$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa File: 4f7fc206-638d-3fed-8702-51154262e297.roa (raw, json) Hash identifier: T+/W+Oqcq9YGYypJGlYBC8ilzTFXjUcq9dYGKw3lBIg= Subject key identifier: 4E:68:06:F6:C3:49:EA:4B:69:E8:B0:85:59:E7:21:33:E0:77:FB:A8 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F432858495ABECB720F91D86E4E92EC80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 14618 IP address blocks: 147.124.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:cb:72:0f:91:d8:6e:4e:92:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=f09e4cc2-ddcf-44e0-bdfd-ad982a64afdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:d0:29:a5:18:fc:7b:dc:16:96:c9:37:c3: 71:10:d7:3e:fa:07:13:22:04:88:4e:79:88:36:86: 66:d4:09:da:0f:b8:66:7f:46:bc:46:39:49:78:1a: 1e:fb:9a:31:c8:70:ca:66:4d:48:f6:41:23:88:0e: 66:e9:8d:20:d5:d6:ee:b1:10:da:96:da:98:2a:fb: 0d:ab:17:8a:40:10:17:d4:01:9d:70:65:70:79:23: fa:87:67:6b:82:82:1a:58:1e:47:30:93:76:5a:b3: b3:9d:df:9f:22:74:9d:a2:4f:f5:b8:42:3b:74:d5: 49:62:e6:37:fa:f6:e9:06:ac:fc:44:c7:7f:f9:44: c1:a0:1e:94:0f:87:de:60:58:1b:07:46:f9:6f:a7: 04:99:bf:ec:ba:bd:db:b3:f1:1a:1a:35:c9:a5:dd: 51:2b:f4:2a:11:8d:d9:2a:bb:cb:8a:6d:ea:62:32: e8:95:e5:f9:3e:9b:82:a3:76:66:0f:ec:6f:d6:60: b9:5a:96:37:cb:27:f0:4f:e1:9f:a8:da:31:bc:ad: 4f:db:65:10:cf:74:9a:f6:d3:45:89:17:70:db:5d: 6e:06:64:47:1c:9a:53:0c:8b:a0:72:0f:e0:b9:e0: d8:24:25:ca:b9:c6:a3:b8:bc:f5:15:45:4c:1a:06: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:68:06:F6:C3:49:EA:4B:69:E8:B0:85:59:E7:21:33:E0:77:FB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:36:39:c2:8c:41:7f:d5:3c:04:27:af:6e:59:c8:c2:68:b2: 5c:56:fe:0f:2e:52:98:bc:5f:42:c7:1c:79:a0:81:50:81:ff: dc:57:b4:0d:0f:3f:5f:6d:2f:25:58:23:48:e5:9a:4f:c8:90: 32:99:29:67:73:6b:f6:f6:4a:a3:ac:a7:ba:d3:0e:56:ba:53: a0:84:af:81:31:32:8c:ce:42:df:8e:e3:a2:b9:cb:5b:32:75: ab:c9:fa:c0:d0:7c:92:62:5d:0c:8d:9e:23:94:9d:c4:7d:84: 5a:b7:3f:46:6e:27:d0:23:07:6c:60:9b:75:34:2c:8b:e7:db: 19:9e:c2:1b:33:58:77:ce:d5:c1:1f:b9:14:01:5c:af:ff:01: 68:8b:86:f4:38:ba:4b:99:41:ad:36:9b:41:57:bf:75:57:15: b1:f7:36:57:b6:71:32:5d:06:d6:a2:ed:c3:37:48:f9:6e:52: 8e:74:14:21:5f:83:a6:3f:58:56:02:33:d6:65:dc:c2:b9:18: 6d:0e:13:a2:ba:98:ba:9d:c3:44:a2:e7:34:25:fd:c0:69:48: 15:14:39:90:59:31:f4:5e:88:c8:54:f4:eb:40:32:b0:68:52: fa:ed:c4:b9:1b:4e:ca:26:56:f7:ca:05:8b:ff:6d:23:8d:77: ae:f9:53:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavstyD5HYbk6S7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZjA5ZTRjYzItZGRjZi00NGUwLWJkZmQtYWQ5ODJhNjRhZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPvQKaUY/HvcFpbJN8NxENc++gcTIgSITnmI NoZm1AnaD7hmf0a8RjlJeBoe+5oxyHDKZk1I9kEjiA5m6Y0g1dbusRDaltqYKvsN qxeKQBAX1AGdcGVweSP6h2drgoIaWB5HMJN2WrOznd+fInSdok/1uEI7dNVJYuY3 +vbpBqz8RMd/+UTBoB6UD4feYFgbB0b5b6cEmb/sur3bs/EaGjXJpd1RK/QqEY3Z KrvLim3qYjLoleX5PpuCo3ZmD+xv1mC5WpY3yyfwT+GfqNoxvK1P22UQz3Sa9tNF iRdw211uBmRHHJpTDIugcg/gueDYJCXKucajuLz1FUVMGgZm3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5oBvbDSepLaeiwhVnnITPgd/uoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNGY3ZmMyMDYtNjM4ZC0z ZmVkLTg3MDItNTExNTQyNjJlMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU2OcKMQX/VPAQnr25ZyMJoslxW/g8uUpi8X0LHHHmggVCB/9xXtA0P P19tLyVYI0jlmk/IkDKZKWdza/b2SqOsp7rTDla6U6CEr4ExMozOQt+O46K5y1sy davJ+sDQfJJiXQyNniOUncR9hFq3P0ZuJ9AjB2xgm3U0LIvn2xmewhszWHfO1cEf uRQBXK//AWiLhvQ4ukuZQa02m0FXv3VXFbH3Nle2cTJdBtai7cM3SPluUo50FCFf g6Y/WFYCM9Zl3MK5GG0OE6K6mLqdw0Si5zQl/cBpSBUUOZBZMfReiMhU9OtAMrBo UvrtxLkbTsomVvfKBYv/bSONd675U4Q= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:02 2025 by rpki-client