$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa File: 3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa (raw, json) Hash identifier: rtmLE2DsNUihT9IDD1OEemdeCccJmAvH31sm1+5K2jc= Subject key identifier: EE:3B:35:D7:58:42:13:B3:B5:76:09:5A:5C:B7:98:D3:3A:68:7F:2D Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849393E7457C1D71F849953AF80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16509 IP address blocks: 147.124.164.0/24 maxlen: 24 147.124.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:74:57:c1:d7:1f:84:99:53:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=32da0cde-5d7e-43a6-8e9b-193829b00456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:12:6d:99:ba:c3:23:fa:a8:8e:4e:88:2f:06: e5:ec:d6:f1:92:ff:8e:0d:ff:bd:61:bb:54:f8:d7: ee:c6:31:58:c5:13:48:49:93:74:c6:68:84:84:98: 04:51:b4:85:d7:6a:cc:0f:53:79:a7:46:ae:51:82: 73:06:04:bb:ba:98:52:87:af:3e:a6:b8:fa:d2:28: 39:58:4e:a0:8a:77:a3:9f:6d:a1:ce:76:b8:d2:d1: e4:b4:33:53:35:b2:a3:32:8a:56:6f:67:a1:a5:e3: b9:7f:cd:c1:ce:04:1c:d2:0d:9d:de:41:64:7e:17: de:bd:5f:ae:44:3b:73:31:49:7d:7a:a0:72:0a:79: a0:0c:77:55:28:0a:28:ab:16:e0:20:f0:ff:73:ac: c8:7a:e5:59:5c:9f:ff:0f:7f:0c:1e:39:56:3f:1e: 48:72:72:ef:ce:ff:96:f9:5b:25:e0:5f:e9:4b:d2: b2:db:1a:27:13:11:12:77:60:59:ab:3e:e8:c3:8a: 6e:ca:e9:1e:a4:2d:5a:0e:6a:05:c3:90:89:e3:86: 1b:ca:73:56:65:60:2c:65:e6:36:8c:81:c2:45:64: 24:3c:00:97:d6:f0:66:0d:8c:8e:bc:ac:29:60:55: e6:81:f3:9f:b4:f9:8a:58:47:7b:a2:3b:eb:d5:53: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:35:D7:58:42:13:B3:B5:76:09:5A:5C:B7:98:D3:3A:68:7F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3a3bf6e7-aeac-3eea-b20d-2bfc6bed2bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3a:87:0d:8b:02:fe:e4:d5:9c:29:b0:83:ea:4a:ac:77:4b: 14:c2:48:87:05:fb:a9:14:a5:bc:d6:40:a6:08:2f:2e:5d:7a: e7:2d:3c:ad:c2:bd:50:89:85:a7:c1:4f:df:ff:ad:1a:f4:5e: 9f:60:28:46:61:97:0b:54:90:6b:88:7e:45:19:ec:ab:85:c1: 50:68:ac:4b:70:ab:af:0d:db:79:5f:33:84:c4:1a:d4:9e:15: e8:9a:c5:c9:0c:c9:45:0a:d4:d0:18:33:67:cd:12:be:2f:27: 72:48:66:13:ac:f5:27:a5:93:4a:63:0a:0f:9b:a8:ec:0e:3d: 60:44:3e:05:90:91:d5:ba:3d:b2:35:87:a3:34:61:1b:f8:ae: 55:f9:60:82:16:77:ca:69:98:6d:2a:40:6a:ae:49:0b:7c:d8: a6:ce:94:89:01:4d:9a:53:f0:43:0a:03:88:2c:06:b9:29:d3: c1:9a:74:22:49:28:8e:78:d8:89:ee:60:58:c0:7e:b2:73:b7: 0f:fc:0e:4d:62:67:c3:67:dd:ee:63:26:fc:53:ec:88:bb:c7: 36:c9:d2:5a:c8:cb:05:2e:c2:86:18:a0:77:b2:5b:2b:f3:f4: 0a:4f:6d:ab:63:66:01:a9:7e:28:b9:35:97:9c:71:a6:d3:8b: 7e:12:d6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnRXwdcfhJlTr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MzJkYTBjZGUtNWQ3ZS00M2E2LThlOWItMTkzODI5YjAwNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBJtmbrDI/qojk6ILwbl7Nbxkv+ODf+9YbtU +NfuxjFYxRNISZN0xmiEhJgEUbSF12rMD1N5p0auUYJzBgS7uphSh68+prj60ig5 WE6ginejn22hzna40tHktDNTNbKjMopWb2ehpeO5f83BzgQc0g2d3kFkfhfevV+u RDtzMUl9eqByCnmgDHdVKAooqxbgIPD/c6zIeuVZXJ//D38MHjlWPx5IcnLvzv+W +Vsl4F/pS9Ky2xonExESd2BZqz7ow4puyukepC1aDmoFw5CJ44YbynNWZWAsZeY2 jIHCRWQkPACX1vBmDYyOvKwpYFXmgfOftPmKWEd7ojvr1VM56wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO47NddYQhOztXYJWly3mNM6aH8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvM2EzYmY2ZTctYWVhYy0z ZWVhLWIyMGQtMmJmYzZiZWQyYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3ykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA6hw2LAv7k1ZwpsIPqSqx3SxTCSIcF+6kUpbzWQKYILy5deuctPK3C vVCJhafBT9//rRr0Xp9gKEZhlwtUkGuIfkUZ7KuFwVBorEtwq68N23lfM4TEGtSe FeiaxckMyUUK1NAYM2fNEr4vJ3JIZhOs9Selk0pjCg+bqOwOPWBEPgWQkdW6PbI1 h6M0YRv4rlX5YIIWd8ppmG0qQGquSQt82KbOlIkBTZpT8EMKA4gsBrkp08GadCJJ KI542InuYFjAfrJztw/8Dk1iZ8Nn3e5jJvxT7Ii7xzbJ0lrIywUuwoYYoHeyWyvz 9ApPbatjZgGpfii5NZeccabTi34S1jk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:38:54 2025 by rpki-client