$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa File: fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa (raw, json) Hash identifier: 26Ds/qPoTqUjJ1Ks37l/g9FWzYC45fhwRCc1FqfmFlo= Subject key identifier: 1F:15:BD:BD:86:6A:F3:BD:2A:EB:4B:94:0A:B2:70:29:D3:59:26:35 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D7A051F7D927D8A7B5AF1E700 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1f:7d:92:7d:8a:7b:5a:f1:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=fb53f11f-685e-43d6-9456-e4c0de2898a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:73:cc:78:4f:52:49:a9:35:fc:e0:06:b8: fa:a1:42:db:6c:6f:30:7f:9f:9e:0a:23:12:e5:62: 1b:8a:ac:d8:6a:ee:c3:ff:cb:36:3a:bd:ee:33:4a: f2:3f:97:a7:fc:5e:00:70:7f:0b:05:2d:ed:3e:3d: 3b:bc:6a:7a:05:c2:09:73:92:fc:41:ca:a4:62:4c: 37:14:73:36:e1:f0:3d:ea:65:37:1c:0f:13:18:b3: e4:b4:7e:63:27:a4:82:3c:85:6e:f7:4d:df:f3:80: 4f:1d:1d:b5:5f:6f:33:b8:37:95:56:b8:f3:ac:90: e3:fe:95:8e:7b:8b:1d:84:f9:3d:5f:b1:04:c7:2e: ff:2d:b5:c6:96:86:4c:5e:71:e2:80:d9:00:c6:3b: e9:39:86:8c:39:e9:71:56:3f:fd:83:b0:73:ac:fc: 9d:2e:f5:8c:5e:bf:24:62:03:1c:a8:a0:dd:ad:55: c1:11:e3:bf:56:15:5a:e4:31:51:8e:6b:20:8f:db: 9e:6f:e9:09:ed:66:a8:9e:a2:68:4b:c3:fd:90:f4: 71:cc:d4:f2:16:1a:92:b3:a8:65:8d:9c:ef:56:c6: 91:d1:eb:f3:e4:6d:f0:53:0f:38:fc:4e:a4:9d:bd: 2f:e8:c9:1b:de:f6:86:26:fb:c4:b5:ae:0c:ef:3a: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:15:BD:BD:86:6A:F3:BD:2A:EB:4B:94:0A:B2:70:29:D3:59:26:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f1:99:f9:c0:97:c6:9e:79:b9:47:79:11:0b:21:17:04:62: 26:7a:cd:ea:1f:12:bb:ad:35:f4:be:dc:ff:d2:92:04:30:15: cf:ef:a1:d9:32:69:f7:9a:26:34:02:31:89:00:07:79:fa:d5: c9:56:1b:7b:9b:0c:97:e5:41:31:08:32:fb:15:64:af:4c:dc: 29:58:80:89:94:e8:aa:e7:d6:f4:5c:20:41:8f:18:6e:f3:1b: b2:84:16:54:ca:15:d6:12:ad:45:2a:0f:fd:db:1a:af:10:ae: ae:bf:20:a8:2f:6f:ca:4a:89:56:f3:43:d8:ab:26:80:7e:63: 7d:ba:f9:9f:0f:c7:91:4b:3c:86:72:0e:37:3e:07:a0:e7:44: 82:1b:70:75:84:dc:d3:9d:b7:1d:cb:ba:0b:93:a3:1f:3f:32: d2:34:6c:e8:3d:76:18:c6:62:02:1d:52:4f:27:f6:90:37:eb: a0:d8:c3:72:6b:2c:5a:e4:86:45:a8:37:fe:6f:8e:ed:72:7d: 2b:63:23:a1:ef:92:93:c6:fc:0a:34:40:b8:30:05:48:d6:ba: 83:ce:3a:fe:d6:f2:55:ec:89:a1:ba:7a:a0:14:8b:db:05:0a: bc:47:6b:43:a0:6e:56:62:57:75:9c:58:eb:f0:10:19:71:2d: 8a:f5:56:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BR99kn2Ke1rx5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZmI1M2YxMWYtNjg1ZS00M2Q2LTk0NTYtZTRjMGRlMjg5OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz85zzHhPUkmpNfzgBrj6oULbbG8wf5+eCiMS 5WIbiqzYau7D/8s2Or3uM0ryP5en/F4AcH8LBS3tPj07vGp6BcIJc5L8QcqkYkw3 FHM24fA96mU3HA8TGLPktH5jJ6SCPIVu903f84BPHR21X28zuDeVVrjzrJDj/pWO e4sdhPk9X7EExy7/LbXGloZMXnHigNkAxjvpOYaMOelxVj/9g7BzrPydLvWMXr8k YgMcqKDdrVXBEeO/VhVa5DFRjmsgj9ueb+kJ7WaonqJoS8P9kPRxzNTyFhqSs6hl jZzvVsaR0evz5G3wUw84/E6knb0v6Mkb3vaGJvvEta4M7zrJoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8Vvb2GavO9KutLlAqycCnTWSY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZmVmMjBjNGQtYmYxYy0z ZThlLTgzZjItNzYzYmNkNmJhYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLxmfnAl8aeeblHeRELIRcEYiZ6zeofErutNfS+3P/SkgQwFc/vodky afeaJjQCMYkAB3n61clWG3ubDJflQTEIMvsVZK9M3ClYgImU6Krn1vRcIEGPGG7z G7KEFlTKFdYSrUUqD/3bGq8Qrq6/IKgvb8pKiVbzQ9irJoB+Y326+Z8Px5FLPIZy Djc+B6DnRIIbcHWE3NOdtx3LuguTox8/MtI0bOg9dhjGYgIdUk8n9pA366DYw3Jr LFrkhkWoN/5vju1yfStjI6HvkpPG/Ao0QLgwBUjWuoPOOv7W8lXsiaG6eqAUi9sF CrxHa0OgblZiV3WcWOvwEBlxLYr1Vsw= -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:20 2026 by rpki-client