$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa File: a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa (raw, json) Hash identifier: ad3xLMV5Lj92IE1x4MtHDp4EHzshZHFz7Oce93BuB54= Subject key identifier: 82:C6:31:38:C8:F7:81:16:60:21:19:7C:59:47:C8:60:A3:AD:D7:60 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AC016276A6BBD70EC8866ABA0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 147.124.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:27:6a:6b:bd:70:ec:88:66:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=2217e864-73cf-4420-987a-fa4f20c6883a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:b3:35:3e:f0:ec:96:39:e1:31:bd:2e:27: f8:85:df:ec:51:56:38:86:a9:90:ce:83:1b:3c:5b: cb:f8:32:fb:67:e9:37:e3:eb:5c:dd:b6:1e:f5:95: 16:98:d3:1f:43:ce:03:35:8f:36:0a:23:0f:1f:5e: a7:9c:b4:c6:91:e0:c3:13:95:21:40:6e:04:f8:c7: 1c:72:c9:3d:9a:3e:e5:a7:8d:4e:b2:7b:e3:f7:3f: 40:ba:f7:7d:89:94:3d:d1:d5:44:ee:70:ee:5a:94: cb:64:d7:ce:c9:25:3d:a4:c7:f0:bd:51:73:85:58: a2:c1:f1:66:cb:db:77:47:c9:83:df:3e:70:7c:ae: 48:80:11:28:1a:f2:e1:df:c1:42:28:be:e9:d2:b2: 0d:53:ee:d7:e9:34:a2:e1:e0:97:86:c5:4b:d4:ff: 96:50:87:6f:d4:68:9e:87:aa:f7:5c:41:a5:85:eb: 70:9b:99:64:23:22:34:d8:2e:e9:ec:19:1f:b5:fc: 57:62:bf:ff:2b:ec:42:9d:b2:06:e2:90:5f:9a:68: ac:51:8d:5d:83:1b:4d:a6:06:8a:91:bd:85:3b:4f: 3f:ef:7e:aa:fe:92:bd:60:70:df:e7:80:ba:a5:94: ee:6c:37:ef:83:64:4b:99:1e:a2:d7:ef:03:fc:d8: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C6:31:38:C8:F7:81:16:60:21:19:7C:59:47:C8:60:A3:AD:D7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b4:48:6f:76:67:26:41:9f:6a:5a:23:d5:d5:b9:92:b2:07: 60:58:41:e1:d2:83:b8:4f:f6:c5:9e:bc:d8:e1:0c:a4:b5:02: ef:44:35:5a:77:75:6b:2a:d4:40:7f:4c:ac:32:b1:14:f8:51: 45:5f:f2:f3:10:36:5d:8d:b2:6e:de:a8:54:d5:92:90:dc:b2: a2:e5:33:84:db:35:4e:a7:b3:cc:8e:03:6e:0f:40:05:d2:38: 4e:7d:12:cc:18:b7:34:af:61:ed:e9:74:d4:54:70:20:bf:76: 5f:63:68:c8:fb:6b:10:87:28:55:d3:26:32:f1:5b:b2:1e:eb: 8a:58:c4:93:24:7a:c5:ab:c1:8f:20:95:1a:ba:af:8d:37:2c: f9:f1:cc:57:1c:30:df:c0:49:d2:3d:57:88:a4:76:3d:17:80: a4:0e:04:5a:e7:6c:5b:c6:11:69:9e:d6:f7:67:6f:15:37:fa: be:c3:3c:69:64:be:ad:f1:90:48:f5:1c:ae:94:37:13:ed:27: 29:5e:5f:85:e2:a7:5f:f2:aa:90:6c:90:15:d4:20:f5:95:48: 73:dc:1a:d8:ea:72:d0:a7:b3:fe:a5:fb:bf:8b:e7:2c:5c:68: 30:f1:85:03:e5:f7:e0:fb:ec:1c:99:59:62:99:fa:ab:e7:64: f3:9f:e1:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFidqa71w7Ihmq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MjIxN2U4NjQtNzNjZi00NDIwLTk4N2EtZmE0ZjIwYzY4ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmazNT7w7JY54TG9Lif4hd/sUVY4hqmQzoMb PFvL+DL7Z+k34+tc3bYe9ZUWmNMfQ84DNY82CiMPH16nnLTGkeDDE5UhQG4E+Mcc csk9mj7lp41Osnvj9z9Auvd9iZQ90dVE7nDuWpTLZNfOySU9pMfwvVFzhViiwfFm y9t3R8mD3z5wfK5IgBEoGvLh38FCKL7p0rINU+7X6TSi4eCXhsVL1P+WUIdv1Gie h6r3XEGlhetwm5lkIyI02C7p7BkftfxXYr//K+xCnbIG4pBfmmisUY1dgxtNpgaK kb2FO08/736q/pK9YHDf54C6pZTubDfvg2RLmR6i1+8D/NiwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILGMTjI94EWYCEZfFlHyGCjrddgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYTY3ZGMyNWYtZGQzZi0z NTFiLTg2ZDMtMWMzNDdiNThiZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG0SG92ZyZBn2paI9XVuZKyB2BYQeHSg7hP9sWevNjhDKS1Au9ENVp3 dWsq1EB/TKwysRT4UUVf8vMQNl2Nsm7eqFTVkpDcsqLlM4TbNU6ns8yOA24PQAXS OE59EswYtzSvYe3pdNRUcCC/dl9jaMj7axCHKFXTJjLxW7Ie64pYxJMkesWrwY8g lRq6r403LPnxzFccMN/ASdI9V4ikdj0XgKQOBFrnbFvGEWme1vdnbxU3+r7DPGlk vq3xkEj1HK6UNxPtJyleX4Xip1/yqpBskBXUIPWVSHPcGtjqctCns/6l+7+L5yxc aDDxhQPl9+D77ByZWWKZ+qvnZPOf4aY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:24 2025 by rpki-client