$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa File: f672a23a-52c5-323e-aded-807a969f9369.roa (raw, json) Hash identifier: ZsSOPLpLpwRjtVcr3xKS5JADWEmDSADyACjYUzF/esM= Subject key identifier: 08:AD:1C:DF:10:75:25:6E:FB:B7:DA:D5:42:53:FB:B3:0A:6A:40:A0 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849F715104DEE37B1495E043500 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:10:4d:ee:37:b1:49:5e:04:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=0429c1dd-839f-4152-965a-c14020b4d973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:1a:ed:0d:e9:7c:80:bc:ed:8c:aa:46:b2: d9:18:2c:7c:5f:99:13:f0:41:1f:8a:df:7b:aa:1c: 5d:02:e9:6a:f2:c2:90:e0:b7:42:6e:cb:1b:e4:be: 9a:69:df:00:2e:09:7b:c5:4e:bd:4b:be:64:29:01: ab:6b:55:46:b4:11:49:9f:cf:07:ba:54:6b:bc:83: 0c:02:c1:af:e3:a9:6e:2f:46:3b:7f:02:95:5f:b7: e6:9b:f3:9f:b1:66:02:f1:9c:02:76:a6:b4:6c:fb: a2:7d:92:f8:47:eb:ea:fb:56:3e:91:35:08:4a:09: 96:f1:99:df:bf:db:0c:03:f0:ac:d4:d2:72:dc:d0: 7a:a0:d6:87:60:4f:9f:fb:31:c1:42:61:99:aa:1a: 92:c0:8f:1d:c7:a3:53:02:b6:b9:59:1d:36:03:90: af:cd:51:4c:c0:cb:a7:ef:d9:86:55:47:cb:aa:19: 7f:49:72:72:81:51:ef:29:9b:0c:19:04:f0:2a:ab: fa:ec:b1:61:22:30:85:c0:d8:5c:fc:f6:ba:bd:58: eb:65:54:96:75:fe:2a:4c:73:3a:41:13:8c:57:b7: 98:d6:d4:39:35:4a:82:d6:c2:d7:79:18:44:ed:4d: 00:9a:8b:9c:f7:a3:d6:c6:96:cd:c9:3b:a5:bf:0d: 05:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AD:1C:DF:10:75:25:6E:FB:B7:DA:D5:42:53:FB:B3:0A:6A:40:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c4:1c:4e:f8:81:03:c8:1a:a8:8d:45:eb:33:85:43:6a:3f: 12:07:cf:13:89:51:2a:4a:f9:ff:ca:54:27:31:ba:41:1a:e0: 6f:45:a1:9f:82:e0:61:b1:86:3f:b4:6b:67:d1:fb:6b:88:2c: c8:6f:6e:60:32:29:ef:0e:b4:ee:90:17:ad:a2:69:ae:4a:c3: 4a:77:cc:33:a6:8e:4c:46:90:50:d4:5d:0a:3c:69:0d:2d:ec: 2a:0c:f6:da:52:11:0e:2e:82:91:be:33:04:fc:00:12:f7:c7: 0b:c2:1e:5a:0f:30:1d:f4:f0:7c:25:5b:54:2c:72:a7:bd:01: e1:8a:94:58:99:da:dd:2d:c2:15:65:04:49:2b:98:95:7c:f4: 7d:e9:6a:cf:d6:70:c7:24:15:99:53:05:0b:7b:f3:05:f8:8d: 67:1f:35:95:be:60:c9:6c:a8:9f:81:16:c1:1b:04:8c:c7:23: 5a:2f:a7:23:70:90:02:fd:40:f2:f3:13:55:35:c8:cc:d1:6b: 07:a3:6d:11:f5:5c:c3:f4:2f:4f:80:24:7b:8c:4d:47:1f:4d: a7:38:6c:7b:05:aa:17:72:4b:ce:b1:4a:f2:2d:07:8d:ab:49: 6b:89:e7:9e:c0:01:d3:fa:1c:6b:a8:77:42:9c:03:3e:a6:30: d4:9c:06:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRBN7jexSV4ENQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MDQyOWMxZGQtODM5Zi00MTUyLTk2NWEtYzE0MDIwYjRkOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKoa7Q3pfIC87YyqRrLZGCx8X5kT8EEfit97 qhxdAulq8sKQ4LdCbssb5L6aad8ALgl7xU69S75kKQGra1VGtBFJn88HulRrvIMM AsGv46luL0Y7fwKVX7fmm/OfsWYC8ZwCdqa0bPuifZL4R+vq+1Y+kTUISgmW8Znf v9sMA/Cs1NJy3NB6oNaHYE+f+zHBQmGZqhqSwI8dx6NTAra5WR02A5CvzVFMwMun 79mGVUfLqhl/SXJygVHvKZsMGQTwKqv67LFhIjCFwNhc/Pa6vVjrZVSWdf4qTHM6 QROMV7eY1tQ5NUqC1sLXeRhE7U0Amouc96PWxpbNyTulvw0FiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAitHN8QdSVu+7fa1UJT+7MKakCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZjY3MmEyM2EtNTJjNS0z MjNlLWFkZWQtODA3YTk2OWY5MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfEHE74gQPIGqiNReszhUNqPxIHzxOJUSpK+f/KVCcxukEa4G9FoZ+C 4GGxhj+0a2fR+2uILMhvbmAyKe8OtO6QF62iaa5Kw0p3zDOmjkxGkFDUXQo8aQ0t 7CoM9tpSEQ4ugpG+MwT8ABL3xwvCHloPMB308HwlW1Qscqe9AeGKlFiZ2t0twhVl BEkrmJV89H3pas/WcMckFZlTBQt78wX4jWcfNZW+YMlsqJ+BFsEbBIzHI1ovpyNw kAL9QPLzE1U1yMzRawejbRH1XMP0L0+AJHuMTUcfTac4bHsFqhdyS86xSvItB42r SWuJ557AAdP6HGuod0KcAz6mMNScBvE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:41:28 2025 by rpki-client