$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa File: 20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json) Hash identifier: RNciigyGSmRT3UlFhJH/6w0vpggYYihRXZOi9HYdaVo= Subject key identifier: 3F:C0:9A:64:51:65:58:6D:48:2A:2D:9C:42:68:52:FF:A3:D2:80:4E Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849D42FA75F956F812F33EB7A00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 396982 IP address blocks: 147.124.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a7:5f:95:6f:81:2f:33:eb:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e946907d-75ad-41e0-a83e-bcb7ded478b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:1c:83:31:cf:bb:9f:56:46:4d:75:15:db: 66:fc:3d:6a:42:c2:0b:d1:62:cd:cb:e4:d6:30:28: 3a:be:4f:d8:fc:d9:e6:f1:96:32:72:b7:9e:4b:83: b0:64:71:99:7c:a4:b5:c3:bf:25:5a:69:e0:c9:6b: f6:50:a6:89:54:77:84:98:b5:68:c3:10:fc:94:4a: 8f:51:11:2c:62:8d:d7:8f:6c:0d:c1:37:cd:0c:2d: 8c:fd:dc:cd:6e:1d:85:e1:3b:c0:14:fc:d6:51:6a: 7f:16:3d:bf:ac:72:f1:88:da:1b:dd:8b:42:62:75: 25:34:cd:5a:26:e2:5d:b2:4b:30:d3:d4:3f:1f:19: ed:86:83:26:eb:66:48:9e:66:89:05:b6:d7:25:50: 98:1a:ea:e7:36:9e:09:09:c8:2f:53:cd:f1:f3:9d: 49:cf:47:fe:96:35:22:29:2f:a6:e0:3e:dc:c8:91: a1:47:ff:3b:ad:91:af:53:91:d0:8c:cc:72:16:13: c6:9c:62:b2:50:0b:22:fc:ac:d6:ed:f1:45:fe:15: 1b:c5:08:dc:30:79:a1:b9:75:22:5f:28:7c:50:a6: 71:cf:51:ad:d6:d8:ae:fd:d8:4b:7a:b4:c1:b1:1e: 22:83:5e:43:4d:0a:2a:0e:08:d8:7a:c5:42:9d:1a: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C0:9A:64:51:65:58:6D:48:2A:2D:9C:42:68:52:FF:A3:D2:80:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:08:8e:f6:76:40:1a:0e:37:ff:ad:43:cd:4c:f3:3e:c6:80: a5:86:ec:ab:4c:44:5e:ef:60:40:88:9a:52:b1:c1:63:37:1a: 31:09:73:f1:a2:50:1c:81:26:0b:b7:92:c0:47:fb:ca:38:b9: ac:e1:94:50:9d:0d:c7:69:31:d4:96:27:81:04:d3:49:f5:3a: a6:d3:fd:73:96:2f:0b:49:75:48:26:f5:3e:c9:03:78:d3:a5: 1f:fa:2e:29:e7:49:08:34:ec:8b:1e:a1:34:8d:0b:58:97:c0: ac:33:a5:bc:92:10:80:60:1d:2e:60:99:af:b7:2f:8a:1a:4f: c1:55:cd:09:de:0f:cf:80:72:0a:01:e3:89:27:50:19:e6:cc: f9:d4:39:d1:e1:5d:e3:c9:76:4b:c7:24:e9:e3:cc:9a:68:55: 3d:a1:45:3a:10:c1:c5:94:f4:48:62:b1:d2:7b:6a:17:98:a3: a2:d1:02:c1:a0:59:85:98:f9:57:de:53:c8:6b:2c:c9:5d:d8: 3e:69:5d:db:b4:14:1c:d2:80:8f:7e:a9:08:d7:b6:3e:e0:1a: e0:ca:11:d9:0a:fb:78:fb:39:b1:0c:10:94:9d:89:c9:ee:bb: dd:e6:02:0b:1e:66:d0:e5:c0:b1:7d:3c:79:96:c8:ed:2c:c9: c7:f9:43:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6dflW+BLzPregAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTk0NjkwN2QtNzVhZC00MWUwLWE4M2UtYmNiN2RlZDQ3OGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha0cgzHPu59WRk11Fdtm/D1qQsIL0WLNy+TW MCg6vk/Y/Nnm8ZYycreeS4OwZHGZfKS1w78lWmngyWv2UKaJVHeEmLVowxD8lEqP UREsYo3Xj2wNwTfNDC2M/dzNbh2F4TvAFPzWUWp/Fj2/rHLxiNob3YtCYnUlNM1a JuJdsksw09Q/HxnthoMm62ZInmaJBbbXJVCYGurnNp4JCcgvU83x851Jz0f+ljUi KS+m4D7cyJGhR/87rZGvU5HQjMxyFhPGnGKyUAsi/KzW7fFF/hUbxQjcMHmhuXUi Xyh8UKZxz1Gt1tiu/dhLerTBsR4ig15DTQoqDgjYesVCnRqx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/AmmRRZVhtSCotnEJoUv+j0oBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQIjvZ2QBoON/+tQ81M8z7GgKWG7KtMRF7vYECImlKxwWM3GjEJc/Gi UByBJgu3ksBH+8o4uazhlFCdDcdpMdSWJ4EE00n1OqbT/XOWLwtJdUgm9T7JA3jT pR/6LinnSQg07IseoTSNC1iXwKwzpbySEIBgHS5gma+3L4oaT8FVzQneD8+AcgoB 44knUBnmzPnUOdHhXePJdkvHJOnjzJpoVT2hRToQwcWU9EhisdJ7aheYo6LRAsGg WYWY+VfeU8hrLMld2D5pXdu0FBzSgI9+qQjXtj7gGuDKEdkK+3j7ObEMEJSdicnu u93mAgseZtDlwLF9PHmWyO0sycf5Q2I= -----END CERTIFICATE-----Generated at Sun Jun 15 18:03:58 2025 by rpki-client