$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa File: 880de72b-888b-3dde-b1b4-c86038197a8a.roa (raw, json) Hash identifier: v/1R5wH9zAHshXnKe9OIvpYmS0coMUFy90VS8rIpMzc= Subject key identifier: 44:A2:D5:2C:0C:0C:93:8A:0B:5E:A3:37:CE:22:C5:D0:44:7B:F2:A3 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584A506AF70EC9609E669F16E880 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 396982 IP address blocks: 147.124.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f7:0e:c9:60:9e:66:9f:16:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=f1f6eb5c-5c9e-4ab1-bc61-06eb93d0330d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:49:27:9f:11:f7:10:a0:fe:2d:11:ca:dd: 6b:f2:5c:c6:43:72:44:a0:31:0f:c8:29:fc:b8:bd: 51:cc:e3:ad:f9:9e:be:e8:c9:c6:4a:e1:f3:33:8d: 69:da:97:9a:8a:4b:58:f9:b1:aa:b0:93:42:3f:d1: a4:22:02:0a:69:1d:b9:cc:93:e5:87:ef:7e:c3:7a: db:06:16:92:3e:e3:99:53:60:54:f2:a4:dd:e1:f1: 4f:ec:f0:42:5e:47:59:c5:ec:0c:01:7c:9c:7f:24: bb:a6:80:3b:04:a2:c1:92:4f:fe:d1:41:79:31:26: ff:14:f2:87:eb:76:10:7c:50:49:1b:58:1d:25:53: 97:f9:15:05:46:00:38:57:cc:11:a8:b7:74:9a:57: 0c:6a:96:73:e0:d3:41:e0:f0:3c:12:fe:85:e5:c1: 0f:0e:32:80:b2:15:20:e2:ff:53:f1:bb:47:57:92: dc:75:da:63:94:73:e7:78:42:c3:1b:02:1e:be:bc: 2a:cc:c7:ce:ad:46:08:6a:8a:dc:d6:0a:f1:92:1e: 94:bd:66:bc:1d:d9:17:30:4a:a7:69:4a:cc:cf:b4: be:dc:a7:2b:df:77:63:9d:23:0e:df:5a:ad:2a:e4: 7b:69:22:48:38:d4:da:bc:2b:23:74:6e:46:92:4c: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A2:D5:2C:0C:0C:93:8A:0B:5E:A3:37:CE:22:C5:D0:44:7B:F2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c4:4f:10:3d:94:45:e8:88:ef:b3:1e:be:c8:b9:4e:f3:2c: 14:f4:94:db:9f:88:82:58:6d:02:43:9d:a8:a2:ca:60:0b:52: d7:24:c1:17:16:bb:42:c5:0b:4a:3a:56:26:2a:69:86:15:48: 30:f8:35:50:25:46:0c:43:5e:41:3b:24:06:18:da:0b:c2:05: 5e:f9:9e:a7:6d:28:95:00:d9:eb:57:47:e6:4f:f5:4f:b4:68: c2:3d:05:fa:6c:36:57:df:aa:e8:10:ad:3b:66:61:f5:d7:e2: 56:a6:86:53:42:bb:a2:87:fd:9b:30:a1:8e:a1:af:e1:dc:3b: ba:98:75:73:36:63:1f:d7:e0:6f:7b:30:7a:15:80:00:97:b9: c3:6d:61:65:10:ec:cb:4d:8c:e9:f2:24:8c:7c:c1:2c:29:bd: 9b:e7:63:9a:d9:0f:13:b8:30:cd:cc:c5:0e:33:57:8a:f6:e6: 68:fc:46:b4:33:e7:34:49:e3:62:87:dd:75:1c:69:f9:94:90: 26:22:3b:6c:22:c7:a7:2f:2c:09:63:ae:1a:04:4f:79:9d:4e: e1:b8:62:65:95:d3:55:02:b5:11:a0:e4:6a:3a:eb:e1:d6:8a: 99:c0:0d:f0:15:0f:df:3b:ad:06:87:1e:89:42:5d:f9:9b:9e: 79:b0:46:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavcOyWCeZp8W6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjFmNmViNWMtNWM5ZS00YWIxLWJjNjEtMDZlYjkzZDAzMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MxJJ58R9xCg/i0Ryt1r8lzGQ3JEoDEPyCn8 uL1RzOOt+Z6+6MnGSuHzM41p2peaiktY+bGqsJNCP9GkIgIKaR25zJPlh+9+w3rb BhaSPuOZU2BU8qTd4fFP7PBCXkdZxewMAXycfyS7poA7BKLBkk/+0UF5MSb/FPKH 63YQfFBJG1gdJVOX+RUFRgA4V8wRqLd0mlcMapZz4NNB4PA8Ev6F5cEPDjKAshUg 4v9T8btHV5LcddpjlHPneELDGwIevrwqzMfOrUYIaorc1grxkh6UvWa8HdkXMEqn aUrMz7S+3Kcr33djnSMO31qtKuR7aSJIONTavCsjdG5Gkkx/hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESi1SwMDJOKC16jN84ixdBEe/KjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvODgwZGU3MmItODg4Yi0z ZGRlLWIxYjQtYzg2MDM4MTk3YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHETxA9lEXoiO+zHr7IuU7zLBT0lNufiIJYbQJDnaiiymALUtckwRcW u0LFC0o6ViYqaYYVSDD4NVAlRgxDXkE7JAYY2gvCBV75nqdtKJUA2etXR+ZP9U+0 aMI9BfpsNlffqugQrTtmYfXX4lamhlNCu6KH/ZswoY6hr+HcO7qYdXM2Yx/X4G97 MHoVgACXucNtYWUQ7MtNjOnyJIx8wSwpvZvnY5rZDxO4MM3MxQ4zV4r25mj8RrQz 5zRJ42KH3XUcafmUkCYiO2wix6cvLAljrhoET3mdTuG4YmWV01UCtRGg5Go66+HW ipnADfAVD987rQaHHolCXfmbnnmwRhI= -----END CERTIFICATE-----Generated at Sun Jun 29 13:49:53 2025 by rpki-client