$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa File: 880de72b-888b-3dde-b1b4-c86038197a8a.roa (raw, json) Hash identifier: 8YNmc+2q0DLrmSqWoeq9QhXjwJb1WV21Lvh4ttNH4E4= Subject key identifier: CF:63:9D:07:61:C8:81:78:B9:82:EF:49:48:4B:74:E2:7A:E2:9E:FE Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584F498BC74F3865440A11F8B040 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 147.124.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:c7:4f:38:65:44:0a:11:f8:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=982f0a95-49b2-4bcf-bf42-90fcdc31c1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:5a:a9:b1:1f:d7:e6:1a:aa:91:97:6d:83: 94:20:3f:46:13:bd:2b:9f:93:02:16:18:a4:b0:e4: e9:e1:c3:01:c4:c4:dc:ba:d5:6c:98:bc:ca:67:6f: b9:08:dc:16:36:49:9d:a9:fa:4e:ad:6a:70:e9:bd: 93:9b:1e:97:4a:fc:31:9e:2d:cb:ef:78:a1:f7:3c: 68:65:66:16:02:fc:c1:3c:33:81:72:07:fe:99:85: 2e:cb:49:c4:92:e1:7a:22:46:f6:ce:57:9d:d3:83: 56:14:f6:e6:3d:46:78:a2:64:19:40:bc:84:75:ae: 8f:7c:07:e2:a9:78:90:40:64:b0:70:39:3f:fe:ff: 5a:43:64:7d:ba:a9:1c:42:28:97:73:a3:07:b9:1b: 99:51:84:9f:c0:72:a4:c0:55:e7:f9:9b:f1:25:9b: 18:d0:9a:0d:3c:f5:08:11:13:80:5e:08:0d:9e:16: 38:43:1b:de:80:78:7a:16:22:37:0c:ea:71:b5:ce: 7f:1a:6e:1b:a7:1f:81:63:34:10:05:ce:68:06:9e: 61:27:b6:e3:ca:9a:fa:b0:99:42:2b:1d:5e:03:3b: b9:d5:89:ac:ff:ad:01:b4:70:e9:fa:de:d8:cd:20: 2c:e9:3e:57:79:58:de:19:63:ef:09:1d:b9:8f:99: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:63:9D:07:61:C8:81:78:B9:82:EF:49:48:4B:74:E2:7A:E2:9E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:22:5f:05:39:29:66:81:14:c1:76:5d:95:dc:eb:a8:8f:73: 72:4b:c3:78:53:f7:58:e0:c3:19:54:ac:ef:55:26:b5:10:f3: d4:3c:6c:f7:1f:c0:2d:9b:0b:d5:57:7b:b3:bf:ac:50:92:88: 96:8c:ba:4a:fb:67:c6:52:f2:d1:4f:f6:03:bd:59:34:23:93: 58:64:55:10:50:8a:59:76:04:31:a7:fa:73:23:96:07:c4:85: 8a:f9:cd:2c:54:99:a9:28:8d:96:47:70:19:5c:9b:6a:4a:e2: a9:63:eb:a9:fb:aa:e6:c6:af:2e:53:35:8a:c0:53:5b:9e:33: e1:be:4a:fb:9a:14:f9:1f:34:55:e3:f6:b4:14:b8:2d:5d:35: 59:f7:b1:ed:9c:0d:99:d7:2c:97:6a:e7:32:57:5d:e1:71:da: b2:46:4f:f6:ce:10:c6:a8:51:a9:37:c3:00:14:1d:9b:7d:7f: 5b:44:6e:ce:68:34:f0:ab:2a:80:b2:93:93:b0:2a:35:b8:99: 61:fa:98:37:9c:ca:95:e5:af:31:a8:b7:73:b9:ba:fd:e1:5e: f8:76:c8:d7:9e:91:37:52:5e:8a:b3:07:69:f5:db:71:47:06: fa:df:26:24:14:79:00:51:d7:f7:b6:cb:d6:4d:40:25:ca:1c: b1:18:aa:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji8dPOGVEChH4sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTgyZjBhOTUtNDliMi00YmNmLWJmNDItOTBmY2RjMzFjMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJaqbEf1+YaqpGXbYOUID9GE70rn5MCFhik sOTp4cMBxMTcutVsmLzKZ2+5CNwWNkmdqfpOrWpw6b2Tmx6XSvwxni3L73ih9zxo ZWYWAvzBPDOBcgf+mYUuy0nEkuF6Ikb2zled04NWFPbmPUZ4omQZQLyEda6PfAfi qXiQQGSwcDk//v9aQ2R9uqkcQiiXc6MHuRuZUYSfwHKkwFXn+ZvxJZsY0JoNPPUI EROAXggNnhY4QxvegHh6FiI3DOpxtc5/Gm4bpx+BYzQQBc5oBp5hJ7bjypr6sJlC Kx1eAzu51Yms/60BtHDp+t7YzSAs6T5XeVjeGWPvCR25j5kbtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9jnQdhyIF4uYLvSUhLdOJ64p7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvODgwZGU3MmItODg4Yi0z ZGRlLWIxYjQtYzg2MDM4MTk3YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYiXwU5KWaBFMF2XZXc66iPc3JLw3hT91jgwxlUrO9VJrUQ89Q8bPcf wC2bC9VXe7O/rFCSiJaMukr7Z8ZS8tFP9gO9WTQjk1hkVRBQill2BDGn+nMjlgfE hYr5zSxUmakojZZHcBlcm2pK4qlj66n7qubGry5TNYrAU1ueM+G+SvuaFPkfNFXj 9rQUuC1dNVn3se2cDZnXLJdq5zJXXeFx2rJGT/bOEMaoUak3wwAUHZt9f1tEbs5o NPCrKoCyk5OwKjW4mWH6mDecypXlrzGot3O5uv3hXvh2yNeekTdSXoqzB2n123FH BvrfJiQUeQBR1/e2y9ZNQCXKHLEYqmg= -----END CERTIFICATE-----Generated at Sat Sep 26 10:41:10 2026 by rpki-client