$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa File: 4f7fc206-638d-3fed-8702-51154262e297.roa (raw, json) Hash identifier: 5KaGfXOiWwuKVKj33ElwDg28BX33j0feYWhRhuS3M3w= Subject key identifier: 1E:F0:34:BE:60:AE:0D:4F:2C:E4:58:AF:37:0D:79:7C:E6:37:42:AB Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584A3A158A8D0679D9E484A50F80 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 147.124.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:8a:8d:06:79:d9:e4:84:a5:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=98c1cd0c-1d97-4608-9305-e26fb09db8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:d3:3a:1f:4d:a3:5f:c6:eb:d1:6f:81:8e: 8b:a6:31:0e:79:bc:ff:7a:98:80:4e:a7:a4:8b:b6: ad:9d:61:61:99:02:e6:44:b3:d3:45:92:c2:4f:5b: 90:83:cc:59:27:fb:bc:a6:44:6a:5b:3b:ab:fc:24: 5a:71:ee:4a:a0:d1:b5:af:3c:a7:14:d4:18:6c:b7: 30:97:b7:96:d7:8f:e7:13:46:e4:7e:60:48:c8:59: ee:98:a9:36:c7:86:ab:e7:a5:07:33:13:dd:45:7a: 6c:e3:66:fa:ee:6e:55:ff:3c:8b:03:20:74:f4:bb: 2e:1d:68:ef:c3:b3:9a:3c:fb:ee:38:2b:89:90:79: 6f:79:9d:cf:07:54:a8:ad:aa:7c:0d:40:bb:0d:0a: 77:a5:ad:22:68:c2:26:6f:80:10:a9:08:f5:26:14: c3:6d:12:64:7c:63:f5:79:ad:b1:a5:2d:63:33:0f: c5:d7:65:1e:4f:01:a9:15:6b:b2:10:08:7a:ce:18: f7:7a:d3:22:6e:8f:94:cc:c5:8c:99:cf:03:20:e6: 68:41:cc:1c:84:02:c7:69:f9:3f:1d:e0:51:3b:ce: db:52:3f:64:fa:00:b0:13:31:9b:23:9b:1d:3c:db: 78:af:b4:75:3c:48:74:53:58:b0:fa:be:da:5c:53: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F0:34:BE:60:AE:0D:4F:2C:E4:58:AF:37:0D:79:7C:E6:37:42:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:18:27:b7:32:54:8b:a3:66:81:f4:c9:aa:89:6b:37:f5:c4: 32:7b:58:47:ab:8d:14:84:b0:c9:36:96:9a:7e:41:6e:1b:bb: 04:df:02:01:4c:bb:2e:98:75:38:8d:2e:54:7d:73:9f:fc:c3: 2a:65:a0:0e:fb:00:4e:ae:21:4d:59:7c:22:55:7b:6f:5d:bd: e8:51:17:26:93:24:3d:42:3e:e0:af:e2:24:7e:c9:f8:6a:53: c1:0a:ae:e1:20:83:9c:86:ff:26:fc:09:4e:63:ff:49:a6:3b: 94:eb:76:df:89:b8:03:a6:fc:70:0f:01:f7:eb:59:da:e9:22: 20:cf:c4:25:8b:e1:29:42:1f:f6:25:7a:52:3b:ea:f1:af:10: 5e:1c:fc:30:7c:fa:5f:ac:00:e5:80:8a:27:d0:b2:66:5e:50: 43:c5:c6:0a:08:b9:85:54:95:33:f8:b6:ff:13:63:b0:5b:ea: 18:96:41:2a:59:a0:55:11:ce:49:56:48:cb:11:8b:11:1c:cd: d7:f9:86:ba:fe:d3:48:2c:45:7a:cb:d8:26:b3:d5:da:87:bf: 1a:23:e1:f5:18:a2:f5:0a:ff:19:bd:9b:db:14:5d:1a:3a:72: fb:81:ef:01:37:ee:56:09:7c:17:06:bc:ec:de:0f:52:96:af: cf:c4:ae:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYqNBnnZ5ISlD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OThjMWNkMGMtMWQ5Ny00NjA4LTkzMDUtZTI2ZmIwOWRiOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp43TOh9No1/G69FvgY6LpjEOebz/epiATqek i7atnWFhmQLmRLPTRZLCT1uQg8xZJ/u8pkRqWzur/CRace5KoNG1rzynFNQYbLcw l7eW14/nE0bkfmBIyFnumKk2x4ar56UHMxPdRXps42b67m5V/zyLAyB09LsuHWjv w7OaPPvuOCuJkHlveZ3PB1Sorap8DUC7DQp3pa0iaMImb4AQqQj1JhTDbRJkfGP1 ea2xpS1jMw/F12UeTwGpFWuyEAh6zhj3etMibo+UzMWMmc8DIOZoQcwchALHafk/ HeBRO87bUj9k+gCwEzGbI5sdPNt4r7R1PEh0U1iw+r7aXFPPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7wNL5grg1PLORYrzcNeXzmN0KrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNGY3ZmMyMDYtNjM4ZC0z ZmVkLTg3MDItNTExNTQyNjJlMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0YJ7cyVIujZoH0yaqJazf1xDJ7WEerjRSEsMk2lpp+QW4buwTfAgFM uy6YdTiNLlR9c5/8wyploA77AE6uIU1ZfCJVe29dvehRFyaTJD1CPuCv4iR+yfhq U8EKruEgg5yG/yb8CU5j/0mmO5Trdt+JuAOm/HAPAffrWdrpIiDPxCWL4SlCH/Yl elI76vGvEF4c/DB8+l+sAOWAiifQsmZeUEPFxgoIuYVUlTP4tv8TY7Bb6hiWQSpZ oFURzklWSMsRixEczdf5hrr+00gsRXrL2Caz1dqHvxoj4fUYovUK/xm9m9sUXRo6 cvuB7wE37lYJfBcGvOzeD1KWr8/EroI= -----END CERTIFICATE-----Generated at Sun Jun 29 09:28:17 2025 by rpki-client