$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/61f6adaa-82a4-3895-9926-db7992945d1d.roa File: 61f6adaa-82a4-3895-9926-db7992945d1d.roa (raw, json) Hash identifier: irIrz77VIyEXaziF+QNFnE/DGe/rYzICGIpytakRdTQ= Subject key identifier: 22:A3:06:8C:FE:F2:2A:69:E5:52:33:06:42:FF:6C:ED:04:C8:B1:1D Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584900214B22F03D67325E0CAB00 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/61f6adaa-82a4-3895-9926-db7992945d1d.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 147.124.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4b:22:f0:3d:67:32:5e:0c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=f48003a4-2ed6-4b4c-bf27-5944ff709d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ff:d4:12:d7:2d:ef:84:ba:33:fc:65:48:db: 05:33:ee:34:9b:fc:d0:7f:8f:f7:32:f8:8c:92:4f: 49:77:3a:21:f9:a6:6c:1c:a8:65:63:b9:aa:a8:39: b0:6d:ac:9f:40:68:e2:92:b6:2d:16:4b:83:9c:1c: 87:89:02:d7:e6:65:3f:55:3e:f1:11:1f:87:e2:64: 7a:dd:f3:81:67:a3:b1:fc:b8:0b:ca:d1:16:0e:25: 82:5e:07:b2:54:d8:ce:2f:52:ff:d7:0b:3a:f9:f1: 27:8e:ae:fb:3a:b4:a6:80:62:3d:03:bf:f7:f7:b3: 29:17:f4:29:c0:5d:0f:17:12:ce:8e:66:5f:81:2d: 60:81:b1:4d:15:c5:ba:51:33:46:d8:1a:36:52:a2: 8c:7f:78:48:27:6a:b5:de:bc:d1:23:61:df:cc:7d: c6:3f:0f:6e:30:a7:70:1d:20:78:8c:98:da:b3:81: 1a:49:9a:1e:27:a5:b8:b9:51:a4:db:50:10:af:8b: 36:d2:89:30:04:2d:04:71:5a:cf:5b:b6:d8:e2:47: 80:7d:8a:b5:02:51:55:02:ca:01:1e:a7:0e:1e:2c: 24:7d:72:9c:f8:c6:1a:89:15:db:85:21:61:14:db: c3:35:e8:6d:11:52:b5:c0:de:03:2f:f0:53:95:ea: cd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A3:06:8C:FE:F2:2A:69:E5:52:33:06:42:FF:6C:ED:04:C8:B1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/61f6adaa-82a4-3895-9926-db7992945d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fa:c7:09:26:d0:67:ef:83:db:35:c9:fc:07:25:91:2e:e8: 44:3d:43:65:ef:79:b2:de:8d:10:c0:06:25:36:71:93:de:d0: 3d:1b:38:b9:d9:e4:81:05:9a:ef:24:7f:6c:ef:f5:a0:85:fd: 76:f6:ae:0f:1c:b7:d6:cb:67:b6:b4:19:47:56:00:4d:93:8e: 4b:8a:4a:62:13:af:b3:e3:1b:e6:c8:3f:a7:1a:2b:8b:2a:59: 80:8e:6d:a0:e1:05:88:f3:ed:1c:c5:6f:ab:9d:6d:7a:ee:7b: a1:7d:6e:7c:a9:61:e4:b2:8e:4f:d7:fd:26:15:a8:de:4e:21: 25:d1:12:4c:e3:5c:0b:99:a7:54:28:69:96:4b:70:97:fd:78: 9a:35:b0:77:22:de:9d:72:93:b8:18:84:53:d3:cf:ca:33:d7: 93:46:4f:3a:04:20:e2:5f:8b:4d:09:56:97:ed:12:33:10:62: 74:66:53:64:2d:6c:aa:61:8d:eb:33:ee:f0:18:9c:d3:16:9d: 6f:82:f8:fb:32:c5:3c:60:bf:b8:63:d9:d3:b2:51:a3:8a:84: 08:1e:26:71:12:52:9a:60:57:77:5c:44:73:d2:37:f7:4d:5b: 2d:67:28:4f:83:a0:c8:d0:bd:59:4b:6c:82:45:ec:c3:b6:5a: 36:23:99:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIUsi8D1nMl4MqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZjQ4MDAzYTQtMmVkNi00YjRjLWJmMjctNTk0NGZmNzA5ZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf/UEtct74S6M/xlSNsFM+40m/zQf4/3MviM kk9Jdzoh+aZsHKhlY7mqqDmwbayfQGjikrYtFkuDnByHiQLX5mU/VT7xER+H4mR6 3fOBZ6Ox/LgLytEWDiWCXgeyVNjOL1L/1ws6+fEnjq77OrSmgGI9A7/397MpF/Qp wF0PFxLOjmZfgS1ggbFNFcW6UTNG2Bo2UqKMf3hIJ2q13rzRI2HfzH3GPw9uMKdw HSB4jJjas4EaSZoeJ6W4uVGk21AQr4s20okwBC0EcVrPW7bY4keAfYq1AlFVAsoB HqcOHiwkfXKc+MYaiRXbhSFhFNvDNehtEVK1wN4DL/BTlerN3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKjBoz+8ipp5VIzBkL/bO0EyLEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNjFmNmFkYWEtODJhNC0z ODk1LTk5MjYtZGI3OTkyOTQ1ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/6xwkm0Gfvg9s1yfwHJZEu6EQ9Q2XvebLejRDABiU2cZPe0D0bOLnZ 5IEFmu8kf2zv9aCF/Xb2rg8ct9bLZ7a0GUdWAE2TjkuKSmITr7PjG+bIP6caK4sq WYCObaDhBYjz7RzFb6udbXrue6F9bnypYeSyjk/X/SYVqN5OISXREkzjXAuZp1Qo aZZLcJf9eJo1sHci3p1yk7gYhFPTz8oz15NGTzoEIOJfi00JVpftEjMQYnRmU2Qt bKphjesz7vAYnNMWnW+C+PsyxTxgv7hj2dOyUaOKhAgeJnESUppgV3dcRHPSN/dN Wy1nKE+DoMjQvVlLbIJF7MO2WjYjmXQ= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:10 2025 by rpki-client