d0:51:55:8b:62:b5:b3:ff:d5:32:7f:4c: 2a:69:eb:f7:0e:23:13:c4:ed:b0:94:d1:54:29:4a:f1:8c:b7: dd:5f:e4:55:e4:b3:e4:75:54:82:36:0b:d9:2b:f2:98:6b:ed: 66:cb:d8:a6:9c:bf:51:60:ae:3c:c7:4f:45:2e:24:dc:c1:1b: c3:73:3c:7d:5b:98:a1:42:10:12:f1:b1:21:84:b3:67:59:10: 21:3f:ec:f9:13:a8:a2:e3:89:68:56:e0:1d:a2:cf:f5:41:8d: 9c:14:e5:4a:34:a3:54:f6:2a:e6:96:af:f8:3a:fd:ff:54:73: 8d:1d:59:8d:73:70:2d:06:a3:be:40:b9:d7:a1:d5:db:ef:87: 37:d7:18:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP10SgyD9ZUeOaB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk NDU3YmZkY2QtNDAxMi00MjNmLTlhODYtMzdmN2RlNDgyZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhG3XYQtXj150dSHNkTV0DKTjl6LVOH6+AgF HeMKo6IPCLZFMjgINqKywppq7Xb6VqrczOVIT+gxk6FblBu1mephTeD0c5qnUOnD 52aaSa9FdU957jjB5T47i0OuaAn4KEKNmbFqK5UEw39IuYYN/Fu8x+SGs4OUipJk esgm2PMDP7xV9ZDzLy11+TwAtUq6GR1XHdBfEF3mXYhBrcSGpNRXeJ658/ScUAvW Uu9BGWKsHRvpPjWkM+deamQxeHIBsHgfCWSMJFr2dCulRJxs7buUDRC+C7l0XLeE B3YHvJ+H3QL1H0bYKUR+AQ9ln8zXrIPxkxFP76Ck4s/r+ZEUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvhZffxyMchZVsIzR0w0Iy+TehNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDdjYjAwOGEtNjlkOS0z MzM1LTk2NGUtNGQxM2M2ZTZmOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY/6I4vCrSrGPsobIYzVL3Fr2DPlfFotp+Pi0GizlpWOMmKyryZsV3Z sl1qPUFN2HtAkBat11txEbXv38n8CXNBvDbNKYrWVXdnxxnkj+xqDZoFNkBZBbiX TFMWkQvs4VkCdN+/gqtKgQqLITCfhzQ+ctBRVYtitbP/1TJ/TCpp6/cOIxPE7bCU 0VQpSvGMt91f5FXks+R1VII2C9kr8phr7WbL2Kacv1FgrjzHT0UuJNzBG8NzPH1b mKFCEBLxsSGEs2dZECE/7PkTqKLjiWhW4B2iz/VBjZwU5Uo0o1T2KuaWr/g6/f9U c40dWY1zcC0Go75Audeh1dvvhzfXGA8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:00:08 2026 by rpki-client