$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa File: f85fae74-1058-3498-b9a0-3d961ddead7c.roa (raw, json) Hash identifier: 99uemux4IrMnlCouujxO667wkCLcApCbow26t64Uzqc= Subject key identifier: 20:6E:D3:6F:66:67:82:5E:13:6A:FD:DE:F4:06:3A:FF:32:E7:89:12 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584B95A78F5C3DEE78497F1F0E00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 147.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8f:5c:3d:ee:78:49:7f:1f:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b14a53e5-3e8c-4cb4-9989-c8bfee216329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:6f:05:9c:29:3a:89:d1:0d:b8:8f:45:c6: be:7e:49:1f:5d:55:24:f9:ba:6f:d3:5b:a9:ef:6b: 96:a4:fe:d5:50:94:39:1a:d0:4b:dc:54:0a:e6:1c: a3:4e:38:dc:a2:04:eb:c9:ea:a1:df:f9:de:7b:ce: 13:8f:30:d3:00:42:f5:34:6a:ab:83:26:27:2d:0f: 73:f5:aa:89:16:0e:31:69:ca:e6:6b:c5:d4:28:19: 64:cf:c3:0d:45:f4:c6:47:fe:36:4b:c0:28:66:10: 37:d4:cf:89:25:f0:ee:81:a9:5b:dc:6a:6a:a3:fc: 50:a6:7a:db:87:4c:45:68:63:50:aa:c0:8c:73:00: 48:52:73:4e:ff:95:e8:a9:2a:e6:0d:0b:b0:b5:60: 6b:aa:28:c3:60:45:65:7e:a5:04:d1:dd:6b:b5:40: fc:b7:0a:46:ea:e5:9f:ed:f8:29:0b:88:b6:13:e4: 14:92:b2:a1:05:5f:be:b8:85:e9:5a:d2:5b:c1:00: 2d:ce:0f:0d:03:80:ee:fc:e4:d1:b2:c2:3f:67:d1: 18:72:07:e2:f0:0d:dc:9c:de:ed:bf:61:ea:3c:90: d3:af:6b:fe:91:31:be:32:09:82:84:34:b0:fe:95: 99:bf:4e:cc:d3:4d:c1:65:12:df:ed:37:24:90:ae: f4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6E:D3:6F:66:67:82:5E:13:6A:FD:DE:F4:06:3A:FF:32:E7:89:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f0:41:f8:8d:96:ef:7e:17:f2:db:25:93:58:6c:0d:e6:9d: 44:b8:9a:5c:79:d7:a0:0d:12:9d:30:7b:6e:69:70:4a:6d:33: 59:16:66:97:bf:c2:a1:2a:5b:b4:14:78:af:7c:f2:e3:71:c4: be:f5:14:a0:38:c6:0b:0e:2e:a5:69:af:e1:25:33:71:61:67: 57:d5:6b:06:e8:a1:0f:a3:bd:ce:57:56:4e:8b:e2:29:77:ba: 7b:e3:84:5e:a6:1b:1c:69:18:b1:ca:81:8d:38:f5:52:36:83: b2:e9:fa:92:ce:1d:5d:f7:2c:77:51:78:a6:0a:89:34:48:40: 29:03:1c:f4:d6:a4:ac:bc:52:0d:1e:c1:41:37:11:37:57:45: d3:fe:53:12:e1:f0:f8:3c:f6:ba:66:af:21:0d:5c:77:45:3b: 56:d9:eb:5e:32:7d:1e:b5:57:56:9d:26:1e:af:44:7d:c9:52: 33:b1:00:c0:b6:82:f7:a5:99:47:e8:cc:1e:a3:60:3b:c6:04: 4c:34:d4:33:f5:32:ae:33:2b:09:83:fb:2c:d6:1e:75:a1:4c: dd:d5:fb:96:20:dd:8e:dd:22:30:4c:05:8d:fd:9d:c5:12:b5: 1e:53:62:57:ae:60:73:c4:a0:fa:6d:a8:23:51:ff:9e:e5:8c: 39:5a:1c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp49cPe54SX8fDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjE0YTUzZTUtM2U4Yy00Y2I0LTk5ODktYzhiZmVlMjE2MzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTpvBZwpOonRDbiPRca+fkkfXVUk+bpv01up 72uWpP7VUJQ5GtBL3FQK5hyjTjjcogTryeqh3/nee84TjzDTAEL1NGqrgyYnLQ9z 9aqJFg4xacrma8XUKBlkz8MNRfTGR/42S8AoZhA31M+JJfDugalb3Gpqo/xQpnrb h0xFaGNQqsCMcwBIUnNO/5XoqSrmDQuwtWBrqijDYEVlfqUE0d1rtUD8twpG6uWf 7fgpC4i2E+QUkrKhBV++uIXpWtJbwQAtzg8NA4Du/OTRssI/Z9EYcgfi8A3cnN7t v2HqPJDTr2v+kTG+MgmChDSw/pWZv07M003BZRLf7TckkK70GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBu029mZ4JeE2r93vQGOv8y54kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZjg1ZmFlNzQtMTA1OC0z NDk4LWI5YTAtM2Q5NjFkZGVhZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDwQfiNlu9+F/LbJZNYbA3mnUS4mlx516ANEp0we25pcEptM1kWZpe/ wqEqW7QUeK988uNxxL71FKA4xgsOLqVpr+ElM3FhZ1fVawbooQ+jvc5XVk6L4il3 unvjhF6mGxxpGLHKgY049VI2g7Lp+pLOHV33LHdReKYKiTRIQCkDHPTWpKy8Ug0e wUE3ETdXRdP+UxLh8Pg89rpmryENXHdFO1bZ614yfR61V1adJh6vRH3JUjOxAMC2 gvelmUfozB6jYDvGBEw01DP1Mq4zKwmD+yzWHnWhTN3V+5Yg3Y7dIjBMBY39ncUS tR5TYleuYHPEoPptqCNR/57ljDlaHNA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:58 2025 by rpki-client