$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa File: d1caff1b-70a2-3f40-9325-7d12bd836408.roa (raw, json) Hash identifier: 0ze9MTvcqiDNoArm2F1zCIlfBg6g6qvTjF7p/zZjm5U= Subject key identifier: ED:E9:8E:29:DF:15:4F:E8:6E:78:43:B3:22:12:6E:29:69:DE:DD:95 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AC9DBA04697699616CD849100 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396982 IP address blocks: 147.124.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a0:46:97:69:96:16:cd:84:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=0628cddf-aeba-4399-b6df-4ea670bf860c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:32:a8:c8:53:63:74:5e:2b:44:75:37:72: ef:01:a8:b8:b6:08:54:d5:91:14:53:21:d0:ae:48: 90:b5:37:50:23:10:d0:71:e9:67:41:d1:46:72:3b: dc:4f:e1:df:34:80:b2:42:79:59:ec:0f:b9:4b:1e: e5:f5:39:d0:16:54:18:b3:e5:33:1d:3c:aa:65:99: b4:3c:2e:cf:4d:08:dd:61:2d:e4:50:60:5c:4e:40: d2:c5:bf:44:de:c8:8f:ff:2b:f2:42:ae:62:1e:11: 6e:fa:08:43:0d:ee:ef:d2:71:24:db:57:3c:8f:fd: 62:30:7c:04:9e:52:01:e2:ef:96:b0:df:23:28:62: 5a:4e:88:28:3c:c9:da:6d:ab:a8:91:cb:4b:a6:a5: 47:04:ce:6c:cb:6c:cd:68:e8:da:5c:ef:ed:98:ba: 78:a5:57:04:4c:12:c5:6d:ff:8c:c4:2f:4a:5c:6c: 19:ba:35:6d:21:54:15:f2:43:4e:9b:14:5a:0e:e4: 51:61:2d:d1:b5:ee:a9:8f:87:73:0c:95:22:d5:28: 43:b3:b3:a3:52:2e:db:2e:c5:a3:ab:91:54:93:d0: 55:db:b0:0b:46:13:62:7e:31:4a:82:5a:3d:cb:bd: cc:39:34:a7:ee:88:97:43:5e:eb:92:f7:20:1f:96: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E9:8E:29:DF:15:4F:E8:6E:78:43:B3:22:12:6E:29:69:DE:DD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3a:c8:7c:f2:c8:40:12:4e:bd:8a:67:51:49:95:f0:39:06: 39:bc:0e:c1:9e:bc:ba:36:97:79:31:68:1b:8d:c2:47:dd:a3: 72:79:74:92:bc:71:bd:b7:d4:16:af:15:70:c5:0f:d2:21:1d: a4:7a:c5:5b:b0:70:de:3f:d4:af:e5:2e:1f:bc:67:09:80:0b: 17:2a:db:00:1f:6e:67:8c:59:a8:c8:91:13:6a:e1:09:8d:28: cc:1f:29:30:e8:27:dd:00:b2:61:b1:25:1d:5f:1b:ba:16:76: 5c:4e:15:44:77:a5:a1:74:b1:a9:99:9c:f4:53:66:de:e0:b9: 3e:3d:e9:29:74:a9:09:5c:56:e5:54:92:43:fc:ff:04:3e:dd: c2:dc:17:e2:da:d6:97:2c:7e:a6:4b:d5:85:da:05:f2:fa:25: f5:70:05:f3:ca:52:44:9c:78:e8:c3:71:d9:02:21:c9:40:5c: 81:f1:8e:2c:3d:55:d4:c3:a9:56:82:02:7f:ba:56:cb:18:af: 62:ea:f2:d6:09:0d:bf:4a:a2:ab:5a:b0:02:3c:b9:24:1f:7e: 48:7f:4a:8b:6b:46:00:4f:1d:ea:a0:63:c3:8b:e9:dd:f4:ad: 18:93:b4:c0:9e:03:c6:35:8c:7c:2f:7a:cd:80:91:a9:d2:a1: 1f:01:85:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26BGl2mWFs2EkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MDYyOGNkZGYtYWViYS00Mzk5LWI2ZGYtNGVhNjcwYmY4NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruQyqMhTY3ReK0R1N3LvAai4tghU1ZEUUyHQ rkiQtTdQIxDQcelnQdFGcjvcT+HfNICyQnlZ7A+5Sx7l9TnQFlQYs+UzHTyqZZm0 PC7PTQjdYS3kUGBcTkDSxb9E3siP/yvyQq5iHhFu+ghDDe7v0nEk21c8j/1iMHwE nlIB4u+WsN8jKGJaTogoPMnabauokctLpqVHBM5sy2zNaOjaXO/tmLp4pVcETBLF bf+MxC9KXGwZujVtIVQV8kNOmxRaDuRRYS3Rte6pj4dzDJUi1ShDs7OjUi7bLsWj q5FUk9BV27ALRhNifjFKglo9y73MOTSn7oiXQ17rkvcgH5aLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3pjinfFU/obnhDsyISbilp3t2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDFjYWZmMWItNzBhMi0z ZjQwLTkzMjUtN2QxMmJkODM2NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk6yHzyyEASTr2KZ1FJlfA5Bjm8DsGevLo2l3kxaBuNwkfdo3J5dJK8 cb231BavFXDFD9IhHaR6xVuwcN4/1K/lLh+8ZwmACxcq2wAfbmeMWajIkRNq4QmN KMwfKTDoJ90AsmGxJR1fG7oWdlxOFUR3paF0samZnPRTZt7guT496Sl0qQlcVuVU kkP8/wQ+3cLcF+La1pcsfqZL1YXaBfL6JfVwBfPKUkSceOjDcdkCIclAXIHxjiw9 VdTDqVaCAn+6VssYr2Lq8tYJDb9KoqtasAI8uSQffkh/SotrRgBPHeqgY8OL6d30 rRiTtMCeA8Y1jHwves2AkanSoR8BhXM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:01 2025 by rpki-client