$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3459ef3d-03c6-3699-8d37-90acee863040.roa File: 3459ef3d-03c6-3699-8d37-90acee863040.roa (raw, json) Hash identifier: ija7cptMpNhDmJTu7dMB9+GdxT/W1L/vveOobfYe0RY= Subject key identifier: 3C:00:1A:EA:16:F6:2B:62:15:B6:93:C7:44:C5:B8:8F:9A:CE:3F:5C Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584A119AA6BF8E85F7768A17D3C0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3459ef3d-03c6-3699-8d37-90acee863040.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 147.124.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a6:bf:8e:85:f7:76:8a:17:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=73870630-0335-48b0-9b6e-65629deaa8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2c:05:b5:ae:2c:64:37:37:23:32:54:f1:49: 6e:c6:bf:3e:f8:14:d4:5b:88:ba:de:73:9b:cf:1c: 5c:f7:7a:b0:33:71:58:20:81:60:01:05:8f:d7:a8: 6f:6f:c3:11:36:f1:13:d0:f3:1a:67:90:db:f9:16: 9e:4b:a5:4a:4e:a9:a0:26:6e:81:d3:03:ff:21:40: ab:c8:74:94:86:dc:1d:82:b4:9f:15:b3:9a:fa:31: 55:61:4b:03:94:4a:68:5a:72:4c:ab:28:c3:d6:85: 8f:bd:34:9d:18:ce:1c:d7:9d:f9:ec:20:c9:ef:ed: b0:45:f0:63:80:fe:f4:1c:02:54:75:1d:f1:f8:de: 80:7e:05:f9:6e:fe:6e:db:6d:57:4a:1e:93:86:81: 77:e8:81:62:47:84:26:97:17:5d:f1:93:df:3b:65: a0:8b:99:27:c9:3a:b5:0c:71:f4:a2:fe:34:21:63: 26:9a:2f:b4:58:81:31:38:0e:5c:14:a7:55:98:88: 8e:e2:2d:da:b0:c8:41:21:a0:8e:ec:f5:eb:31:94: ee:ab:cc:5c:ca:a4:f4:6f:2d:17:87:ce:ac:ed:72: a2:30:5b:42:ab:d9:59:b0:6e:e6:3d:5e:64:29:ad: f9:02:0d:1e:d6:d9:04:36:10:9c:09:cf:2d:b1:55: 3c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:00:1A:EA:16:F6:2B:62:15:B6:93:C7:44:C5:B8:8F:9A:CE:3F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3459ef3d-03c6-3699-8d37-90acee863040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1b:fa:14:ad:76:08:7d:7b:c4:a3:e7:47:b7:d7:ea:a1:03: 25:c0:12:38:06:b6:0c:fd:e7:da:bf:3c:5b:39:cb:40:50:92: e7:ac:35:f9:67:04:87:18:6c:8d:1e:e6:ba:40:c8:24:0c:d6: 3c:5f:c7:5a:1b:b7:3a:11:fd:24:a8:18:7b:4a:42:fe:cc:53: 55:f1:53:36:ad:21:69:25:b3:95:1f:63:6e:91:05:6d:3f:9c: 0c:44:f2:e8:79:02:4a:53:9d:4c:8d:08:0d:22:4e:03:28:75: f8:ef:4f:80:80:cd:d8:cf:b4:4c:2d:45:24:89:e5:bf:63:f8: 0f:4f:3a:b5:61:7d:d6:f1:d1:fc:2f:5b:94:42:3a:10:02:b5: bf:bf:b4:67:4a:15:99:c7:9e:b8:4a:a3:0f:4e:10:6a:bf:5e: ba:e3:0a:87:f0:25:45:40:e6:69:07:ed:b8:49:57:f5:a7:34: f3:a0:95:ab:a8:7a:c7:f6:12:7c:27:e9:b9:7a:dd:04:c6:c5: 76:0b:34:4d:90:e9:4e:cf:cf:be:3e:8f:91:f1:67:b3:4d:aa: ee:a7:82:f1:24:87:4c:88:1b:77:19:cc:0e:ac:64:87:fb:e1: ed:b7:73:55:a6:07:77:1f:2b:ce:7b:c6:6e:61:f1:de:ca:92: 12:7c:d5:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqa/joX3dooX08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NzM4NzA2MzAtMDMzNS00OGIwLTliNmUtNjU2MjlkZWFhOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCwFta4sZDc3IzJU8Uluxr8++BTUW4i63nOb zxxc93qwM3FYIIFgAQWP16hvb8MRNvET0PMaZ5Db+RaeS6VKTqmgJm6B0wP/IUCr yHSUhtwdgrSfFbOa+jFVYUsDlEpoWnJMqyjD1oWPvTSdGM4c15357CDJ7+2wRfBj gP70HAJUdR3x+N6AfgX5bv5u221XSh6ThoF36IFiR4Qmlxdd8ZPfO2Wgi5knyTq1 DHH0ov40IWMmmi+0WIExOA5cFKdVmIiO4i3asMhBIaCO7PXrMZTuq8xcyqT0by0X h86s7XKiMFtCq9lZsG7mPV5kKa35Ag0e1tkENhCcCc8tsVU84QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwAGuoW9itiFbaTx0TFuI+azj9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMzQ1OWVmM2QtMDNjNi0z Njk5LThkMzctOTBhY2VlODYzMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsb+hStdgh9e8Sj50e31+qhAyXAEjgGtgz959q/PFs5y0BQkuesNfln BIcYbI0e5rpAyCQM1jxfx1obtzoR/SSoGHtKQv7MU1XxUzatIWkls5UfY26RBW0/ nAxE8uh5AkpTnUyNCA0iTgModfjvT4CAzdjPtEwtRSSJ5b9j+A9POrVhfdbx0fwv W5RCOhACtb+/tGdKFZnHnrhKow9OEGq/XrrjCofwJUVA5mkH7bhJV/WnNPOglauo esf2Enwn6bl63QTGxXYLNE2Q6U7Pz74+j5HxZ7NNqu6ngvEkh0yIG3cZzA6sZIf7 4e23c1WmB3cfK857xm5h8d7KkhJ81TI= -----END CERTIFICATE-----Generated at Sun Jun 15 09:16:24 2025 by rpki-client