$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa File: fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa (raw, json) Hash identifier: 2gXFl59pXpdzMObA8WrVflJJCRXRr1t7QPyQVxr8iKU= Subject key identifier: 6F:6E:E9:F8:CD:24:0A:57:3B:14:4B:0F:56:CA:B1:01:50:94:49:31 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584F9E987161426AD31275A54F40 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:71:61:42:6a:d3:12:75:a5:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=cac83542-66ee-483f-987c-061847feca63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:87:95:81:94:97:29:9b:67:b2:7f:05:e4: 90:86:08:82:75:f4:0b:41:a1:54:c6:01:ee:9a:7e: 2b:9b:44:36:de:e9:a1:54:3d:04:b3:b1:4a:91:b0: bb:40:b6:3e:bd:7d:9a:ca:4d:56:a6:7b:62:19:ac: 99:09:f8:04:ca:8e:10:15:37:61:65:b0:73:b8:b7: 6f:3c:9e:d6:de:96:ea:50:bc:ab:06:7c:1e:56:4e: d8:c2:68:6a:09:b4:46:1e:20:cf:76:2f:48:7b:c8: 0a:a1:1b:8d:20:c1:55:9c:98:ab:a0:29:69:66:6d: 4b:79:68:f3:c0:3a:47:ed:32:10:6c:a5:5c:38:e8: 38:71:d6:f5:1c:d8:ba:b1:be:ce:af:2a:93:11:ae: da:57:af:ae:80:d9:96:0c:36:76:6f:b2:ed:f7:22: 30:31:1b:33:5b:50:3d:47:a0:08:42:1b:28:51:62: a4:b8:a3:be:fc:bc:43:8b:40:ed:dc:e5:e6:91:89: 21:24:14:70:ab:d2:5c:d8:6e:43:bd:ea:6c:e2:af: 1e:10:6f:08:6d:b3:21:28:3c:09:fe:f9:3f:db:47: 49:68:64:dc:e4:5d:ea:39:fb:ae:e5:cf:49:06:26: 5f:62:34:ad:b8:3b:21:04:a6:42:1e:9a:dd:30:c0: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:E9:F8:CD:24:0A:57:3B:14:4B:0F:56:CA:B1:01:50:94:49:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b4:1d:26:36:fe:5a:4f:f6:cb:4e:14:80:b5:58:e8:62:d6: a8:22:d3:fb:e5:01:a9:d1:e3:03:d7:08:f9:a2:ac:66:f2:b0: 5b:fa:f0:37:7e:6b:0c:03:85:b1:22:09:8f:1b:c9:80:43:74: 5a:05:8f:c3:bf:9e:90:d7:c5:3f:68:a3:86:52:84:ca:cb:f4: 9e:90:a8:ce:03:2f:5c:a3:56:d7:83:08:08:ac:67:8d:f6:30: 2c:04:ed:2d:5f:f3:8d:21:4b:3e:a9:59:4a:b4:53:8a:73:d0: e1:8f:89:77:4b:8c:7d:08:b9:c3:1d:e8:3c:ff:49:c1:d9:a2: d8:83:42:52:80:0c:19:7e:67:36:6f:0e:4c:26:3a:c2:46:d4: f1:73:41:9b:9e:88:48:80:9e:c8:84:3b:f6:f5:d3:18:23:cb: a3:ba:6d:06:e5:98:c4:a3:71:aa:80:3f:e9:75:0e:0f:b8:45: 24:38:2d:25:b2:a3:a8:50:03:f6:2d:b8:9b:13:8c:0f:31:ce: b7:f5:6d:6a:90:ff:4d:a1:b7:23:0b:c4:e0:cf:cc:7d:c5:eb: b5:29:50:35:da:db:a1:d5:f3:9f:09:5d:b3:a8:a9:55:4e:b5: 94:59:77:8b:0d:ba:55:d1:0a:06:7d:34:4e:38:d7:52:e1:5e: 2a:b5:22:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emHFhQmrTEnWlT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk Y2FjODM1NDItNjZlZS00ODNmLTk4N2MtMDYxODQ3ZmVjYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa6HlYGUlymbZ7J/BeSQhgiCdfQLQaFUxgHu mn4rm0Q23umhVD0Es7FKkbC7QLY+vX2ayk1WpntiGayZCfgEyo4QFTdhZbBzuLdv PJ7W3pbqULyrBnweVk7YwmhqCbRGHiDPdi9Ie8gKoRuNIMFVnJiroClpZm1LeWjz wDpH7TIQbKVcOOg4cdb1HNi6sb7OryqTEa7aV6+ugNmWDDZ2b7Lt9yIwMRszW1A9 R6AIQhsoUWKkuKO+/LxDi0Dt3OXmkYkhJBRwq9Jc2G5Dveps4q8eEG8IbbMhKDwJ /vk/20dJaGTc5F3qOfuu5c9JBiZfYjStuDshBKZCHprdMMAseQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9u6fjNJApXOxRLD1bKsQFQlEkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZmVmMjBjNGQtYmYxYy0z ZThlLTgzZjItNzYzYmNkNmJhYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC0HSY2/lpP9stOFIC1WOhi1qgi0/vlAanR4wPXCPmirGbysFv68Dd+ awwDhbEiCY8byYBDdFoFj8O/npDXxT9oo4ZShMrL9J6QqM4DL1yjVteDCAisZ432 MCwE7S1f840hSz6pWUq0U4pz0OGPiXdLjH0IucMd6Dz/ScHZotiDQlKADBl+ZzZv DkwmOsJG1PFzQZueiEiAnsiEO/b10xgjy6O6bQblmMSjcaqAP+l1Dg+4RSQ4LSWy o6hQA/YtuJsTjA8xzrf1bWqQ/02htyMLxODPzH3F67UpUDXa26HV858JXbOoqVVO tZRZd4sNulXRCgZ9NE4411LhXiq1IuU= -----END CERTIFICATE-----Generated at Sun Nov 15 17:05:46 2026 by rpki-client