$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa File: fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa (raw, json) Hash identifier: 6nqML7PD4rBd7xU6/FoEFlF5Jz6crVBcZo6QI352SAU= Subject key identifier: 7C:D8:B0:FA:9E:0C:EF:26:A3:52:AD:CB:93:F3:35:96:EC:4A:F4:7A Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584BB88D1051D222382F027DD2B0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:10:51:d2:22:38:2f:02:7d:d2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=5061a4d8-ee31-4b58-8f9a-c50856d650a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4a:6d:73:02:c9:ef:ef:72:03:4b:e0:98:c3: e3:f0:15:f8:64:f6:f3:b7:6e:ba:59:5d:3e:a3:a5: b6:b1:54:e7:43:7a:fe:9c:ce:0b:5c:cc:35:a0:ab: 5c:0c:99:ba:4e:55:6d:da:d6:48:33:40:6d:c1:78: 6f:15:7a:cc:d3:43:f8:ea:95:2a:0f:fe:e5:43:fc: 7a:5e:f4:d0:e7:41:dc:80:21:df:ce:30:a6:c8:0b: cd:d1:b4:6b:04:e3:0b:cd:03:e6:c4:ce:f1:05:0e: 79:9f:c0:bc:5f:da:03:b8:f1:88:20:44:a0:40:b1: e2:2e:b8:af:24:1a:37:24:de:cf:2b:33:7c:c2:cb: d3:b3:45:5c:bd:71:9a:70:42:58:a8:d4:be:d4:a5: 40:43:3b:e2:61:36:63:ca:4a:30:ea:51:10:e4:d5: 2a:15:1b:61:4e:47:c7:7b:fd:9b:00:c9:7d:b9:0b: d0:b5:c1:9b:af:33:c4:2b:20:e4:23:70:42:90:3c: 08:c1:97:88:53:7b:91:89:1c:eb:01:3c:ca:24:a2: 94:4d:8b:c4:8d:06:30:95:37:31:79:7b:f2:f2:ee: 20:27:cf:93:ec:e4:93:90:98:3a:ae:a0:37:a4:af: ec:e9:b1:12:27:a8:e4:b3:79:70:aa:fb:1e:10:f8: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D8:B0:FA:9E:0C:EF:26:A3:52:AD:CB:93:F3:35:96:EC:4A:F4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:20:51:4b:b2:18:ea:e7:c6:fe:ad:55:cc:d0:90:65:f8:d9: c4:37:0b:35:ac:ae:8c:39:48:79:d7:d4:96:0e:c0:72:83:53: 75:49:af:3b:2d:11:43:d9:17:c4:1c:c4:d7:ed:71:ea:4d:3f: 79:37:2c:ad:37:fe:6e:be:61:0b:9b:81:fa:5a:21:5d:d3:c9: ca:e7:c3:2e:34:c1:b1:e9:fb:99:a4:04:7f:0c:33:61:45:ff: b8:b9:20:b8:24:99:04:1a:53:3f:d5:7b:0f:15:a7:f6:d3:58: f4:48:95:76:2d:b0:18:d7:66:ed:36:91:c4:c8:c3:f8:1c:74: b0:42:d7:b4:f3:42:07:d3:48:75:5d:e1:a0:0d:8e:bf:9d:13: 18:20:02:1f:b5:35:99:3b:55:98:9a:b5:94:90:07:4b:80:80: bd:52:0d:5c:10:6d:44:aa:58:70:b7:3b:3a:dc:c0:21:57:85: 3d:a4:37:cb:5c:6b:5b:12:8f:7a:61:7a:82:06:e2:9f:ce:a8: 28:94:e6:f4:fe:fd:3a:b1:61:d4:f3:0a:d8:22:d1:d5:7b:82: fb:22:9b:b1:40:64:c0:58:70:c5:65:05:7a:9c:e3:0b:2a:92: b7:bd:29:95:e2:3b:77:a8:ab:89:bd:56:c5:37:db:d0:78:fe: 5c:d8:d5:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRBR0iI4LwJ90rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTA2MWE0ZDgtZWUzMS00YjU4LThmOWEtYzUwODU2ZDY1MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUptcwLJ7+9yA0vgmMPj8BX4ZPbzt266WV0+ o6W2sVTnQ3r+nM4LXMw1oKtcDJm6TlVt2tZIM0BtwXhvFXrM00P46pUqD/7lQ/x6 XvTQ50HcgCHfzjCmyAvN0bRrBOMLzQPmxM7xBQ55n8C8X9oDuPGIIESgQLHiLriv JBo3JN7PKzN8wsvTs0VcvXGacEJYqNS+1KVAQzviYTZjykow6lEQ5NUqFRthTkfH e/2bAMl9uQvQtcGbrzPEKyDkI3BCkDwIwZeIU3uRiRzrATzKJKKUTYvEjQYwlTcx eXvy8u4gJ8+T7OSTkJg6rqA3pK/s6bESJ6jks3lwqvseEPj5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzYsPqeDO8mo1Kty5PzNZbsSvR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZmVmMjBjNGQtYmYxYy0z ZThlLTgzZjItNzYzYmNkNmJhYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEgUUuyGOrnxv6tVczQkGX42cQ3CzWsrow5SHnX1JYOwHKDU3VJrzst EUPZF8QcxNftcepNP3k3LK03/m6+YQubgfpaIV3Tycrnwy40wbHp+5mkBH8MM2FF /7i5ILgkmQQaUz/Vew8Vp/bTWPRIlXYtsBjXZu02kcTIw/gcdLBC17TzQgfTSHVd 4aANjr+dExggAh+1NZk7VZiatZSQB0uAgL1SDVwQbUSqWHC3OzrcwCFXhT2kN8tc a1sSj3pheoIG4p/OqCiU5vT+/TqxYdTzCtgi0dV7gvsim7FAZMBYcMVlBXqc4wsq kre9KZXiO3eoq4m9VsU329B4/lzY1dk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:30:55 2025 by rpki-client