$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa File: a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa (raw, json) Hash identifier: 0/vFZg7xo6m1cKsZvMBKz4b9BuI3C3JQ1Xrs8gCtfuw= Subject key identifier: 36:51:A6:3C:E8:E3:F5:A6:EA:A8:2C:84:87:90:68:39:B5:23:55:CF Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849DF5A5CBF7C46F2367B1E0800 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 16509 IP address blocks: 147.124.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5c:bf:7c:46:f2:36:7b:1e:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=f0abbcb9-6d3e-4237-8168-59029c3aeec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:cb:31:0a:46:a5:45:4a:92:fc:b7:65:25: fd:57:68:b9:41:7d:f4:42:2f:ee:41:e4:86:92:69: 0b:c9:1b:08:00:de:32:0e:5d:23:36:08:dd:f6:e3: ea:17:ff:b4:ba:68:ff:80:57:16:4c:34:2a:1f:0b: 29:40:c7:4b:20:1e:ea:cb:34:db:93:d6:96:20:56: 87:c6:01:2f:62:07:40:91:45:19:48:b5:97:b5:f3: 1b:2d:f8:75:f9:73:24:e3:45:ff:c0:fc:86:6a:e1: 3a:9b:23:d4:b3:63:c4:d2:11:31:a4:b7:c6:4d:7b: 2c:07:8e:07:38:18:a9:ae:88:da:68:40:9c:83:c7: 67:63:02:96:09:02:69:00:77:50:63:74:d4:2f:9b: f5:10:e8:1a:02:48:16:fa:44:39:87:02:0a:89:6d: 32:ff:7c:bf:f4:0f:a1:e1:5e:1a:50:6d:97:44:95: 30:8b:5c:8e:5a:4d:df:ba:a7:5f:99:b7:b9:d4:df: 29:29:4a:91:17:0a:6b:70:72:19:31:c4:50:4f:01: cb:93:68:c9:b4:0e:cc:ec:8c:c9:47:37:9f:50:64: 07:e7:64:9e:6e:0d:96:14:5c:27:a2:84:f4:e0:81: 29:ee:17:54:49:34:85:10:ae:c6:a9:c1:3d:c2:12: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:A6:3C:E8:E3:F5:A6:EA:A8:2C:84:87:90:68:39:B5:23:55:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ea:26:d7:28:e8:ed:7c:f3:5c:8b:82:d0:64:10:18:42:8d: 9f:95:29:52:39:8d:6a:09:c1:66:af:80:90:3c:5e:8f:56:ed: 69:e6:80:43:62:2a:13:76:06:aa:ed:dc:ca:97:7b:80:72:9b: 23:dd:fb:d5:80:4f:fe:f5:bf:e4:1f:ef:a0:39:1e:bb:81:2e: 15:45:66:0d:65:11:53:0f:b3:01:5c:03:e9:06:17:3b:57:f1: b9:7f:42:a1:57:08:05:91:42:12:6d:c3:35:e3:46:e3:03:a8: 75:6d:d6:d6:a0:e5:53:fa:21:6c:5f:37:87:ab:8d:6a:bc:ef: 90:00:c8:e0:f8:74:74:14:11:53:8c:f3:69:d2:ef:ba:10:37: 18:7f:36:f0:79:b0:f9:30:77:3e:5f:4e:34:97:10:0a:a2:b4: e3:df:7a:3e:cb:8e:f5:4d:8f:82:c8:09:51:15:61:c7:14:3a: bc:df:14:f0:64:6a:5d:a9:1a:87:1a:c8:77:0d:57:97:f8:d6: 25:9e:c4:d4:51:c1:bd:dc:32:7a:e6:e4:b7:6b:b9:23:45:66: b9:5e:1e:f1:11:c6:6d:d8:ec:e3:31:fd:2b:e9:9d:54:24:5b: c4:b0:aa:14:77:43:26:cf:4a:41:03:df:55:7a:81:71:5e:20: ac:a3:02:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWly/fEbyNnseCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZjBhYmJjYjktNmQzZS00MjM3LTgxNjgtNTkwMjljM2FlZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGnLMQpGpUVKkvy3ZSX9V2i5QX30Qi/uQeSG kmkLyRsIAN4yDl0jNgjd9uPqF/+0umj/gFcWTDQqHwspQMdLIB7qyzTbk9aWIFaH xgEvYgdAkUUZSLWXtfMbLfh1+XMk40X/wPyGauE6myPUs2PE0hExpLfGTXssB44H OBiprojaaECcg8dnYwKWCQJpAHdQY3TUL5v1EOgaAkgW+kQ5hwIKiW0y/3y/9A+h 4V4aUG2XRJUwi1yOWk3fuqdfmbe51N8pKUqRFwprcHIZMcRQTwHLk2jJtA7M7IzJ RzefUGQH52Sebg2WFFwnooT04IEp7hdUSTSFEK7GqcE9whKHkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZRpjzo4/Wm6qgshIeQaDm1I1XPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYTY3ZGMyNWYtZGQzZi0z NTFiLTg2ZDMtMWMzNDdiNThiZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfqJtco6O1881yLgtBkEBhCjZ+VKVI5jWoJwWavgJA8Xo9W7WnmgENi KhN2Bqrt3MqXe4BymyPd+9WAT/71v+Qf76A5HruBLhVFZg1lEVMPswFcA+kGFztX 8bl/QqFXCAWRQhJtwzXjRuMDqHVt1tag5VP6IWxfN4erjWq875AAyOD4dHQUEVOM 82nS77oQNxh/NvB5sPkwdz5fTjSXEAqitOPfej7LjvVNj4LICVEVYccUOrzfFPBk al2pGocayHcNV5f41iWexNRRwb3cMnrm5LdruSNFZrleHvERxm3Y7OMx/SvpnVQk W8SwqhR3QybPSkED31V6gXFeIKyjAtI= -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:58 2025 by rpki-client