$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa File: d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa (raw, json) Hash identifier: 9clGHHtV4HAi5cxe8JmrOtmDdwlW5BL2pRscZAJG5rw= Subject key identifier: B3:33:44:D5:C5:D9:51:F5:45:9A:CB:A2:A6:97:E6:43:13:E2:14:66 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F432858494F93ECEC96568B8CEFF1F680 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:ec:ec:96:56:8b:8c:ef:f1:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=002caeaf-1cba-4e83-b708-abe91096fa46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:5d:d7:84:24:78:10:2a:a5:62:91:10:60: cb:16:cc:7b:2b:8b:ed:a2:45:42:5d:c1:0a:b5:67: 45:b9:94:7f:c0:36:ce:de:cb:dc:0f:fc:78:57:89: 41:6c:8d:fb:ce:83:69:90:2c:87:00:97:8f:2c:76: bd:70:de:d4:62:8a:f9:bc:09:24:09:aa:ac:4f:c2: a7:dd:d3:25:5e:1c:2a:8f:5c:22:5f:73:6e:2a:67: 37:ee:72:a4:75:3e:34:13:08:1f:c0:2d:92:22:6b: d5:5f:2b:8e:fe:ed:39:ed:11:c9:92:58:c9:89:7d: 07:4b:7c:7d:5c:cd:b7:5d:79:e9:5a:a7:dd:e8:1c: 45:f8:1e:dd:f1:f1:8b:5e:13:c1:dd:b9:e6:6b:a0: 89:99:44:7c:8b:55:75:97:1e:52:92:06:59:70:29: 76:0b:ac:7a:58:c1:70:b3:d0:8e:01:13:d5:15:d1: b0:cb:c8:4f:71:09:81:2d:b3:7d:7a:19:f5:e6:0f: 23:5a:cc:a3:04:69:67:ee:5a:dd:a6:88:1c:0c:2a: 5e:01:e8:fb:56:1a:7a:de:77:3d:f9:3b:ba:b2:68: f1:fb:9f:a6:fa:89:c5:3e:98:35:a8:1c:e2:00:c3: b5:c7:b1:93:9a:76:64:f8:7e:ef:67:c2:09:62:fb: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:33:44:D5:C5:D9:51:F5:45:9A:CB:A2:A6:97:E6:43:13:E2:14:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:aa:bc:7d:1a:41:c7:cb:f7:dd:20:23:77:68:b3:48:40:9f: c3:18:a8:46:cc:be:26:b3:6e:fa:36:d5:18:61:5d:9c:75:d0: 4c:7d:10:6e:4f:17:de:d1:f7:e7:94:8f:46:cd:93:bc:7a:9e: 41:8a:a1:48:20:bf:2a:ae:a3:62:fc:7c:33:81:b5:b1:6b:c7: 58:83:2d:9a:88:36:44:18:f2:a6:49:4f:69:85:9d:13:ba:de: e9:a2:a1:ba:10:91:0f:8a:48:a7:78:6c:da:55:e4:16:02:5d: e8:2b:74:e7:cf:8d:a6:dc:f8:d8:a7:35:52:82:b9:ce:e1:f6: 0f:b0:da:4b:d3:84:64:d0:1c:83:a0:b8:22:a0:c2:bc:53:3e: c7:5a:9a:af:74:32:21:a0:ba:17:cc:84:7f:bd:e2:ee:3a:7a: 80:e4:fb:64:de:71:c1:36:31:bd:9c:81:89:90:aa:6b:80:6d: 25:7f:5b:4c:e7:92:79:44:e5:9c:24:64:bf:bc:80:74:c7:bf: ef:33:09:07:2b:cb:9e:e0:6b:74:85:8c:57:45:2b:36:d3:35: e4:ad:42:10:ed:23:8c:9b:b6:2b:c8:37:a7:93:b2:5d:ba:b2: 12:1b:01:55:bb:35:d9:50:67:8e:ea:23:3c:43:27:04:17:54: f6:51:20:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+zsllaLjO/x9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk MDAyY2FlYWYtMWNiYS00ZTgzLWI3MDgtYWJlOTEwOTZmYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+1d14QkeBAqpWKREGDLFsx7K4vtokVCXcEK tWdFuZR/wDbO3svcD/x4V4lBbI37zoNpkCyHAJePLHa9cN7UYor5vAkkCaqsT8Kn 3dMlXhwqj1wiX3NuKmc37nKkdT40EwgfwC2SImvVXyuO/u057RHJkljJiX0HS3x9 XM23XXnpWqfd6BxF+B7d8fGLXhPB3bnma6CJmUR8i1V1lx5SkgZZcCl2C6x6WMFw s9COARPVFdGwy8hPcQmBLbN9ehn15g8jWsyjBGln7lrdpogcDCpeAej7Vhp63nc9 +Tu6smjx+5+m+onFPpg1qBziAMO1x7GTmnZk+H7vZ8IJYvvYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMzRNXF2VH1RZrLoqaX5kMT4hRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDdjYjAwOGEtNjlkOS0z MzM1LTk2NGUtNGQxM2M2ZTZmOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqqvH0aQcfL990gI3dos0hAn8MYqEbMviazbvo21RhhXZx10Ex9EG5P F97R9+eUj0bNk7x6nkGKoUggvyquo2L8fDOBtbFrx1iDLZqINkQY8qZJT2mFnRO6 3umioboQkQ+KSKd4bNpV5BYCXegrdOfPjabc+NinNVKCuc7h9g+w2kvThGTQHIOg uCKgwrxTPsdamq90MiGguhfMhH+94u46eoDk+2TeccE2Mb2cgYmQqmuAbSV/W0zn knlE5ZwkZL+8gHTHv+8zCQcry57ga3SFjFdFKzbTNeStQhDtI4ybtivIN6eTsl26 shIbAVW7NdlQZ47qIzxDJwQXVPZRIDs= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:06 2025 by rpki-client