$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa File: a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa (raw, json) Hash identifier: mECrINEWcM/O2kGlixVNfug8qIIa8fSuJccrlLVS7Mo= Subject key identifier: 4F:29:DC:66:FE:B5:6A:86:0C:4A:12:86:A7:74:A7:57:45:12:90:D4 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584900214B09712D5DA9A005B380 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 147.124.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4b:09:71:2d:5d:a9:a0:05:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=9ee2add5-7ea2-4272-bc5e-cb034f2ee334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ba:a0:89:c5:9a:78:15:d9:24:08:a2:e5:bb: f2:b1:c5:e6:96:11:f6:95:c8:b5:9f:45:ca:eb:95: cb:3c:c2:37:09:8a:d4:09:59:23:cb:f5:ca:2b:d3: 81:ce:c8:49:0a:ca:d9:a9:6b:90:8a:8e:18:a3:87: 48:42:74:87:77:5e:0e:6b:a5:ee:e1:b0:5c:8a:dd: 4a:1a:f7:9f:12:76:bf:1f:81:f2:94:d7:5a:79:79: 80:8d:db:ad:ed:84:5e:d1:a5:48:87:e3:a2:4a:2d: 9a:b0:f7:a3:96:f2:44:86:df:55:fd:d1:d2:4e:6d: 1c:61:37:d2:e1:4b:1b:9d:86:86:5b:bc:75:b2:58: ea:54:42:5a:78:b6:7c:44:86:88:b3:79:a4:4b:95: ca:ba:a7:f1:c9:c2:0b:98:67:e0:2a:84:04:f0:78: c0:23:12:dd:30:3b:2c:59:eb:96:f7:4b:f6:03:f7: 84:14:eb:3f:c9:28:f7:be:a1:8e:d0:62:e2:2c:38: 22:8f:dd:20:10:f8:fa:f6:fe:5c:72:2f:1b:8b:b0: de:fc:9c:c7:a2:33:e1:05:47:0c:a6:42:74:a1:0a: 57:28:4e:ea:2e:e9:05:b4:af:e0:f7:8e:59:c1:9f: ad:0c:04:19:f6:11:54:21:03:2a:a9:22:19:37:93: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:29:DC:66:FE:B5:6A:86:0C:4A:12:86:A7:74:A7:57:45:12:90:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a5:35:97:7c:57:3b:2f:b3:00:4b:76:e1:0e:56:c2:1d:01: e2:5a:64:82:5a:1c:83:34:0b:18:a2:43:b4:5e:a4:a1:b2:a1: 7e:81:b4:9b:72:a6:4d:eb:84:2e:80:64:17:62:a0:46:2c:dc: 41:ac:a8:6d:98:47:aa:47:ca:05:b0:0e:66:78:8f:1d:d7:b4: 87:7c:38:a8:ca:34:77:bc:1e:08:85:9d:00:01:f4:c4:63:d1: 29:82:9d:dd:ff:fd:31:c4:94:b1:78:fc:8a:30:71:c6:0c:aa: 3f:67:f4:17:20:f8:0d:1e:28:b1:d6:2b:2f:14:af:b3:72:26: 77:52:45:e3:9f:7a:93:8e:ee:7a:44:2f:97:04:8c:9f:8c:ee: 9d:36:76:66:e1:b1:5f:4f:80:32:7f:e6:cd:0b:93:be:ce:fc: 97:b2:d8:71:fa:3f:d6:4a:6c:04:1d:20:fa:e7:c3:6d:39:e9: 28:64:21:a9:07:18:87:14:bd:d9:ab:33:69:56:29:b4:ab:b3: e1:48:96:8d:80:b4:38:10:8b:96:32:10:a5:6b:ee:22:37:4e: 6c:0c:fa:2f:05:af:4f:93:03:f0:b2:20:7b:cf:0f:d2:9f:fc: a8:43:84:68:08:a2:cc:53:68:cb:da:86:ed:68:14:cb:a4:63: 50:fd:cd:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIUsJcS1dqaAFs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk OWVlMmFkZDUtN2VhMi00MjcyLWJjNWUtY2IwMzRmMmVlMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7qgicWaeBXZJAii5bvyscXmlhH2lci1n0XK 65XLPMI3CYrUCVkjy/XKK9OBzshJCsrZqWuQio4Yo4dIQnSHd14Oa6Xu4bBcit1K GvefEna/H4HylNdaeXmAjdut7YRe0aVIh+OiSi2asPejlvJEht9V/dHSTm0cYTfS 4UsbnYaGW7x1sljqVEJaeLZ8RIaIs3mkS5XKuqfxycILmGfgKoQE8HjAIxLdMDss WeuW90v2A/eEFOs/ySj3vqGO0GLiLDgij90gEPj69v5cci8bi7De/JzHojPhBUcM pkJ0oQpXKE7qLukFtK/g945ZwZ+tDAQZ9hFUIQMqqSIZN5M6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8p3Gb+tWqGDEoShqd0p1dFEpDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYTY3ZGMyNWYtZGQzZi0z NTFiLTg2ZDMtMWMzNDdiNThiZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHelNZd8VzsvswBLduEOVsIdAeJaZIJaHIM0CxiiQ7RepKGyoX6BtJty pk3rhC6AZBdioEYs3EGsqG2YR6pHygWwDmZ4jx3XtId8OKjKNHe8HgiFnQAB9MRj 0SmCnd3//THElLF4/IowccYMqj9n9Bcg+A0eKLHWKy8Ur7NyJndSReOfepOO7npE L5cEjJ+M7p02dmbhsV9PgDJ/5s0Lk77O/Jey2HH6P9ZKbAQdIPrnw2056ShkIakH GIcUvdmrM2lWKbSrs+FIlo2AtDgQi5YyEKVr7iI3TmwM+i8Fr0+TA/CyIHvPD9Kf /KhDhGgIosxTaMvahu1oFMukY1D9zbk= -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:31 2025 by rpki-client