$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa File: f85fae74-1058-3498-b9a0-3d961ddead7c.roa (raw, json) Hash identifier: 97tJ0ai71qowNPEKw6cZXzfnWXguY/N00gVMcJChGJ0= Subject key identifier: 3B:5B:05:A4:C6:C3:00:52:54:C9:37:82:CB:5E:EB:92:57:C2:38:1E Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AB4EB6E343DA90F2238FB3340 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 14618 IP address blocks: 147.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6e:34:3d:a9:0f:22:38:fb:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=eb81e7e0-8748-4959-849e-4dcefdfc591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:97:f0:62:54:b6:76:fe:27:30:70:37:7b: ac:87:74:5f:ac:c6:a4:f7:da:f3:c6:ef:50:29:32: 80:80:c6:46:1b:a8:d4:95:8c:23:6d:1d:6d:f2:45: 45:88:0e:09:06:a9:80:11:c3:52:3b:e2:49:fe:7f: 65:ec:c1:9d:20:c0:53:d5:77:e2:00:66:5f:31:e7: eb:1b:68:7c:0a:e4:6d:04:c1:bf:fe:49:c4:e3:1e: c6:93:4c:7c:ca:d4:7d:4f:5c:72:db:1d:ee:ce:02: 32:6f:2d:12:e0:d3:4f:5e:50:88:5c:b0:f6:9b:87: 04:65:83:17:03:90:62:62:f4:93:a2:6c:28:ff:5b: e9:23:97:15:ee:63:e3:76:d7:26:f7:02:c6:de:ca: 4e:36:ab:74:3b:50:90:74:5c:b1:64:22:47:a5:80: 66:91:be:94:6e:b5:5e:fe:b0:17:a2:dc:08:91:ac: 1c:79:2c:4d:43:2d:1b:07:08:0b:37:d9:26:ef:7d: 82:71:e7:4a:3f:de:97:fc:6b:9c:10:54:38:7e:9b: b8:c7:32:a0:e5:a4:02:44:80:90:95:04:82:f4:c2: 3b:3e:6a:ee:79:ee:d4:2b:d3:b1:d7:16:15:03:42: b2:4a:a3:5c:ad:7e:6f:29:c9:6c:a6:c1:32:c0:71: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5B:05:A4:C6:C3:00:52:54:C9:37:82:CB:5E:EB:92:57:C2:38:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f85fae74-1058-3498-b9a0-3d961ddead7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7b:43:1a:e3:3d:d8:ac:38:9b:4a:e0:a3:35:42:ac:06:f1: d4:21:2d:27:ca:87:44:e5:fc:5e:44:cc:ab:b6:07:5a:1f:67: a7:bc:8f:14:16:99:c5:9c:5f:78:77:da:b9:a8:53:c4:85:8f: a7:88:b3:a1:d7:a4:8d:cd:a1:d4:0a:76:55:aa:c1:fb:3c:08: ed:57:67:7c:49:4d:53:0b:91:c8:13:84:80:6c:33:59:ee:cd: 31:c6:ee:3d:76:8f:8c:61:22:c0:f7:36:2e:e6:a3:9a:ca:a0: 50:7c:b8:e2:ca:51:12:dc:33:d0:f1:4d:0e:2a:25:73:60:31: 6a:a6:7d:07:47:3d:54:59:73:89:5a:bc:27:ba:6d:5a:64:53: 08:80:45:23:46:21:f9:5c:bf:95:29:75:65:6b:79:2c:ec:b5: 0e:df:fc:89:e5:50:95:8a:51:a9:ee:88:85:f7:65:9f:e7:2c: f9:e0:af:d4:94:5e:34:0f:44:75:9e:06:f0:89:cd:fd:28:dd: 69:ef:53:a8:88:d1:10:bc:15:b5:09:67:c0:3a:fc:0e:d5:70: 81:4e:3c:af:7f:26:1d:22:5c:d9:97:15:a5:0e:9f:4b:4e:ff: 2c:ba:b0:3c:ca:05:e1:47:67:1d:2c:b7:ee:66:d8:b9:49:35: ff:d7:28:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq06240PakPIjj7M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWI4MWU3ZTAtODc0OC00OTU5LTg0OWUtNGRjZWZkZmM1OTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuSX8GJUtnb+JzBwN3ush3RfrMak99rzxu9Q KTKAgMZGG6jUlYwjbR1t8kVFiA4JBqmAEcNSO+JJ/n9l7MGdIMBT1XfiAGZfMefr G2h8CuRtBMG//knE4x7Gk0x8ytR9T1xy2x3uzgIyby0S4NNPXlCIXLD2m4cEZYMX A5BiYvSTomwo/1vpI5cV7mPjdtcm9wLG3spONqt0O1CQdFyxZCJHpYBmkb6UbrVe /rAXotwIkawceSxNQy0bBwgLN9km732CcedKP96X/GucEFQ4fpu4xzKg5aQCRICQ lQSC9MI7Pmruee7UK9Ox1xYVA0KySqNcrX5vKclspsEywHEgAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtbBaTGwwBSVMk3gste65JXwjgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZjg1ZmFlNzQtMTA1OC0z NDk4LWI5YTAtM2Q5NjFkZGVhZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV7QxrjPdisOJtK4KM1QqwG8dQhLSfKh0Tl/F5EzKu2B1ofZ6e8jxQW mcWcX3h32rmoU8SFj6eIs6HXpI3NodQKdlWqwfs8CO1XZ3xJTVMLkcgThIBsM1nu zTHG7j12j4xhIsD3Ni7mo5rKoFB8uOLKURLcM9DxTQ4qJXNgMWqmfQdHPVRZc4la vCe6bVpkUwiARSNGIflcv5UpdWVreSzstQ7f/InlUJWKUanuiIX3ZZ/nLPngr9SU XjQPRHWeBvCJzf0o3WnvU6iI0RC8FbUJZ8A6/A7VcIFOPK9/Jh0iXNmXFaUOn0tO /yy6sDzKBeFHZx0st+5m2LlJNf/XKLI= -----END CERTIFICATE-----Generated at Tue Aug 5 20:09:19 2025 by rpki-client