$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa File: d1caff1b-70a2-3f40-9325-7d12bd836408.roa (raw, json) Hash identifier: ujDCP+agnTrPYC9yImxxefyFReVbUi6BrtkyjCS5tsk= Subject key identifier: A3:84:F8:92:2E:3D:86:87:70:8E:68:20:A1:3A:60:21:27:66:0B:E4 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849E91FA4264FD6C23E4DDE7040 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 396982 IP address blocks: 147.124.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a4:26:4f:d6:c2:3e:4d:de:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=ff6ed9d7-392c-418d-b893-ee6fa6173c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:ca:a3:2e:82:78:89:4e:81:f5:d7:7e:b5: 55:55:a8:d0:ad:ab:7f:0b:f1:73:4d:17:ff:85:4d: 52:24:66:00:a8:ab:1d:1d:77:8b:c6:5f:45:0e:c8: 1d:0c:db:ea:96:a8:c3:0d:cf:5e:df:de:6c:8b:cd: d6:6e:20:f0:0d:c4:5d:80:1a:c4:4d:a4:c1:3d:2a: eb:31:52:e7:83:fc:6b:6e:32:96:1e:e5:98:cb:03: 6c:ec:bf:78:b7:6b:d6:54:78:9d:0d:6a:bd:e4:6d: 5f:74:6b:4f:53:27:0e:17:e0:ed:48:03:25:83:26: 19:e2:94:4b:ea:c1:f1:af:c8:6b:d8:25:43:94:0e: 90:cd:2d:70:ad:28:67:21:a8:d6:8b:52:76:46:0b: 26:a1:0f:8c:5b:77:07:bc:fe:aa:ff:26:52:c2:69: fb:97:77:03:75:2b:84:22:1b:e4:af:4e:5d:b7:47: c3:8c:5e:fb:4b:c9:d0:c7:69:a8:85:a1:b1:16:03: a2:fb:d9:5d:68:79:09:ea:0c:81:f1:9e:bc:cc:44: 2d:17:cb:fa:34:4b:56:1d:9f:4c:2c:68:c7:ff:59: 04:ca:ec:64:38:12:42:1d:aa:3f:58:fd:40:57:ed: 67:ee:08:5d:1a:b6:85:30:30:f4:a0:6e:78:88:47: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:F8:92:2E:3D:86:87:70:8E:68:20:A1:3A:60:21:27:66:0B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:85:79:5d:3e:19:55:c1:db:1c:01:bc:0d:41:ac:43:df:9c: 98:3c:8b:03:9f:1e:02:5a:87:a7:f1:56:10:90:58:8c:fc:56: a6:d3:65:1d:17:d1:52:03:f3:84:29:1c:8d:bf:a0:06:16:31: 7d:db:d3:11:d0:11:27:30:bb:13:d8:f8:e1:90:da:2a:c9:da: 7c:7d:ed:83:80:63:40:51:d4:f9:9e:c3:b4:6b:30:43:84:3d: 32:cb:3e:85:c8:a7:55:ac:05:63:79:d0:46:a4:d9:86:29:60: a9:6b:8b:bb:fe:ed:c4:b8:4d:44:26:80:9f:0d:24:4d:91:15: 17:e1:bc:83:d3:69:52:41:39:01:3a:e2:6d:73:b0:7d:2f:2c: c3:c2:2d:87:46:60:73:08:e3:6a:a6:60:a0:05:31:bb:04:18: d6:60:75:e8:42:7f:3b:20:3e:f1:7b:a4:22:e1:4c:84:a1:65: a4:f2:c2:b6:3f:5b:fe:36:a2:bd:71:a7:a7:b4:92:7a:a0:95: 23:4d:4e:a3:ae:77:fb:8b:39:4a:15:0d:8c:a9:58:0c:d4:01: ba:72:43:9b:d8:12:ee:3a:e8:99:7a:e2:a3:7a:3e:df:1b:c8: 57:6a:c1:50:54:ed:a1:0b:23:bc:79:96:09:38:cc:a9:6f:09: da:e9:5f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6QmT9bCPk3ecEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZmY2ZWQ5ZDctMzkyYy00MThkLWI4OTMtZWU2ZmE2MTczYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYfKoy6CeIlOgfXXfrVVVajQrat/C/FzTRf/ hU1SJGYAqKsdHXeLxl9FDsgdDNvqlqjDDc9e395si83WbiDwDcRdgBrETaTBPSrr MVLng/xrbjKWHuWYywNs7L94t2vWVHidDWq95G1fdGtPUycOF+DtSAMlgyYZ4pRL 6sHxr8hr2CVDlA6QzS1wrShnIajWi1J2RgsmoQ+MW3cHvP6q/yZSwmn7l3cDdSuE Ihvkr05dt0fDjF77S8nQx2mohaGxFgOi+9ldaHkJ6gyB8Z68zEQtF8v6NEtWHZ9M LGjH/1kEyuxkOBJCHao/WP1AV+1n7ghdGraFMDD0oG54iEdk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOE+JIuPYaHcI5oIKE6YCEnZgvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDFjYWZmMWItNzBhMi0z ZjQwLTkzMjUtN2QxMmJkODM2NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaFeV0+GVXB2xwBvA1BrEPfnJg8iwOfHgJah6fxVhCQWIz8VqbTZR0X 0VID84QpHI2/oAYWMX3b0xHQEScwuxPY+OGQ2irJ2nx97YOAY0BR1Pmew7RrMEOE PTLLPoXIp1WsBWN50Eak2YYpYKlri7v+7cS4TUQmgJ8NJE2RFRfhvIPTaVJBOQE6 4m1zsH0vLMPCLYdGYHMI42qmYKAFMbsEGNZgdehCfzsgPvF7pCLhTIShZaTywrY/ W/42or1xp6e0knqglSNNTqOud/uLOUoVDYypWAzUAbpyQ5vYEu466Jl64qN6Pt8b yFdqwVBU7aELI7x5lgk4zKlvCdrpX3M= -----END CERTIFICATE-----Generated at Sun Jun 15 05:03:01 2025 by rpki-client