$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa File: 5ebc4dd4-b087-3087-9536-69f180128162.roa (raw, json) Hash identifier: JoaO7b8OjZ6bUrkfgFrIUUIz9TJbgJYxvbfUhUXBZiI= Subject key identifier: 58:BD:16:F8:47:22:56:EB:97:E6:CE:75:36:AE:04:05:FF:05:7D:B8 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584A2EEAC04233FB26C69E4C1AC0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 16509 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c0:42:33:fb:26:c6:9e:4c:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=50b210a1-8d31-4043-a23a-afb57ae43df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:ef:3a:5b:0d:15:b1:27:a5:30:42:f4:c2: 22:b8:c0:ba:b7:0a:0c:fe:f8:18:2a:5e:46:59:67: 71:db:da:94:35:ef:9b:ab:53:dd:97:5c:f2:de:24: 55:df:3b:f9:32:ab:02:5a:c2:60:ed:1f:6e:93:a7: b2:d8:ba:a3:51:ec:6e:e5:34:87:aa:a6:8d:18:90: 25:37:7a:ad:b2:ce:e0:39:c0:db:62:34:f9:69:73: 98:21:40:21:6a:07:fa:32:fe:05:c9:10:45:55:97: a4:63:61:6d:0e:35:de:7f:4b:93:e8:19:5d:96:4f: 25:5f:cc:2e:4e:3e:c9:14:c1:61:28:4a:d1:b9:fb: 9a:d8:70:5f:4f:24:4d:fa:e6:92:a4:f6:be:bc:65: 8b:9d:cd:e8:8c:52:3a:2f:93:fb:fd:29:f9:f0:f4: 4c:1b:fd:fa:09:52:4d:eb:88:c0:51:3c:fb:94:87: bc:89:8d:53:de:76:79:1c:a1:76:48:ad:86:c5:73: 93:7d:c5:98:35:3f:d2:61:76:c9:fc:f3:24:db:cc: f7:67:ba:f8:4f:32:8a:45:93:45:92:86:c0:39:30: fa:9d:1e:25:00:c5:4f:1e:70:92:b7:26:0a:28:a5: d5:a1:7c:b0:0f:8e:ca:87:de:2c:bb:b1:d6:ee:21: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BD:16:F8:47:22:56:EB:97:E6:CE:75:36:AE:04:05:FF:05:7D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a3:af:15:bb:fa:8e:f6:3e:ef:df:6f:4c:f8:6d:a2:dd:3c: f9:db:e6:f3:a8:4f:c1:6a:2d:1f:fe:f1:35:a1:2b:a0:6a:5e: 5a:48:df:f1:d4:06:74:9c:68:03:c0:3c:07:f7:45:8b:83:b8: 23:e0:e5:7f:59:b8:f3:a2:10:5d:b1:46:a0:e8:9d:1c:ed:54: 43:a4:ea:67:a3:8a:b5:06:58:ce:e5:fc:80:fe:46:e8:de:6b: ae:a2:24:41:50:67:61:7e:6e:2f:84:71:cf:d7:0c:f2:0a:0c: c0:43:b1:bf:de:55:ca:c2:d2:4d:ce:18:3c:f6:d6:39:83:42: 17:aa:5e:5c:fa:06:0f:69:3c:cd:10:28:7c:7e:7e:01:89:4b: 34:cc:a6:30:ea:c8:dc:3e:e4:ce:cc:92:6a:b7:42:a0:b8:2e: f3:b9:68:2b:6d:b4:bb:6c:29:2e:56:9a:aa:f9:b8:e6:92:f9: 5d:8d:24:f0:c6:8b:c5:df:ac:71:cf:0d:52:05:44:19:3a:34: 7d:39:fa:d0:9e:52:f0:eb:37:71:1d:e5:61:5c:b0:9d:e2:54: 2c:d8:cf:23:df:7a:87:e7:7b:d3:a2:da:7b:c0:72:ac:2e:f9: 32:f5:29:5b:7d:a2:5e:65:1c:27:e8:8e:5a:14:cf:9f:e5:25: 37:c4:c3:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6sBCM/smxp5MGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk NTBiMjEwYTEtOGQzMS00MDQzLWEyM2EtYWZiNTdhZTQzZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmXvOlsNFbEnpTBC9MIiuMC6twoM/vgYKl5G WWdx29qUNe+bq1Pdl1zy3iRV3zv5MqsCWsJg7R9uk6ey2LqjUexu5TSHqqaNGJAl N3qtss7gOcDbYjT5aXOYIUAhagf6Mv4FyRBFVZekY2FtDjXef0uT6Bldlk8lX8wu Tj7JFMFhKErRufua2HBfTyRN+uaSpPa+vGWLnc3ojFI6L5P7/Sn58PRMG/36CVJN 64jAUTz7lIe8iY1T3nZ5HKF2SK2GxXOTfcWYNT/SYXbJ/PMk28z3Z7r4TzKKRZNF kobAOTD6nR4lAMVPHnCStyYKKKXVoXywD47Kh94su7HW7iHHgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi9FvhHIlbrl+bOdTauBAX/BX24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNWViYzRkZDQtYjA4Ny0z MDg3LTk1MzYtNjlmMTgwMTI4MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOjrxW7+o72Pu/fb0z4baLdPPnb5vOoT8FqLR/+8TWhK6BqXlpI3/HU BnScaAPAPAf3RYuDuCPg5X9ZuPOiEF2xRqDonRztVEOk6mejirUGWM7l/ID+Ruje a66iJEFQZ2F+bi+Ecc/XDPIKDMBDsb/eVcrC0k3OGDz21jmDQheqXlz6Bg9pPM0Q KHx+fgGJSzTMpjDqyNw+5M7Mkmq3QqC4LvO5aCtttLtsKS5Wmqr5uOaS+V2NJPDG i8XfrHHPDVIFRBk6NH05+tCeUvDrN3Ed5WFcsJ3iVCzYzyPfeofne9Oi2nvAcqwu +TL1KVt9ol5lHCfojloUz5/lJTfEw/I= -----END CERTIFICATE-----Generated at Sat Jun 14 18:53:23 2025 by rpki-client