$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa File: d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa (raw, json) Hash identifier: cy48qg3Xu9hOdb4MQ897gs/TMs+dlwcwA5YVsHhrUyA= Subject key identifier: 57:B9:73:94:39:B1:C5:8C:84:12:50:DB:BA:EA:87:F6:26:CC:54:E4 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285848705AFE059E745BB91EB0D080 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 14618 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fe:05:9e:74:5b:b9:1e:b0:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=a1a5aa5f-9b19-44e2-8c23-6dc86bd5c863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:31:2a:d8:73:c3:f4:e1:c4:3e:3a:10:1f: bd:23:d9:49:49:a5:a3:e8:42:47:65:6d:94:7d:67: 4f:12:dc:20:a0:01:62:48:d5:3b:c5:63:70:71:e3: e6:7f:55:3a:cc:52:36:2a:6a:d8:34:75:cc:6e:a2: e5:ad:a8:06:1b:43:34:21:d8:8b:9d:04:26:f9:11: 36:29:ab:bc:eb:1f:0c:9c:ef:25:2e:81:14:08:0b: b4:7d:01:b1:b2:5e:2a:20:b0:95:f2:1d:44:95:d8: 6b:95:8f:77:31:c9:29:e0:ff:f2:91:12:08:ab:9b: fe:d7:33:38:91:71:04:d5:f6:96:da:fa:44:0c:10: 1c:3f:8f:0a:bc:73:0a:02:74:70:80:31:2e:d2:3d: c8:d3:67:6a:1f:7b:aa:b7:d5:c2:a0:f7:8b:03:cc: fc:44:a4:f7:fa:d9:43:be:c0:31:5d:6c:73:12:86: 6d:8c:83:62:e5:10:a7:2b:82:e6:11:69:72:e4:3c: aa:bd:d2:16:de:6f:6f:ea:68:c9:e8:39:83:5f:18: a2:fe:30:00:d9:41:3a:43:2e:ff:31:38:ec:e5:bf: 51:da:ec:9f:1b:17:a3:f5:19:24:64:25:3f:19:25: be:46:14:14:e0:1e:96:e8:82:4d:a4:c6:b2:1b:c0: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:73:94:39:B1:C5:8C:84:12:50:DB:BA:EA:87:F6:26:CC:54:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:84:34:36:55:60:be:96:c2:9d:2e:d2:e6:73:d4:1f:e8:87: a4:64:e1:7d:b5:93:97:60:22:31:f3:9e:ea:bc:9c:bf:af:f0: 49:92:a8:d2:ea:be:cb:9e:0b:2a:83:37:31:a1:58:e4:50:b7: 7e:67:e8:37:8c:df:f3:ec:a6:cd:ae:14:17:f7:35:d5:d8:5b: d2:12:a4:43:bb:1b:8f:c0:16:eb:93:4d:b6:e6:9b:9f:8a:89: f5:ec:bb:09:57:04:85:77:6b:b7:d5:07:a9:0c:14:5b:c1:d5: 53:70:f8:6c:80:ee:f2:e7:2e:aa:eb:64:11:c3:9c:cd:a1:be: fc:39:26:e2:f8:26:f9:4f:f2:de:43:e4:23:d1:ef:96:ac:e0: 4c:1f:bb:30:7e:56:65:7b:13:3d:4c:58:40:fa:b6:5c:2a:4e: a3:dd:33:b9:e2:16:05:1b:03:0b:12:dc:ab:49:b1:97:a5:4f: 73:51:ab:73:92:0d:fd:f7:dd:e8:6f:22:1b:ef:4c:64:44:6c: ef:44:02:5e:11:da:73:07:62:a3:8f:d4:64:f0:47:df:33:3a: be:46:f4:c4:ae:15:1a:21:74:f8:fe:bc:30:93:c2:84:62:8a: 0b:f3:d6:ae:1f:4c:ae:d0:f1:f2:ad:33:98:2f:28:3e:1d:5d: ba:a9:23:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWv4FnnRbuR6w0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk YTFhNWFhNWYtOWIxOS00NGUyLThjMjMtNmRjODZiZDVjODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzIxKthzw/ThxD46EB+9I9lJSaWj6EJHZW2U fWdPEtwgoAFiSNU7xWNwcePmf1U6zFI2KmrYNHXMbqLlragGG0M0IdiLnQQm+RE2 Kau86x8MnO8lLoEUCAu0fQGxsl4qILCV8h1EldhrlY93Mckp4P/ykRIIq5v+1zM4 kXEE1faW2vpEDBAcP48KvHMKAnRwgDEu0j3I02dqH3uqt9XCoPeLA8z8RKT3+tlD vsAxXWxzEoZtjINi5RCnK4LmEWly5DyqvdIW3m9v6mjJ6DmDXxii/jAA2UE6Qy7/ MTjs5b9R2uyfGxej9RkkZCU/GSW+RhQU4B6W6IJNpMayG8AHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe5c5Q5scWMhBJQ27rqh/YmzFTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDdjYjAwOGEtNjlkOS0z MzM1LTk2NGUtNGQxM2M2ZTZmOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKENDZVYL6Wwp0u0uZz1B/oh6Rk4X21k5dgIjHznuq8nL+v8EmSqNLq vsueCyqDNzGhWORQt35n6DeM3/Psps2uFBf3NdXYW9ISpEO7G4/AFuuTTbbmm5+K ifXsuwlXBIV3a7fVB6kMFFvB1VNw+GyA7vLnLqrrZBHDnM2hvvw5JuL4JvlP8t5D 5CPR75as4EwfuzB+VmV7Ez1MWED6tlwqTqPdM7niFgUbAwsS3KtJsZelT3NRq3OS Df333ehvIhvvTGREbO9EAl4R2nMHYqOP1GTwR98zOr5G9MSuFRohdPj+vDCTwoRi igvz1q4fTK7Q8fKtM5gvKD4dXbqpI7s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:26 2025 by rpki-client