$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa File: fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa (raw, json) Hash identifier: 993SoG6Unaz8QHhdewv0s+bTAaJTbyiRQlxVHr+Q4ws= Subject key identifier: 0F:24:BE:92:61:51:5C:12:D1:F2:05:08:52:BB:40:48:D5:82:09:D1 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584EFCACBFC9EBF0B50AEEE15600 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bf:c9:eb:f0:b5:0a:ee:e1:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=4dd374bf-e365-4d9d-9dd9-1c4f109b33cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:39:0a:83:22:0b:ee:c6:a3:c0:94:bd:72: 03:76:42:6f:ff:36:ce:43:24:1b:9e:31:d5:ef:d7: 90:d5:6a:86:90:b4:c6:f1:28:be:df:9e:40:e4:5e: cb:be:5f:7d:33:64:ff:49:2c:c6:14:ab:cd:ba:67: 31:83:19:06:e9:29:1b:94:be:96:fb:00:c1:a1:91: 9c:27:f0:bd:c1:d9:93:77:7d:28:a3:fc:a7:63:41: 60:63:67:8e:3d:f8:2d:08:4d:f3:81:32:92:3e:40: fd:79:0f:d6:83:d1:ed:cb:a1:ff:b2:4d:c8:12:59: b1:fc:35:1a:dc:c2:d1:c0:20:03:09:2d:10:9e:f2: 9e:51:5d:7b:d9:be:0b:c5:7e:22:6a:02:90:6a:bb: 8d:43:10:f4:83:bc:cd:d2:04:e1:c5:3b:cb:75:ec: 73:84:48:ad:24:17:93:c0:0d:35:05:bc:d8:34:ba: b3:d8:73:0d:1b:24:70:d2:65:57:2f:3b:f2:9e:63: a8:f5:8e:29:51:a2:50:0c:28:3b:e4:a3:34:5e:a6: 80:d5:b2:f4:ed:60:56:44:14:78:4b:6a:4f:78:f8: a7:48:00:d7:b4:3a:5b:28:ec:08:16:c8:74:ac:cb: 1e:c9:93:95:af:3a:9d:a8:bf:b6:bd:ec:07:5d:33: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:BE:92:61:51:5C:12:D1:F2:05:08:52:BB:40:48:D5:82:09:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b3:16:ec:ea:92:a6:0e:63:96:a9:3c:10:07:7f:3e:20:35: 60:19:64:db:cc:9c:24:8d:35:ee:25:f6:a2:ad:07:f7:72:72: c4:7f:59:7c:90:af:28:a4:54:cd:88:30:6d:c1:da:f4:c5:fe: 09:1e:44:00:ef:75:cc:24:e0:92:f9:1d:5b:c4:0f:16:07:35: 7b:ba:c2:3e:79:25:de:8d:4e:77:00:04:9a:e1:23:73:99:7f: 3e:3b:e6:0f:43:cb:ee:09:6c:f6:8c:70:17:c0:84:77:64:9e: 13:41:5f:06:cd:4e:7e:24:e1:c6:63:28:41:2a:da:6f:50:01: f8:23:bb:dd:f9:71:9f:04:58:0f:5f:82:a0:3d:6d:72:0d:fd: 74:c4:0d:55:7d:e9:49:aa:5d:b3:e4:5e:df:d6:3c:69:12:9b: 39:22:bd:0a:91:15:f0:8f:0f:9d:df:b6:12:5b:71:72:06:66: 09:96:3c:5c:f5:b3:f2:a4:ea:eb:97:03:6a:8a:10:f4:16:43: ac:fb:81:21:74:fb:79:93:2a:b6:81:01:f7:1d:5e:34:1e:66: f0:d1:88:f7:19:ef:a1:84:8d:4b:d0:2a:75:32:e1:37:10:11: 5c:e7:9e:a6:6d:67:3f:b7:43:1f:da:c9:87:52:aa:bc:49:be: 25:7b:99:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rL/J6/C1Cu7hVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NGRkMzc0YmYtZTM2NS00ZDlkLTlkZDktMWM0ZjEwOWIzM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y45CoMiC+7Go8CUvXIDdkJv/zbOQyQbnjHV 79eQ1WqGkLTG8Si+355A5F7Lvl99M2T/SSzGFKvNumcxgxkG6SkblL6W+wDBoZGc J/C9wdmTd30oo/ynY0FgY2eOPfgtCE3zgTKSPkD9eQ/Wg9Hty6H/sk3IElmx/DUa 3MLRwCADCS0QnvKeUV172b4LxX4iagKQaruNQxD0g7zN0gThxTvLdexzhEitJBeT wA01BbzYNLqz2HMNGyRw0mVXLzvynmOo9Y4pUaJQDCg75KM0XqaA1bL07WBWRBR4 S2pPePinSADXtDpbKOwIFsh0rMseyZOVrzqdqL+2vewHXTM97QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8kvpJhUVwS0fIFCFK7QEjVggnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZmVmMjBjNGQtYmYxYy0z ZThlLTgzZjItNzYzYmNkNmJhYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGzFuzqkqYOY5apPBAHfz4gNWAZZNvMnCSNNe4l9qKtB/dycsR/WXyQ ryikVM2IMG3B2vTF/gkeRADvdcwk4JL5HVvEDxYHNXu6wj55Jd6NTncABJrhI3OZ fz475g9Dy+4JbPaMcBfAhHdknhNBXwbNTn4k4cZjKEEq2m9QAfgju935cZ8EWA9f gqA9bXIN/XTEDVV96UmqXbPkXt/WPGkSmzkivQqRFfCPD53fthJbcXIGZgmWPFz1 s/Kk6uuXA2qKEPQWQ6z7gSF0+3mTKraBAfcdXjQeZvDRiPcZ76GEjUvQKnUy4TcQ EVznnqZtZz+3Qx/ayYdSqrxJviV7mWQ= -----END CERTIFICATE-----Generated at Tue Sep 22 22:27:09 2026 by rpki-client