$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa File: c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa (raw, json) Hash identifier: R/yOKkkaIl3mMsbc2FWaYJ0igt2tbaNKMmC4z1vG2ps= Subject key identifier: 9C:5F:2D:AC:1D:5D:39:E3:D7:31:F0:53:F2:6B:27:A1:A9:5D:11:C4 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584A119AA6A9E3D6773737564480 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 147.124.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a6:a9:e3:d6:77:37:37:56:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=43f26b64-4d90-48a2-9bcc-51c45377fb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:2a:66:45:79:36:bb:1d:75:c0:df:19:3d: 39:fd:eb:b5:c8:d9:d3:0a:db:65:cf:ca:09:2c:19: 19:79:20:f5:c8:eb:52:b1:31:ec:02:84:c1:91:ab: d5:06:78:83:27:03:9b:b8:39:92:dd:fb:fd:97:4e: 74:14:41:0d:53:29:60:45:f7:c2:74:11:f2:a4:d2: a9:57:01:f9:26:4c:3d:87:30:65:b6:ea:7f:b0:5b: 0d:7e:d9:fd:b0:24:d2:d1:4d:b6:1b:c8:a8:42:81: d2:15:9a:db:d7:c1:f3:2a:d9:d3:79:1f:8f:27:fb: 65:e0:c4:87:7f:a2:a9:cc:88:29:dd:1f:75:a6:87: 06:4d:1e:08:1c:67:96:e3:a7:91:ae:9a:01:83:e1: cc:f3:f4:51:1c:20:8b:a0:15:38:8c:d4:52:1e:dc: 65:15:2a:7b:7a:f0:66:3f:cb:4b:fe:ba:e7:6a:5a: ee:44:70:8f:df:4f:41:39:18:85:61:da:53:c8:7c: c6:73:49:e3:ec:67:ea:96:a9:68:03:b0:ba:b6:1e: d7:1f:7f:5b:8d:d4:4e:54:96:ad:b0:94:b8:15:f2: 4c:fc:49:29:06:c1:6c:9e:f2:d5:25:1d:3d:05:0b: 2d:33:e5:7d:b1:a1:73:ae:0a:69:29:0f:d5:c9:66: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5F:2D:AC:1D:5D:39:E3:D7:31:F0:53:F2:6B:27:A1:A9:5D:11:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/c60caaeb-4d6d-3e7d-8543-d8743f33f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ad:c7:b4:1c:93:7c:06:3f:f4:d0:b8:d2:23:9a:2c:6d:95: 09:83:47:53:39:d0:e5:7b:f7:db:ad:9c:4d:ee:eb:85:f7:0a: 17:bc:31:07:8e:98:5f:ce:1b:42:97:b3:bb:dc:19:be:81:31: 82:cf:8d:b1:1c:ed:f0:ab:ee:0d:c3:2d:89:b5:12:68:80:91: d8:e0:07:1c:0b:79:0c:ad:74:d6:2e:3a:f3:90:da:ec:10:44: e8:55:54:8b:ae:a2:f1:e6:0b:03:49:eb:75:bc:29:68:4d:06: 86:68:da:c1:21:a9:dd:c8:e4:30:a0:eb:80:3d:b4:9d:f3:82: 73:ec:54:42:56:fe:eb:2b:6b:02:8f:33:f3:a8:47:ce:9e:d7: 3f:98:40:39:b1:5b:9c:6e:1a:e4:f1:84:f4:bf:5f:cb:d5:75: 49:fe:0e:4a:84:6f:4f:de:6d:94:64:9c:b0:03:5f:40:5e:d2: cc:66:e0:5c:ac:1d:81:25:47:f3:3f:a6:ab:ee:84:e0:bf:df: bd:c9:e2:e8:aa:94:ca:ff:3c:0b:72:e6:50:ee:41:90:bb:7c: 8d:54:2b:df:41:06:52:72:2a:24:93:71:5d:08:bc:ab:1d:77: d9:f9:5e:c0:50:aa:31:85:f7:40:05:8b:54:35:cb:09:b8:c3: 08:9f:d5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqap49Z3NzdWRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NDNmMjZiNjQtNGQ5MC00OGEyLTliY2MtNTFjNDUzNzdmYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybQqZkV5NrsddcDfGT05/eu1yNnTCttlz8oJ LBkZeSD1yOtSsTHsAoTBkavVBniDJwObuDmS3fv9l050FEENUylgRffCdBHypNKp VwH5Jkw9hzBltup/sFsNftn9sCTS0U22G8ioQoHSFZrb18HzKtnTeR+PJ/tl4MSH f6KpzIgp3R91pocGTR4IHGeW46eRrpoBg+HM8/RRHCCLoBU4jNRSHtxlFSp7evBm P8tL/rrnalruRHCP309BORiFYdpTyHzGc0nj7GfqlqloA7C6th7XH39bjdROVJat sJS4FfJM/EkpBsFsnvLVJR09BQstM+V9saFzrgppKQ/VyWbEtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxfLawdXTnj1zHwU/JrJ6GpXRHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYzYwY2FhZWItNGQ2ZC0z ZTdkLTg1NDMtZDg3NDNmMzNmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACitx7Qck3wGP/TQuNIjmixtlQmDR1M50OV799utnE3u64X3Che8MQeO mF/OG0KXs7vcGb6BMYLPjbEc7fCr7g3DLYm1EmiAkdjgBxwLeQytdNYuOvOQ2uwQ ROhVVIuuovHmCwNJ63W8KWhNBoZo2sEhqd3I5DCg64A9tJ3zgnPsVEJW/usrawKP M/OoR86e1z+YQDmxW5xuGuTxhPS/X8vVdUn+DkqEb0/ebZRknLADX0Be0sxm4Fys HYElR/M/pqvuhOC/373J4uiqlMr/PAty5lDuQZC7fI1UK99BBlJyKiSTcV0IvKsd d9n5XsBQqjGF90AFi1Q1ywm4wwif1RE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:09:43 2025 by rpki-client