$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa File: 48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa (raw, json) Hash identifier: mKCKYB9UFHrfGjsMMtDw90OIBC+knPes4z2u2fJejaE= Subject key identifier: 9C:84:F0:80:C7:3E:AA:06:13:2D:E8:8D:6A:70:39:19:FA:2A:64:50 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849D42FA3C11ED6B15A2B976700 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 147.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a3:c1:1e:d6:b1:5a:2b:97:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=065da655-189e-4b36-ae5d-9d6ab306eeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:39:aa:79:7c:de:b1:93:bf:fa:4f:9d:0c: 37:dd:d3:ac:e1:72:e5:40:e9:4a:86:ee:13:20:f1: ca:27:e8:05:12:e4:86:01:bc:6a:51:82:10:c1:12: 23:52:b7:05:65:b1:30:d8:c8:c3:e2:24:5c:27:45: ac:0c:a8:4e:fe:92:04:c9:2e:a1:f6:db:8d:b9:26: 9c:91:c6:5c:ac:7f:61:1f:50:d4:bd:a5:18:43:ba: 74:a3:ea:69:fa:1e:1d:03:b3:b2:e4:f9:07:1a:76: 18:5b:a3:e1:b7:d2:36:a9:a0:0b:62:02:01:f5:ed: 4b:0d:e1:f6:6f:25:26:d4:0a:ff:08:d1:b7:9f:14: 09:ec:53:1b:b0:c5:f9:33:28:d5:d6:a4:cf:4e:cb: 16:c8:74:c5:4b:30:be:c6:b1:8e:b3:0a:71:5a:f6: b1:3f:ab:1b:2c:6c:5c:f8:87:1b:de:5c:d1:01:75: c0:a9:48:5c:5c:e8:c7:48:0b:0a:d1:f4:d1:17:0b: 04:57:da:48:0e:c1:00:c8:e3:35:2e:8e:9c:6e:45: eb:e5:03:7b:16:49:ce:f8:c3:a1:65:f2:f0:cc:e6: d0:05:b5:42:72:8f:17:e7:dc:e7:41:99:2c:66:40: 86:14:93:d3:86:65:34:31:f9:bc:ae:4f:c2:84:d1: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:84:F0:80:C7:3E:AA:06:13:2D:E8:8D:6A:70:39:19:FA:2A:64:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e2:9f:b8:6a:12:78:e3:3f:bf:61:e4:93:c9:4d:61:c3:e6: fe:24:75:9c:b7:fd:db:96:13:46:56:33:c6:07:4e:86:c7:76: 7b:91:c8:03:5a:6c:68:a5:45:b4:a0:b7:81:ac:61:d1:0a:38: 84:4e:ed:df:0f:41:31:09:69:f2:51:bb:93:7c:fa:e5:0c:ba: 40:65:6f:2f:b6:04:0f:4f:d9:84:5f:4b:ea:b6:a4:c9:54:5e: 50:20:e9:17:79:b7:a5:2b:06:20:3c:b9:dc:a6:3e:68:9f:13: b7:54:04:7d:ce:d2:0b:3b:6c:7b:bc:d6:ed:a1:78:c5:35:fb: 43:0e:f5:ef:95:d0:8f:86:84:19:2c:ff:5c:b2:fc:25:ef:b6: 4c:b7:4f:36:a0:d0:f7:6c:74:7d:73:d8:65:f5:be:29:10:13: 8d:1e:a7:10:5e:ec:fb:cb:62:8a:19:fd:4d:12:98:88:c7:bb: 70:7c:54:0e:46:15:f5:66:15:67:32:f6:7b:16:21:e0:e0:16: b0:1f:f3:5d:83:8b:76:b7:b8:05:a3:79:5b:5f:d8:74:5e:b8: a6:64:42:bf:f4:67:9f:e7:45:e4:4d:4e:b7:21:22:4c:66:bd: 50:5a:25:8a:97:bd:ea:36:bf:69:52:56:00:92:cb:07:9c:4f: bb:43:1b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6PBHtaxWiuXZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDY1ZGE2NTUtMTg5ZS00YjM2LWFlNWQtOWQ2YWIzMDZlZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1I5qnl83rGTv/pPnQw33dOs4XLlQOlKhu4T IPHKJ+gFEuSGAbxqUYIQwRIjUrcFZbEw2MjD4iRcJ0WsDKhO/pIEyS6h9tuNuSac kcZcrH9hH1DUvaUYQ7p0o+pp+h4dA7Oy5PkHGnYYW6Pht9I2qaALYgIB9e1LDeH2 byUm1Ar/CNG3nxQJ7FMbsMX5MyjV1qTPTssWyHTFSzC+xrGOswpxWvaxP6sbLGxc +Icb3lzRAXXAqUhcXOjHSAsK0fTRFwsEV9pIDsEAyOM1Lo6cbkXr5QN7FknO+MOh ZfLwzObQBbVCco8X59znQZksZkCGFJPThmU0Mfm8rk/ChNHCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyE8IDHPqoGEy3ojWpwORn6KmRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNDhmMjZmYzktMDhiMC0z ZTFiLTk3YmYtYzBmMGZlZTU0ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrin7hqEnjjP79h5JPJTWHD5v4kdZy3/duWE0ZWM8YHTobHdnuRyANa bGilRbSgt4GsYdEKOIRO7d8PQTEJafJRu5N8+uUMukBlby+2BA9P2YRfS+q2pMlU XlAg6Rd5t6UrBiA8udymPmifE7dUBH3O0gs7bHu81u2heMU1+0MO9e+V0I+GhBks /1yy/CXvtky3Tzag0PdsdH1z2GX1vikQE40epxBe7PvLYooZ/U0SmIjHu3B8VA5G FfVmFWcy9nsWIeDgFrAf812Di3a3uAWjeVtf2HReuKZkQr/0Z5/nReRNTrchIkxm vVBaJYqXveo2v2lSVgCSywecT7tDG5E= -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:20 2025 by rpki-client