$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa File: 907eb120-fd28-3e62-bc45-055d0743dc4a.roa (raw, json) Hash identifier: cG7Lne0pD7SRkPSrZSUrj6hueaRPzJFGRZhYzQRBEtQ= Subject key identifier: 2F:3F:92:57:7A:B2:1A:82:B2:47:12:D9:0A:34:90:F3:CC:1F:D9:22 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285848C2B64EF0A59E549D67404F80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 147.124.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4e:f0:a5:9e:54:9d:67:40:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=c8f937b1-1dba-4909-9868-96482d15c3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:28:62:ed:d0:2c:39:6b:19:2c:70:60:a8: 77:ff:98:53:12:71:7a:c3:66:60:cd:4a:c4:43:f7: 61:40:de:fe:52:15:8e:14:3e:61:8d:17:17:6b:41: 92:89:8d:84:f6:43:24:3d:74:ee:7a:88:bb:44:5b: c1:05:1d:c3:50:cf:c2:89:8c:c8:a2:0a:7a:48:b2: 64:69:3c:a4:b9:32:6b:0f:5c:1a:7b:aa:d2:68:03: ea:3f:d7:ea:2e:ed:d4:57:e9:64:af:fe:e3:45:aa: f5:72:d9:3b:02:87:8b:51:95:fe:fb:62:6d:f4:e5: 95:6f:4a:0e:54:3c:6d:a9:dd:eb:14:11:f2:a3:f9: a8:9e:05:20:2a:e4:18:c3:35:14:8d:f8:d5:a5:7d: 7c:fd:36:27:2e:93:93:3f:a4:d7:16:e9:00:03:3c: 2a:43:19:e4:23:5b:7a:97:76:31:71:01:17:31:54: 38:6b:dc:82:e4:5b:90:1a:97:55:a1:21:ae:d9:c5: 96:2f:2c:0d:f7:6f:2a:70:5c:7b:32:0a:70:d4:bb: 8d:dd:85:ce:22:c3:a0:07:65:09:11:b8:7e:ee:1d: c1:87:31:ac:f6:51:43:80:b0:d6:55:8b:da:bb:fe: 1d:00:07:16:21:55:89:d6:67:9c:03:77:f6:a8:6f: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3F:92:57:7A:B2:1A:82:B2:47:12:D9:0A:34:90:F3:CC:1F:D9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/907eb120-fd28-3e62-bc45-055d0743dc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9f:77:e5:d9:28:ae:d3:ac:4d:0c:4d:f4:4d:29:82:d1:d3: a1:33:ed:a0:c0:9e:31:75:2e:eb:9d:1f:b5:fa:43:a9:6c:25: b3:b1:a1:a9:e2:c6:ec:ac:a0:b1:7a:b1:a6:dd:bd:08:57:b2: 2c:c1:d8:7f:19:8a:bf:3c:55:20:b5:cf:0d:4c:b4:b1:cc:c6: da:cd:8c:2b:7f:04:c3:f0:2b:bb:01:e1:f6:e2:75:ed:9d:24: df:d0:37:f7:9b:77:1a:16:35:1e:a5:62:d4:a4:87:35:08:af: 70:66:1f:7a:a2:73:2e:f6:0f:2d:9a:77:69:33:2b:00:4e:c0: 04:63:0f:58:53:66:76:f8:78:ff:85:47:25:d7:e1:b5:93:a2: e2:61:12:67:36:3e:42:04:45:75:a0:f5:68:c7:7f:d5:5e:7b: 59:ea:f1:2f:93:55:b4:30:60:df:fc:a8:ad:18:1d:f7:79:7e: 0f:75:dc:ca:b5:f9:b9:1b:a1:00:7e:e3:ab:cf:c2:34:65:2e: a7:00:cb:d8:c7:de:4e:06:af:03:24:90:45:a6:ea:a3:f7:f5: 56:d4:c3:59:76:b7:39:1b:bc:ec:8d:6d:a8:f9:f6:37:fc:17: 12:ed:6f:7a:b6:0f:19:26:3d:34:e6:b1:01:0a:91:f5:c2:d0: d5:88:d0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtk7wpZ5UnWdAT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk YzhmOTM3YjEtMWRiYS00OTA5LTk4NjgtOTY0ODJkMTVjM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidEoYu3QLDlrGSxwYKh3/5hTEnF6w2ZgzUrE Q/dhQN7+UhWOFD5hjRcXa0GSiY2E9kMkPXTueoi7RFvBBR3DUM/CiYzIogp6SLJk aTykuTJrD1wae6rSaAPqP9fqLu3UV+lkr/7jRar1ctk7AoeLUZX++2Jt9OWVb0oO VDxtqd3rFBHyo/mongUgKuQYwzUUjfjVpX18/TYnLpOTP6TXFukAAzwqQxnkI1t6 l3YxcQEXMVQ4a9yC5FuQGpdVoSGu2cWWLywN928qcFx7Mgpw1LuN3YXOIsOgB2UJ Ebh+7h3BhzGs9lFDgLDWVYvau/4dAAcWIVWJ1mecA3f2qG/iSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8/kld6shqCskcS2Qo0kPPMH9kiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOTA3ZWIxMjAtZmQyOC0z ZTYyLWJjNDUtMDU1ZDA3NDNkYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2fd+XZKK7TrE0MTfRNKYLR06Ez7aDAnjF1LuudH7X6Q6lsJbOxoani xuysoLF6sabdvQhXsizB2H8Zir88VSC1zw1MtLHMxtrNjCt/BMPwK7sB4fbide2d JN/QN/ebdxoWNR6lYtSkhzUIr3BmH3qicy72Dy2ad2kzKwBOwARjD1hTZnb4eP+F RyXX4bWTouJhEmc2PkIERXWg9WjHf9Vee1nq8S+TVbQwYN/8qK0YHfd5fg913Mq1 +bkboQB+46vPwjRlLqcAy9jH3k4GrwMkkEWm6qP39VbUw1l2tzkbvOyNbaj59jf8 FxLtb3q2DxkmPTTmsQEKkfXC0NWI0Po= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:06 2025 by rpki-client