$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa File: 69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa (raw, json) Hash identifier: CFxR2wT0DI6Fms2JxyeIL4YTYkPC+Rn1k6v66Nji+CI= Subject key identifier: 48:63:81:06:7F:22:C2:D6:4C:01:67:76:11:F0:DA:B0:E3:E9:F6:61 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584D9A200D25CAD7353A46EBE7C0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 14618 IP address blocks: 147.124.164.0/24 maxlen: 24 147.124.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0d:25:ca:d7:35:3a:46:eb:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=bb8844b3-fe61-4fd8-b7fe-a03acb4a4980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:fb:5a:59:e4:6e:70:b6:57:89:11:f1:dc: ca:11:34:be:2d:02:dd:07:a7:f5:a6:89:18:30:37: 20:1a:91:ae:a8:55:f3:c6:b3:10:b6:62:69:71:e3: 15:2a:e7:54:65:39:7a:00:fe:94:4c:53:59:bb:2b: 6d:47:82:79:69:a4:c4:1e:61:2d:f8:33:c5:b3:dc: 14:57:e0:37:65:57:d1:3e:43:74:5c:06:a9:ae:6f: d7:96:b7:1c:bb:94:9a:3c:f6:6d:98:81:7e:37:04: 9a:6a:dd:3a:ef:d2:dc:3f:bd:e7:72:3b:a7:eb:31: 87:9e:f4:4d:58:e2:bc:eb:70:9f:b0:9c:7e:07:13: 05:96:44:eb:1f:53:67:ed:59:a3:b3:01:b7:5b:d3: 36:9f:21:58:33:b9:87:48:46:5d:9c:fa:2e:6e:c9: b9:58:70:0c:80:5f:b7:17:d4:7c:fe:47:5d:ba:23: 7c:06:a5:92:c0:51:f7:43:f5:5f:94:04:22:38:0c: 41:1b:46:89:0a:c6:42:f6:3c:96:ff:8f:d6:38:ec: 8e:f7:e0:be:15:4e:37:36:c9:9c:ef:78:07:d0:6b: 0b:5a:d8:0c:d4:1a:0e:44:cf:e2:fa:9c:4c:14:0d: ae:38:67:24:4a:ca:ee:b2:1f:26:2c:55:e0:61:73: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:63:81:06:7F:22:C2:D6:4C:01:67:76:11:F0:DA:B0:E3:E9:F6:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/69eb5bd6-ddbb-3338-8851-eb5b7ab3f829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:49:58:e1:2b:e5:15:f4:3e:48:5f:a1:71:7f:bf:3f:92:8e: 15:43:75:84:c7:6f:a4:95:e4:10:2c:10:a2:3f:df:21:cc:93: 62:a8:8b:19:a9:f3:54:23:ae:a0:7f:9e:57:12:db:24:c9:16: 0e:ba:b2:c2:5b:aa:8c:5c:27:f4:71:e4:47:e6:7b:a5:82:1a: b1:16:af:7b:7d:72:a0:f6:6d:c8:c4:a0:9b:28:58:95:69:7c: 6c:bb:c1:33:b8:53:52:a0:14:7b:5f:d0:df:95:77:fc:da:89: e1:8b:34:e5:1a:84:96:86:23:8e:f6:11:e4:21:aa:1d:20:c3: f6:6f:f2:35:c2:7b:4d:af:5e:c2:1a:6d:5b:04:56:f4:d8:15: f2:9b:14:ab:f1:7f:40:27:98:db:cd:ef:2a:9c:5c:8d:44:03: ec:8b:46:9d:be:54:8c:d2:2e:93:46:16:b2:d8:9f:5f:e5:4c: 2e:b5:5e:c0:1d:a6:e7:c9:51:17:9a:ac:19:a8:e8:58:54:93: 33:83:30:06:f6:5c:96:e8:83:26:ca:b8:cb:42:c6:d2:2d:e5: 80:cc:d8:af:f4:57:52:3e:80:bc:e9:ac:61:f7:10:82:c2:ca: 7a:8d:cc:e0:94:69:de:bc:6a:23:3a:26:f3:6c:6e:47:a0:f8: 06:73:36:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIA0lytc1Okbr58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YmI4ODQ0YjMtZmU2MS00ZmQ4LWI3ZmUtYTAzYWNiNGE0OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT77WlnkbnC2V4kR8dzKETS+LQLdB6f1pokY MDcgGpGuqFXzxrMQtmJpceMVKudUZTl6AP6UTFNZuyttR4J5aaTEHmEt+DPFs9wU V+A3ZVfRPkN0XAaprm/Xlrccu5SaPPZtmIF+NwSaat0679LcP73ncjun6zGHnvRN WOK863CfsJx+BxMFlkTrH1Nn7VmjswG3W9M2nyFYM7mHSEZdnPoubsm5WHAMgF+3 F9R8/kdduiN8BqWSwFH3Q/VflAQiOAxBG0aJCsZC9jyW/4/WOOyO9+C+FU43Nsmc 73gH0GsLWtgM1BoORM/i+pxMFA2uOGckSsrush8mLFXgYXOeBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhjgQZ/IsLWTAFndhHw2rDj6fZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNjllYjViZDYtZGRiYi0z MzM4LTg4NTEtZWI1YjdhYjNmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3ykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFJWOEr5RX0PkhfoXF/vz+SjhVDdYTHb6SV5BAsEKI/3yHMk2Koixmp 81QjrqB/nlcS2yTJFg66ssJbqoxcJ/Rx5Efme6WCGrEWr3t9cqD2bcjEoJsoWJVp fGy7wTO4U1KgFHtf0N+Vd/zaieGLNOUahJaGI472EeQhqh0gw/Zv8jXCe02vXsIa bVsEVvTYFfKbFKvxf0AnmNvN7yqcXI1EA+yLRp2+VIzSLpNGFrLYn1/lTC61XsAd pufJURearBmo6FhUkzODMAb2XJbogybKuMtCxtIt5YDM2K/0V1I+gLzprGH3EILC ynqNzOCUad68aiM6JvNsbkeg+AZzNsQ= -----END CERTIFICATE-----Generated at Wed May 13 11:07:40 2026 by rpki-client