$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa File: 907eb120-fd28-3e62-bc45-055d0743dc4a.roa (raw, json) Hash identifier: 4LP3dt7dnfZ8UcCtza/9jjRw6nAwfNtzeCc+rqbL90U= Subject key identifier: 9C:97:F5:1C:88:92:53:7E:84:59:06:8D:AC:B9:FB:FB:67:5A:41:52 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849A1EF73EA266ECB00FCB6DA60 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 147.124.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:73:ea:26:6e:cb:00:fc:b6:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=bf648c7d-3d0b-43c9-881c-d1b62d4ea63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:81:ac:16:16:65:06:b1:06:1a:a0:c4:d3: 83:a9:df:72:64:80:62:bb:0f:42:55:1c:2a:c4:4a: b7:2b:b1:77:71:36:9a:20:ba:2e:99:8b:db:fa:51: 02:62:2e:c1:a6:7f:6e:26:38:29:b8:f0:ae:34:6f: 23:2c:47:65:a1:d5:24:6a:33:d4:2e:73:36:f4:ec: 90:db:c4:f9:52:75:96:f4:84:d4:39:d7:ff:2b:07: 0d:00:27:18:11:e4:72:6b:43:af:99:9f:4e:b6:be: 4e:3e:33:ad:d7:dc:dd:e9:9e:49:82:e0:e6:fa:0d: 2a:a7:35:b6:0a:41:18:0b:67:2e:cf:79:31:83:2a: 4f:df:f1:8b:68:cd:bf:e6:af:86:de:49:80:61:f5: ec:1c:0e:48:64:5d:cb:e3:1b:9c:c0:92:45:d0:7f: 6f:33:b2:ee:25:44:42:bf:72:a2:e1:dd:cd:e3:da: 83:27:e1:4e:45:9c:31:02:1d:02:89:30:65:3c:2f: 89:32:3e:de:71:be:6a:d5:6b:b1:80:b6:97:0e:00: 66:98:8e:0d:7e:15:8f:93:a0:1a:00:10:03:be:ac: a7:cf:b7:da:f7:dc:96:12:ad:e0:a2:5b:08:40:67: eb:79:86:08:43:19:fb:f8:c9:99:a4:29:83:28:40: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:97:F5:1C:88:92:53:7E:84:59:06:8D:AC:B9:FB:FB:67:5A:41:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7d:55:a8:6b:db:e7:fe:9a:d0:84:31:ff:5c:fc:2b:fc:48: 8a:b4:83:28:4f:9f:42:f8:35:9f:e1:9c:5a:4f:d0:c7:7f:dd: 18:8e:c0:51:98:71:52:e8:60:b1:88:8e:86:65:07:8d:2b:fd: e1:38:3e:c1:bb:aa:cf:e4:04:92:0b:a9:d4:4c:22:70:35:f8: aa:21:34:cd:a5:f4:83:d5:da:64:5e:fd:6c:30:8c:c3:df:6b: b6:47:10:95:97:08:12:1a:8d:67:5b:d0:5f:7d:21:f3:ff:b5: 58:79:0b:a3:ec:38:65:da:e0:9c:f2:9c:7f:99:ea:90:9d:df: 98:99:00:f6:ae:b5:c4:94:92:f7:eb:b9:99:21:6c:e8:ed:08: 19:85:fc:7f:ca:b1:17:46:67:a3:c5:dd:70:bd:fc:68:62:60: 1d:d5:d3:e4:67:2e:e2:45:bc:3e:ca:c7:ba:11:f5:96:32:31: ab:a2:e7:da:fb:33:d0:8c:98:95:4e:47:2d:e5:f0:2e:ee:38: b9:b5:da:45:cd:eb:d9:71:37:a9:93:5e:61:76:3e:e1:a9:9a: a3:34:f9:02:93:17:01:e1:5b:f0:6e:0f:98:67:0c:4f:a1:d5: 0c:e7:3c:ce:87:99:d6:50:09:81:f6:b7:3f:38:89:54:d3:e9: df:f1:cc:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73PqJm7LAPy22mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YmY2NDhjN2QtM2QwYi00M2M5LTg4MWMtZDFiNjJkNGVhNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlROBrBYWZQaxBhqgxNODqd9yZIBiuw9CVRwq xEq3K7F3cTaaILoumYvb+lECYi7Bpn9uJjgpuPCuNG8jLEdlodUkajPULnM29OyQ 28T5UnWW9ITUOdf/KwcNACcYEeRya0OvmZ9Otr5OPjOt19zd6Z5JguDm+g0qpzW2 CkEYC2cuz3kxgypP3/GLaM2/5q+G3kmAYfXsHA5IZF3L4xucwJJF0H9vM7LuJURC v3Ki4d3N49qDJ+FORZwxAh0CiTBlPC+JMj7ecb5q1WuxgLaXDgBmmI4NfhWPk6Aa ABADvqynz7fa99yWEq3golsIQGfreYYIQxn7+MmZpCmDKEDVKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyX9RyIklN+hFkGjay5+/tnWkFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOTA3ZWIxMjAtZmQyOC0z ZTYyLWJjNDUtMDU1ZDA3NDNkYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR9Vahr2+f+mtCEMf9c/Cv8SIq0gyhPn0L4NZ/hnFpP0Md/3RiOwFGY cVLoYLGIjoZlB40r/eE4PsG7qs/kBJILqdRMInA1+KohNM2l9IPV2mRe/WwwjMPf a7ZHEJWXCBIajWdb0F99IfP/tVh5C6PsOGXa4JzynH+Z6pCd35iZAPautcSUkvfr uZkhbOjtCBmF/H/KsRdGZ6PF3XC9/GhiYB3V0+RnLuJFvD7Kx7oR9ZYyMaui59r7 M9CMmJVORy3l8C7uOLm12kXN69lxN6mTXmF2PuGpmqM0+QKTFwHhW/BuD5hnDE+h 1QznPM6HmdZQCYH2tz84iVTT6d/xzNQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:53 2025 by rpki-client