$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa File: f672a23a-52c5-323e-aded-807a969f9369.roa (raw, json) Hash identifier: 3PLk6HJqIOLIosI+O4NOcA4q8/HdsCxgYQ0y+NIwghA= Subject key identifier: 58:43:29:CE:9F:B5:4D:BE:58:D2:7E:35:E6:F0:4F:A4:8E:3C:4E:F3 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584AD7D10D7A07B055811DE36100 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0d:7a:07:b0:55:81:1d:e3:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=b71f092d-e5d7-4fa6-af60-f4f58371f681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:58:d8:b8:ee:72:79:aa:ce:9b:1b:09:57: 66:44:13:33:df:06:e4:cd:dd:15:c4:b6:32:2e:d2: e4:ee:6d:cb:d0:62:90:fc:fb:35:87:77:d9:ef:23: 6d:bd:f8:36:39:51:5d:47:13:32:53:9b:97:1f:a7: 0f:ca:1a:85:0b:19:39:dc:d1:ca:47:6d:89:de:04: c8:5b:cf:29:d1:9b:8f:5f:29:14:4c:c6:95:76:a4: 27:16:4e:37:66:59:29:0c:af:13:64:3a:68:6d:bc: dc:d0:1f:94:39:41:0e:d5:b8:ca:38:82:13:40:ef: 9e:4f:36:f0:0d:42:b6:d9:10:a5:79:b0:cd:b4:5a: eb:c4:42:96:5e:14:67:16:cb:a0:4b:a5:44:81:9a: 73:f8:26:00:73:f8:2a:6f:9e:3b:73:d6:5d:68:c3: d5:e8:d8:e2:7c:ed:04:7c:80:df:0b:6c:fe:2e:06: b7:b0:2a:45:85:9a:08:7d:e2:d0:71:52:fc:e7:8b: a0:d7:db:2d:7a:6c:0a:ff:49:90:ef:2d:af:4a:9b: 81:02:33:46:7e:6e:9b:c2:d5:ea:dc:fc:3f:8d:2c: f1:45:a3:f0:a0:ac:00:08:db:36:fd:20:b5:74:56: f1:5b:26:a1:a8:c1:b3:30:5d:2b:d5:48:f8:d2:0c: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:29:CE:9F:B5:4D:BE:58:D2:7E:35:E6:F0:4F:A4:8E:3C:4E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c4:23:59:20:b5:e2:13:34:aa:7e:de:84:67:55:a9:dd:ea: 63:54:64:a0:d5:6a:68:9c:b9:29:1f:51:2b:8d:38:42:bb:83: 37:1b:06:bd:07:4d:5f:20:1b:4c:62:59:4c:83:fc:ef:52:22: a6:3d:09:52:84:ae:96:a4:bf:17:be:76:c2:76:4f:f1:7e:53: 95:a4:8b:43:5b:7c:c1:3d:7c:ba:9b:f5:a1:4c:3a:f9:20:bb: 3f:41:79:9a:80:4d:1a:d1:08:6d:c4:b6:f3:5d:44:23:09:12: f9:4b:82:82:1a:cf:58:35:40:64:d6:11:c8:a6:c0:62:9d:a1: 0a:f6:38:f2:4b:04:9b:0f:63:41:fe:27:8b:01:87:ff:b5:05: 62:08:b9:7f:44:92:d3:67:88:bb:40:66:b1:86:f5:c3:d2:e7: dd:d5:3c:a7:5d:04:a1:25:2d:a5:89:f1:d8:da:7e:c4:72:6d: 0c:1a:ab:5a:9e:e8:38:a2:1e:fb:1c:3e:f2:c2:ae:dc:5b:c4: c9:2c:a3:ff:f9:15:f0:7f:0a:d1:af:28:0c:cf:2b:b9:98:20: 20:f7:f9:54:bb:b2:2d:24:8f:12:8c:8a:95:a4:e9:a9:a0:cd: e0:a9:d5:76:2c:df:26:80:29:28:33:0c:60:33:11:e1:6e:29: 6f:d5:5d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Q16B7BVgR3jYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YjcxZjA5MmQtZTVkNy00ZmE2LWFmNjAtZjRmNTgzNzFmNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYRY2LjucnmqzpsbCVdmRBMz3wbkzd0VxLYy LtLk7m3L0GKQ/Ps1h3fZ7yNtvfg2OVFdRxMyU5uXH6cPyhqFCxk53NHKR22J3gTI W88p0ZuPXykUTMaVdqQnFk43ZlkpDK8TZDpobbzc0B+UOUEO1bjKOIITQO+eTzbw DUK22RClebDNtFrrxEKWXhRnFsugS6VEgZpz+CYAc/gqb547c9ZdaMPV6NjifO0E fIDfC2z+Lga3sCpFhZoIfeLQcVL854ug19stemwK/0mQ7y2vSpuBAjNGfm6bwtXq 3Pw/jSzxRaPwoKwACNs2/SC1dFbxWyahqMGzMF0r1Uj40gy9EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhDKc6ftU2+WNJ+NebwT6SOPE7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZjY3MmEyM2EtNTJjNS0z MjNlLWFkZWQtODA3YTk2OWY5MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLEI1kgteITNKp+3oRnVand6mNUZKDVamicuSkfUSuNOEK7gzcbBr0H TV8gG0xiWUyD/O9SIqY9CVKErpakvxe+dsJ2T/F+U5Wki0NbfME9fLqb9aFMOvkg uz9BeZqATRrRCG3EtvNdRCMJEvlLgoIaz1g1QGTWEcimwGKdoQr2OPJLBJsPY0H+ J4sBh/+1BWIIuX9EktNniLtAZrGG9cPS593VPKddBKElLaWJ8djafsRybQwaq1qe 6DiiHvscPvLCrtxbxMkso//5FfB/CtGvKAzPK7mYICD3+VS7si0kjxKMipWk6amg zeCp1XYs3yaAKSgzDGAzEeFuKW/VXa4= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:13 2025 by rpki-client