$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa File: 5ebc4dd4-b087-3087-9536-69f180128162.roa (raw, json) Hash identifier: UD+P66TqFPGQN62Q61ZLeyJuT3x67qLT0qNC0uANX8A= Subject key identifier: 2A:00:F2:24:17:3A:BC:C3:53:4B:25:D1:7F:A1:66:38:95:4C:38:AE Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285848705AFDF55205D19BC8D4CBA0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fd:f5:52:05:d1:9b:c8:d4:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=7636d79a-c7e0-4775-92a1-cef658e83e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7f:15:4d:4e:cf:1e:30:38:46:ca:85:85:a2: 3a:4f:52:6b:de:91:b2:b1:9a:56:e9:97:db:89:f2: 29:46:95:7c:6f:bd:2e:f1:9a:82:92:7f:a5:0f:95: f7:97:21:05:e9:a8:57:8b:30:04:71:81:fa:61:63: f7:bd:d7:33:a5:ff:73:62:3c:82:60:8f:46:1e:6d: b1:80:b8:e2:0a:de:f7:e0:fa:7f:60:2c:76:4a:30: c4:fb:89:dc:b5:07:ea:0f:29:02:ad:44:7b:ba:06: a1:da:bd:c0:61:14:8b:aa:91:fa:64:5a:51:32:09: 66:55:b4:fd:45:a0:db:f1:79:73:bd:4e:19:19:e5: 78:be:39:3a:45:e1:61:1b:d4:18:f8:d6:e8:c2:95: 24:3c:e7:8b:78:ee:f2:c5:e0:45:a3:52:a3:2c:6e: cf:76:f3:63:c1:be:76:22:c3:9a:28:a3:2d:09:cb: d7:44:34:4e:80:70:9d:02:8b:df:4f:09:72:7b:b4: 61:25:29:90:01:ce:6b:c6:fe:80:59:43:46:49:8a: 20:7b:e2:71:f9:c7:1c:29:f4:79:b4:db:f0:a1:51: c5:4e:c2:85:ed:0a:9e:31:80:8a:d0:4f:77:37:60: 23:e7:61:d6:15:65:61:ea:19:7f:1d:ce:3b:e3:81: 08:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:F2:24:17:3A:BC:C3:53:4B:25:D1:7F:A1:66:38:95:4C:38:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5ebc4dd4-b087-3087-9536-69f180128162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ce:53:60:c0:63:d9:88:ea:e1:95:3f:dd:47:97:6f:81:04: ba:e2:03:84:23:0f:73:cf:20:79:76:fb:2e:be:05:cd:0d:01: e6:d8:9c:81:a3:00:e5:6c:3c:f4:fa:cf:b0:8c:21:58:30:4e: 33:46:9d:25:6e:cf:66:8f:e4:c7:1f:0a:24:96:46:65:c3:38: 04:1d:a6:f8:50:7a:7d:a9:53:e3:e2:68:1c:01:c3:67:ab:c4: 7e:38:f4:62:5d:37:47:c8:15:03:d6:36:17:11:f8:6d:a0:00: e5:5b:ef:cb:ba:29:22:c5:9e:b5:ea:1a:3c:09:e2:65:4a:b1: 79:81:ea:99:ce:01:45:bb:85:dd:b0:62:e9:ef:91:60:f0:0d: 0d:65:72:41:9f:a5:22:f4:f8:e0:04:6d:9f:97:22:40:8e:51: 1a:92:04:e4:c9:76:a4:3a:43:cf:cc:43:0b:92:cf:b9:05:60: 5a:f8:ea:88:a4:2c:93:ef:f0:c7:48:b6:8c:60:0e:ca:fd:85: 41:c0:31:5a:2c:e1:1b:91:fb:37:bf:e5:10:2b:4d:7a:93:37: 58:03:18:55:d1:42:ca:c5:23:d9:9c:cd:9f:cd:32:f2:36:17: 71:fc:f3:39:de:72:da:49:9f:97:7f:cf:54:81:c9:3c:2e:db: 82:45:15:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWv31UgXRm8jUy6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk NzYzNmQ3OWEtYzdlMC00Nzc1LTkyYTEtY2VmNjU4ZTgzZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX8VTU7PHjA4RsqFhaI6T1Jr3pGysZpW6Zfb ifIpRpV8b70u8ZqCkn+lD5X3lyEF6ahXizAEcYH6YWP3vdczpf9zYjyCYI9GHm2x gLjiCt734Pp/YCx2SjDE+4nctQfqDykCrUR7ugah2r3AYRSLqpH6ZFpRMglmVbT9 RaDb8XlzvU4ZGeV4vjk6ReFhG9QY+NbowpUkPOeLeO7yxeBFo1KjLG7PdvNjwb52 IsOaKKMtCcvXRDROgHCdAovfTwlye7RhJSmQAc5rxv6AWUNGSYoge+Jx+cccKfR5 tNvwoVHFTsKF7QqeMYCK0E93N2Aj52HWFWVh6hl/Hc4744EIAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoA8iQXOrzDU0sl0X+hZjiVTDiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNWViYzRkZDQtYjA4Ny0z MDg3LTk1MzYtNjlmMTgwMTI4MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvOU2DAY9mI6uGVP91Hl2+BBLriA4QjD3PPIHl2+y6+Bc0NAebYnIGj AOVsPPT6z7CMIVgwTjNGnSVuz2aP5McfCiSWRmXDOAQdpvhQen2pU+PiaBwBw2er xH449GJdN0fIFQPWNhcR+G2gAOVb78u6KSLFnrXqGjwJ4mVKsXmB6pnOAUW7hd2w YunvkWDwDQ1lckGfpSL0+OAEbZ+XIkCOURqSBOTJdqQ6Q8/MQwuSz7kFYFr46oik LJPv8MdItoxgDsr9hUHAMVos4RuR+ze/5RArTXqTN1gDGFXRQsrFI9mczZ/NMvI2 F3H88znectpJn5d/z1SByTwu24JFFdk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:45 2025 by rpki-client