$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa File: d1caff1b-70a2-3f40-9325-7d12bd836408.roa (raw, json) Hash identifier: VpILV1UQATgXiIyPuTjUGUOAIK1toO+7NHOl7/+y9So= Subject key identifier: 4D:A4:03:00:46:3B:D8:32:DE:F3:45:89:8F:F7:68:9C:87:EE:6C:AC Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584EED52174360CD4FC71A609960 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 396982 IP address blocks: 147.124.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:17:43:60:cd:4f:c7:1a:60:99:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=94211afc-e195-4402-a49f-b78475125c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:df:2c:22:57:59:a1:1a:c8:62:55:f2:f6: f2:e2:55:1c:7f:f7:54:ca:ac:03:06:11:38:0d:42: c7:e6:82:d3:e4:36:1a:65:b1:2d:85:ee:06:d0:49: 4a:02:18:28:d7:3b:99:f9:bb:da:74:0a:5d:0e:1f: fb:60:e9:32:cd:41:db:46:68:9c:59:10:a7:8e:67: d0:74:89:f3:07:38:3b:fb:31:8a:b7:98:9d:e2:51: 9d:62:8e:2f:8f:6d:40:0b:4c:39:b2:d3:35:36:ae: be:79:96:50:68:9f:c7:7a:61:5a:7c:ab:3d:31:89: cc:02:5f:60:52:54:52:50:de:80:d7:2d:52:68:18: 03:e2:5f:e7:d0:bf:5d:99:84:4f:b8:1b:c2:70:5c: f7:a4:f9:9c:ef:7a:2f:cb:75:db:85:a3:b6:94:37: b1:30:2a:a0:e9:19:dc:ad:70:b0:ea:0b:21:2c:6e: 0c:69:c4:82:3f:1f:70:77:d1:4f:95:ed:4c:44:1b: 3a:59:e1:74:02:f5:3c:12:35:2e:94:a3:ab:77:da: 87:1e:e9:53:ac:49:60:03:bc:7d:3a:90:aa:96:a8: 13:7d:16:b6:0b:be:22:81:51:96:6f:c5:70:37:f3: f3:39:7d:fb:64:4e:2d:af:9e:6e:8e:e6:5b:62:49: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A4:03:00:46:3B:D8:32:DE:F3:45:89:8F:F7:68:9C:87:EE:6C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:dd:e8:fe:04:08:ef:2b:8f:d3:26:00:8b:29:8d:1a:4a:97: 33:b2:26:75:d2:6a:2a:c4:06:08:0a:65:6b:95:f5:5b:14:b6: 57:d1:dd:bc:ab:2f:48:b1:6b:c0:c3:d2:ff:45:7a:58:26:20: d2:8a:9c:86:21:03:c5:a2:57:4f:f2:8a:38:12:62:18:60:b0: 0c:23:de:0a:e0:73:00:21:51:e5:20:59:55:26:7b:6a:47:d6: 07:74:a7:cc:fc:78:71:7a:41:ff:38:d6:d2:68:34:f8:61:99: f6:d8:dc:a3:00:51:79:07:73:b0:b5:63:ed:23:77:7f:7e:8f: 4d:0d:fd:89:c4:73:9f:97:83:27:92:3c:10:ab:56:6f:15:a6: cd:3c:47:17:73:7c:e4:25:1d:3a:1d:98:13:15:2b:da:fe:48: 10:a9:b0:cb:38:00:ab:12:6d:b4:db:70:47:4f:fa:e8:6c:0e: eb:1c:cc:08:38:3e:35:9c:c7:49:8e:49:d6:83:ab:a7:16:fe: 1b:fe:f1:57:ef:4b:10:84:77:94:99:72:6b:16:64:4b:e6:d1: de:8c:45:ab:10:34:7d:90:bd:64:35:10:4d:85:be:88:3f:b6: b5:1b:b1:e2:6d:7c:39:07:54:ec:b4:a1:5b:5e:b3:2e:55:c8: a0:21:dc:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhdDYM1PxxpgmWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OTQyMTFhZmMtZTE5NS00NDAyLWE0OWYtYjc4NDc1MTI1YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhebfLCJXWaEayGJV8vby4lUcf/dUyqwDBhE4 DULH5oLT5DYaZbEthe4G0ElKAhgo1zuZ+bvadApdDh/7YOkyzUHbRmicWRCnjmfQ dInzBzg7+zGKt5id4lGdYo4vj21AC0w5stM1Nq6+eZZQaJ/HemFafKs9MYnMAl9g UlRSUN6A1y1SaBgD4l/n0L9dmYRPuBvCcFz3pPmc73ovy3XbhaO2lDexMCqg6Rnc rXCw6gshLG4MacSCPx9wd9FPle1MRBs6WeF0AvU8EjUulKOrd9qHHulTrElgA7x9 OpCqlqgTfRa2C74igVGWb8VwN/PzOX37ZE4tr55ujuZbYklacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2kAwBGO9gy3vNFiY/3aJyH7mysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDFjYWZmMWItNzBhMi0z ZjQwLTkzMjUtN2QxMmJkODM2NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATd6P4ECO8rj9MmAIspjRpKlzOyJnXSairEBggKZWuV9VsUtlfR3byr L0ixa8DD0v9FelgmINKKnIYhA8WiV0/yijgSYhhgsAwj3grgcwAhUeUgWVUme2pH 1gd0p8z8eHF6Qf841tJoNPhhmfbY3KMAUXkHc7C1Y+0jd39+j00N/YnEc5+XgyeS PBCrVm8Vps08RxdzfOQlHTodmBMVK9r+SBCpsMs4AKsSbbTbcEdP+uhsDusczAg4 PjWcx0mOSdaDq6cW/hv+8VfvSxCEd5SZcmsWZEvm0d6MRasQNH2QvWQ1EE2Fvog/ trUbseJtfDkHVOy0oVtesy5VyKAh3Gs= -----END CERTIFICATE-----Generated at Sun Sep 27 15:01:56 2026 by rpki-client