$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa File: 5ebc4dd4-b087-3087-9536-69f180128162.roa (raw, json) Hash identifier: h2apxUrDaOU2OefBv+xq/vtMBfsbyehUZrJKSuTNxYI= Subject key identifier: 73:CD:AB:5D:74:0C:E9:F1:28:56:3F:A1:96:E1:6A:20:49:53:97:55 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F432858494F93ECDB352AE265DD7D4D40 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:ec:db:35:2a:e2:65:dd:7d:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=eaf9f929-cc8d-46a1-9020-374e8dd47221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:c3:d9:28:ab:c3:f1:d3:6b:c7:4a:8a:38: 8c:f1:4f:11:e0:3c:9d:9c:4d:e0:f5:b5:55:e4:b9: 47:5d:ed:52:45:a2:4a:0f:4e:6e:c8:3d:65:7c:18: 6d:a1:6b:5d:12:4e:8b:08:2b:35:47:5b:97:c8:13: f1:26:68:08:f8:cd:f1:d2:4e:50:64:2f:84:39:6b: d5:b7:b5:5c:89:e9:eb:e6:f6:95:15:46:ca:38:81: 78:8d:a0:bc:56:b4:ec:03:be:e4:27:f3:89:22:cc: e9:bf:1f:e8:e5:fb:25:5b:7c:22:17:af:75:14:b6: cc:b3:45:d8:17:7a:7c:f8:93:ba:74:b8:3c:fd:6e: c3:70:8c:e0:25:ec:f9:24:e5:e2:82:12:52:1e:82: 0d:0b:06:a6:4d:6a:c3:2d:e2:0a:e5:2a:0b:35:bf: 20:d3:61:3d:23:d7:ba:b0:d5:cd:2b:40:7a:e8:db: 6d:47:00:ef:17:31:43:79:87:b7:34:cb:a6:2c:9d: 5b:43:6d:ee:a9:30:78:a1:91:cd:6c:02:23:44:c3: e3:1c:f3:de:81:fa:f2:dc:cd:cd:22:cb:ba:96:36: f0:a2:f0:27:19:ea:97:59:aa:8b:c1:61:41:94:96: ac:ce:9d:50:b8:af:b6:31:a7:b3:ff:4e:a3:86:85: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CD:AB:5D:74:0C:E9:F1:28:56:3F:A1:96:E1:6A:20:49:53:97:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:21:2d:b8:32:a5:b6:22:62:74:6c:3c:7a:a8:4c:28:3d:a5: ba:e6:35:aa:6d:65:ad:13:a2:c2:22:3e:9c:1b:e0:bb:42:35: a0:e8:0f:93:28:65:f3:94:26:77:ee:2d:1b:df:15:10:e4:29: cc:3d:81:f3:7c:12:e4:66:89:cc:5b:ee:a7:44:7f:45:92:5f: 16:9a:3b:06:c9:2a:a6:47:23:47:fb:16:41:4f:9c:04:2d:2c: ba:77:58:29:4b:09:39:54:3c:e8:f5:47:78:ba:c2:95:77:ba: ae:1d:91:a3:d0:be:21:8d:60:be:04:68:d3:1b:85:d4:5e:e6: 86:36:05:c7:a0:4e:35:64:3a:ee:02:e8:55:62:d4:26:a3:bc: 83:e1:0d:81:fc:8d:b4:11:d6:e4:55:6f:81:7e:33:2f:e6:fd: be:bf:73:3f:a5:54:85:1a:b4:5c:6a:23:f7:d8:58:24:b8:e5: 9f:c9:c7:fd:2c:ae:56:10:1c:63:18:e7:36:c8:7b:f5:48:80: 14:3e:89:fd:ec:42:f1:fc:f3:6d:ec:30:53:c0:71:63:5d:af: 0c:ff:f4:fb:15:c6:6e:ef:e7:73:8d:20:15:c2:66:21:a0:a3: b7:9f:61:50:ad:8f:e6:8a:61:04:cf:44:7b:fc:c3:8d:f5:71: ce:f2:b0:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+zbNSriZd19TUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk ZWFmOWY5MjktY2M4ZC00NmExLTkwMjAtMzc0ZThkZDQ3MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDTD2Sirw/HTa8dKijiM8U8R4DydnE3g9bVV 5LlHXe1SRaJKD05uyD1lfBhtoWtdEk6LCCs1R1uXyBPxJmgI+M3x0k5QZC+EOWvV t7Vcienr5vaVFUbKOIF4jaC8VrTsA77kJ/OJIszpvx/o5fslW3wiF691FLbMs0XY F3p8+JO6dLg8/W7DcIzgJez5JOXighJSHoINCwamTWrDLeIK5SoLNb8g02E9I9e6 sNXNK0B66NttRwDvFzFDeYe3NMumLJ1bQ23uqTB4oZHNbAIjRMPjHPPegfry3M3N Isu6ljbwovAnGeqXWaqLwWFBlJaszp1QuK+2Maez/06jhoXHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPNq110DOnxKFY/oZbhaiBJU5dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNWViYzRkZDQtYjA4Ny0z MDg3LTk1MzYtNjlmMTgwMTI4MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABohLbgypbYiYnRsPHqoTCg9pbrmNaptZa0TosIiPpwb4LtCNaDoD5Mo ZfOUJnfuLRvfFRDkKcw9gfN8EuRmicxb7qdEf0WSXxaaOwbJKqZHI0f7FkFPnAQt LLp3WClLCTlUPOj1R3i6wpV3uq4dkaPQviGNYL4EaNMbhdRe5oY2BcegTjVkOu4C 6FVi1CajvIPhDYH8jbQR1uRVb4F+My/m/b6/cz+lVIUatFxqI/fYWCS45Z/Jx/0s rlYQHGMY5zbIe/VIgBQ+if3sQvH8823sMFPAcWNdrwz/9PsVxm7v53ONIBXCZiGg o7efYVCtj+aKYQTPRHv8w431cc7ysFw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:09 2025 by rpki-client