$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa File: c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa (raw, json) Hash identifier: 72M+yvQXuPLNTRRFAAlX92ok9LUhONfdhhzsCNjEDgM= Subject key identifier: D8:E9:F1:D1:7A:CE:FA:57:8A:48:B0:77:AF:11:4E:B9:41:AD:F6:A1 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584E736A1C8786A998EDE4271B00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 147.124.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1c:87:86:a9:98:ed:e4:27:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=6d4134f4-4e32-4965-8a8f-e77257e00f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:e0:25:5a:f7:05:58:f7:71:b7:99:c1:78: 72:95:cd:d1:3f:59:73:36:ab:b8:32:4a:28:c6:27: fa:58:c6:29:f1:94:42:5a:85:f7:a7:00:eb:b7:b9: f2:2c:c2:20:35:6d:bf:b2:2e:a9:1d:44:b5:70:29: 9a:71:a8:56:b4:5f:c5:dd:ed:d1:2c:de:b0:69:3e: a9:c0:e6:95:92:3f:3a:fe:32:db:3b:53:c8:76:78: 66:2f:52:5b:46:d7:ca:a0:9c:4a:cd:79:44:6a:b3: 76:2c:2f:46:df:84:23:95:85:72:0d:63:78:82:9d: d1:79:1b:c5:b7:c5:50:30:8a:78:3b:9e:aa:2f:c4: ef:0a:54:71:0b:3d:17:13:da:88:bd:f7:05:ea:2e: 07:ad:29:42:f0:9c:b5:56:6c:23:2f:b7:aa:11:8a: 94:29:b6:70:f8:87:bb:3a:6b:45:b3:31:b3:1a:06: dd:4d:64:bb:c2:a2:b2:de:11:b2:92:74:20:26:db: 0b:9d:68:39:5f:db:96:08:b9:56:48:4c:ac:ac:5f: 2f:b4:01:f6:bb:3c:24:2a:64:ae:b8:00:01:11:4d: 25:3f:2e:56:6d:7c:5c:e3:04:45:2d:28:26:97:09: 52:9f:03:19:76:bd:5d:80:90:40:9c:6e:a4:07:60: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:F1:D1:7A:CE:FA:57:8A:48:B0:77:AF:11:4E:B9:41:AD:F6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4a:71:fc:ce:71:bd:38:75:83:39:5a:85:87:62:fc:73:f5: 67:4e:09:ab:72:d0:27:7d:e9:cb:ff:c4:7e:54:d0:63:46:79: 1e:72:ed:18:59:e6:3a:ad:e2:c5:ef:8e:5c:68:bc:ab:08:40: 89:b5:b4:50:42:a2:fd:61:d6:23:f6:b0:89:29:8f:3d:45:27: 0e:85:be:14:f5:c0:be:0c:2f:d8:2d:82:f0:95:e4:86:71:56: 87:37:c2:37:77:94:a9:26:a9:c2:fe:a2:95:43:62:d8:dd:16: 64:af:83:6e:92:85:47:b1:31:a7:bf:af:f1:e5:60:69:cd:03: 7e:07:7a:2a:03:5b:d6:b5:e3:20:7c:84:0a:7d:2d:b1:7e:7b: cc:c5:e8:73:56:58:3b:48:65:c0:7f:bd:5e:59:7b:38:0e:e6: 01:bb:58:d0:f0:f2:18:db:58:11:97:ac:a0:5e:49:5a:74:28: 67:b9:6b:88:ca:e0:87:19:79:28:a9:d7:38:f6:09:cb:1b:94: e2:cd:2d:a9:0e:10:2e:23:c4:b8:8e:05:bc:fb:fe:07:43:de: 01:4e:36:28:da:f0:96:8d:77:a2:40:33:de:2d:ce:32:18:32: 26:0e:81:20:fe:08:3c:32:d2:fa:73:e6:a6:c7:e3:71:41:a9: 9e:10:77:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zahyHhqmY7eQnGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk NmQ0MTM0ZjQtNGUzMi00OTY1LThhOGYtZTc3MjU3ZTAwZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOngJVr3BVj3cbeZwXhylc3RP1lzNqu4Mkoo xif6WMYp8ZRCWoX3pwDrt7nyLMIgNW2/si6pHUS1cCmacahWtF/F3e3RLN6waT6p wOaVkj86/jLbO1PIdnhmL1JbRtfKoJxKzXlEarN2LC9G34QjlYVyDWN4gp3ReRvF t8VQMIp4O56qL8TvClRxCz0XE9qIvfcF6i4HrSlC8Jy1VmwjL7eqEYqUKbZw+Ie7 OmtFszGzGgbdTWS7wqKy3hGyknQgJtsLnWg5X9uWCLlWSEysrF8vtAH2uzwkKmSu uAABEU0lPy5WbXxc4wRFLSgmlwlSnwMZdr1dgJBAnG6kB2B9sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjp8dF6zvpXikiwd68RTrlBrfahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYzYwY2FhZWItNGQ2ZC0z ZTdkLTg1NDMtZDg3NDNmMzNmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZKcfzOcb04dYM5WoWHYvxz9WdOCaty0Cd96cv/xH5U0GNGeR5y7RhZ 5jqt4sXvjlxovKsIQIm1tFBCov1h1iP2sIkpjz1FJw6FvhT1wL4ML9gtgvCV5IZx Voc3wjd3lKkmqcL+opVDYtjdFmSvg26ShUexMae/r/HlYGnNA34HeioDW9a14yB8 hAp9LbF+e8zF6HNWWDtIZcB/vV5ZezgO5gG7WNDw8hjbWBGXrKBeSVp0KGe5a4jK 4IcZeSip1zj2CcsblOLNLakOEC4jxLiOBbz7/gdD3gFONija8JaNd6JAM94tzjIY MiYOgSD+CDwy0vpz5qbH43FBqZ4Qd0g= -----END CERTIFICATE-----Generated at Fri Jul 24 04:39:55 2026 by rpki-client