$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa File: fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa (raw, json) Hash identifier: qLeTdpnwfqPp9b8hpZVLQnbPenmJALsC3r7WIzeSdiU= Subject key identifier: 3F:16:AF:3F:CE:B9:51:AB:13:1F:A5:4A:39:82:BA:C2:CC:E4:90:DF Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584917DC27C2557398709855AE3C Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:27:c2:55:73:98:70:98:55:ae:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=fea6dd56-dc8f-46f4-8965-0201d28ae7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:79:82:bb:db:11:73:0a:55:17:ea:48:2e: 72:7b:e4:86:82:43:b1:44:77:93:c1:13:5c:d9:c7: d0:a3:3c:7b:54:c0:be:75:21:91:98:f3:f2:d2:f9: 2a:90:f3:51:cf:ae:ed:7e:62:c6:62:3a:e9:c4:0c: 9f:41:f4:c5:1a:58:aa:63:ec:c3:c8:f2:d7:28:57: 32:8b:7c:4e:59:43:ff:64:e8:c8:4a:a1:97:ec:40: aa:37:8f:fd:a0:7a:25:0d:f0:16:7b:1c:0c:42:fb: 6f:2d:9b:7d:a0:fa:87:1a:83:ff:89:bb:53:48:64: c9:f7:39:29:92:21:b7:71:2f:d7:32:fd:d7:f0:32: 51:4b:fc:eb:d1:24:11:63:e2:3d:1c:01:9a:f2:43: 5a:a5:07:cb:e9:94:ff:9e:78:fa:6f:e8:9c:3a:59: b2:64:e4:dc:0e:98:45:c5:15:9f:06:0f:50:ae:b5: fa:44:70:b9:ae:d8:f7:20:a6:69:4a:56:3a:3c:0b: f0:4d:46:db:5f:83:de:25:c1:82:2d:08:77:76:81: 4d:0a:e3:21:ba:fb:bc:52:f4:9c:22:b2:c6:c1:3c: 39:4c:04:09:fc:9e:21:2b:6b:9a:8a:13:f4:47:cb: 12:9f:65:81:65:70:13:d5:c1:11:95:3b:0a:5b:76: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:16:AF:3F:CE:B9:51:AB:13:1F:A5:4A:39:82:BA:C2:CC:E4:90:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/fef20c4d-bf1c-3e8e-83f2-763bcd6bab2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ce:4b:bf:fa:c6:12:69:02:0d:10:0d:2c:85:98:d2:ea:00: 29:59:ae:ba:77:cc:6e:3b:7d:6b:b1:a6:7e:13:81:ad:d5:25: f6:18:14:70:fd:bf:66:0d:a5:9a:86:ea:39:47:bd:3b:fd:43: 77:82:4b:c6:6d:0e:51:28:4e:bd:fd:4f:76:41:b8:1b:66:ea: 61:77:f0:8d:37:99:cb:74:a8:40:b6:72:f7:38:ee:7b:7a:08: 5d:f1:e7:3a:3d:9e:e4:02:f7:07:30:5a:4a:77:27:80:82:0b: e7:bc:86:ff:20:cc:55:05:22:8b:eb:a9:03:10:92:4e:db:ef: fe:2d:fd:a0:23:ce:2c:49:c2:25:c7:45:ce:be:dd:17:5e:2d: 34:d5:7b:17:04:03:49:6f:ad:69:1a:5d:c0:06:b0:4d:9c:dd: 9a:9d:86:ec:cb:2c:4e:ff:3f:9c:20:c9:56:52:0a:8a:e2:69: ba:95:3e:98:4b:f4:da:38:50:dd:27:05:ef:ec:55:c7:53:a7: ce:2c:c3:75:3e:31:d3:30:29:8f:43:e6:db:82:c3:2f:51:b6: e2:73:65:e5:2f:84:4c:69:e2:80:f3:7c:ed:05:7e:a6:a8:72: 74:1d:0c:43:23:b0:1d:e0:17:e6:72:e7:b9:7d:67:9b:4c:a8: b7:a1:fc:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CfCVXOYcJhVrjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmVhNmRkNTYtZGM4Zi00NmY0LTg5NjUtMDIwMWQyOGFlN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6R5grvbEXMKVRfqSC5ye+SGgkOxRHeTwRNc 2cfQozx7VMC+dSGRmPPy0vkqkPNRz67tfmLGYjrpxAyfQfTFGliqY+zDyPLXKFcy i3xOWUP/ZOjISqGX7ECqN4/9oHolDfAWexwMQvtvLZt9oPqHGoP/ibtTSGTJ9zkp kiG3cS/XMv3X8DJRS/zr0SQRY+I9HAGa8kNapQfL6ZT/nnj6b+icOlmyZOTcDphF xRWfBg9QrrX6RHC5rtj3IKZpSlY6PAvwTUbbX4PeJcGCLQh3doFNCuMhuvu8UvSc IrLGwTw5TAQJ/J4hK2uaihP0R8sSn2WBZXAT1cERlTsKW3Y8qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8Wrz/OuVGrEx+lSjmCusLM5JDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZmVmMjBjNGQtYmYxYy0z ZThlLTgzZjItNzYzYmNkNmJhYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPOS7/6xhJpAg0QDSyFmNLqAClZrrp3zG47fWuxpn4Tga3VJfYYFHD9 v2YNpZqG6jlHvTv9Q3eCS8ZtDlEoTr39T3ZBuBtm6mF38I03mct0qEC2cvc47nt6 CF3x5zo9nuQC9wcwWkp3J4CCC+e8hv8gzFUFIovrqQMQkk7b7/4t/aAjzixJwiXH Rc6+3RdeLTTVexcEA0lvrWkaXcAGsE2c3ZqdhuzLLE7/P5wgyVZSCoriabqVPphL 9No4UN0nBe/sVcdTp84sw3U+MdMwKY9D5tuCwy9RtuJzZeUvhExp4oDzfO0Ffqao cnQdDEMjsB3gF+Zy57l9Z5tMqLeh/EI= -----END CERTIFICATE-----Generated at Fri Apr 4 23:28:09 2025 by rpki-client