$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa File: f672a23a-52c5-323e-aded-807a969f9369.roa (raw, json) Hash identifier: elOkv9ymhk43bxzr4tr5VMGaFUbtfTuryvWwwtumTa8= Subject key identifier: B8:98:53:5E:E6:75:BF:9B:6B:0B:31:E0:EA:E4:16:28:5A:F3:E9:40 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584917DC27B4D0C6C00C93BF7B00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:27:b4:d0:c6:c0:0c:93:bf:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=1481bbc1-e4ac-4e29-b820-784833ac7f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:4b:15:bb:b9:d7:e5:61:28:cf:6c:b3:6f: 4f:91:62:f9:5c:2c:b4:2c:90:31:7e:23:04:3d:42: d9:9d:55:44:3a:a0:2a:fb:1a:26:0a:5f:8a:56:0e: 5f:83:6f:9f:4e:80:93:f7:14:1c:8d:5d:b3:0f:f7: 09:35:e7:dd:33:bc:23:74:28:cf:4f:5a:be:e2:30: c8:19:2e:38:62:40:24:b3:4e:77:3f:ea:e4:a8:4e: 3e:18:6c:4d:5b:2f:fc:9b:b6:44:38:6f:23:e2:53: 98:53:28:c0:34:dd:cb:da:21:4d:40:d5:23:20:af: ab:c0:26:d5:fa:95:98:cb:96:d1:37:b3:84:05:e6: 41:5f:08:84:f6:01:26:65:55:05:66:45:b6:b5:b1: de:a6:d9:45:77:66:84:44:bd:d3:1d:3b:39:55:35: b2:0a:f3:88:ec:30:5f:ac:f2:91:dd:bd:a6:97:51: 82:d4:60:74:f4:d4:a8:9a:5c:13:eb:d7:5b:49:57: d4:88:57:c8:02:35:81:41:64:04:53:d5:4b:8e:77: b5:8c:ab:17:b6:5d:a2:b7:36:ab:46:b2:e7:06:fb: d3:75:be:2e:6f:44:be:0a:77:23:66:9e:54:4f:36: 9e:41:bf:99:25:fb:de:cf:bc:ba:5f:83:c8:82:e4: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:53:5E:E6:75:BF:9B:6B:0B:31:E0:EA:E4:16:28:5A:F3:E9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:48:70:1e:6d:eb:68:8a:4b:e6:32:35:e3:45:07:01:6f:9f: d4:94:fe:03:53:f9:72:6c:6b:b9:e0:62:c2:5e:70:cd:f4:87: 62:2c:d0:1c:8e:01:12:79:90:f5:b3:e6:8a:2d:7b:71:84:51: b2:fe:85:36:63:63:70:00:17:d7:bd:29:08:ea:d0:af:c0:28: d4:4d:2c:51:66:d4:71:8e:8e:8f:30:c9:af:1b:5a:88:80:b6: 5a:76:04:f8:8a:6d:e3:dc:46:28:1b:45:e2:72:d0:12:b7:bb: 87:00:88:fb:19:99:cd:b2:8d:7b:a8:40:3c:2c:05:66:58:06: e8:29:91:25:9f:ce:bb:02:67:e4:6d:75:2f:91:1e:7b:0c:79: 7b:13:ee:75:cd:7e:b1:2f:be:ad:35:6d:81:c2:ab:63:25:7b: 17:fe:6d:42:16:6e:0b:85:9c:d1:2e:24:20:e4:c4:5b:1c:95: a4:f5:71:1d:7e:ab:0f:42:22:88:3c:dd:3b:51:97:28:d1:62: cd:c5:7e:39:4b:18:a0:48:79:d0:58:70:fd:16:af:8c:42:46: 0e:48:da:08:23:89:df:0f:4a:11:5e:e9:2a:84:f6:58:5b:e0: 81:f5:0c:97:ca:46:6e:52:ea:78:58:1c:9a:04:41:fc:80:c9: 92:09:61:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Ce00MbADJO/ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MTQ4MWJiYzEtZTRhYy00ZTI5LWI4MjAtNzg0ODMzYWM3ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM5LFbu51+VhKM9ss29PkWL5XCy0LJAxfiME PULZnVVEOqAq+xomCl+KVg5fg2+fToCT9xQcjV2zD/cJNefdM7wjdCjPT1q+4jDI GS44YkAks053P+rkqE4+GGxNWy/8m7ZEOG8j4lOYUyjANN3L2iFNQNUjIK+rwCbV +pWYy5bRN7OEBeZBXwiE9gEmZVUFZkW2tbHeptlFd2aERL3THTs5VTWyCvOI7DBf rPKR3b2ml1GC1GB09NSomlwT69dbSVfUiFfIAjWBQWQEU9VLjne1jKsXtl2itzar RrLnBvvTdb4ub0S+CncjZp5UTzaeQb+ZJfvez7y6X4PIguTggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiYU17mdb+bawsx4OrkFiha8+lAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZjY3MmEyM2EtNTJjNS0z MjNlLWFkZWQtODA3YTk2OWY5MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERIcB5t62iKS+YyNeNFBwFvn9SU/gNT+XJsa7ngYsJecM30h2Is0ByO ARJ5kPWz5oote3GEUbL+hTZjY3AAF9e9KQjq0K/AKNRNLFFm1HGOjo8wya8bWoiA tlp2BPiKbePcRigbReJy0BK3u4cAiPsZmc2yjXuoQDwsBWZYBugpkSWfzrsCZ+Rt dS+RHnsMeXsT7nXNfrEvvq01bYHCq2Mlexf+bUIWbguFnNEuJCDkxFsclaT1cR1+ qw9CIog83TtRlyjRYs3FfjlLGKBIedBYcP0Wr4xCRg5I2ggjid8PShFe6SqE9lhb 4IH1DJfKRm5S6nhYHJoEQfyAyZIJYYY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:27 2025 by rpki-client