$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa File: 880de72b-888b-3dde-b1b4-c86038197a8a.roa (raw, json) Hash identifier: yy9PY68WYEtjGjkZixJWNLmfT1Vy/BiAXtEBIN0jW1k= Subject key identifier: 6D:E4:46:04:CB:45:9B:83:13:2C:5D:02:A1:4B:E5:F1:10:D4:17:83 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F43285849711429751F8230A6AC458800 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 147.124.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:29:75:1f:82:30:a6:ac:45:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=b152fd01-8048-4d1b-b7ae-a279435b9f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:96:95:b0:c7:f2:f2:5e:07:01:df:1b:bf: 43:59:ea:22:1f:78:88:bf:64:78:d6:c5:20:19:d5: f4:1d:46:89:73:ff:eb:5b:cb:9c:90:97:af:09:12: e7:0d:29:18:78:83:35:6e:4d:43:74:62:55:89:63: d2:20:cb:f5:f9:8e:ac:47:9c:0f:f8:99:21:8d:d1: 56:5e:be:f3:ab:06:18:62:42:66:24:0e:f1:0e:b1: f0:fd:f2:67:f0:a2:a2:46:06:4d:67:db:cf:08:53: a1:d9:1f:23:c5:be:11:3e:d7:79:aa:82:64:20:64: 89:26:2c:7a:ce:f5:37:3a:90:b2:be:dc:6e:e9:0c: 0d:79:13:dc:3c:a7:61:a1:09:81:fb:54:44:d6:aa: 06:54:06:ae:c7:c0:79:5e:bb:ed:53:f4:67:80:6e: c4:e9:8c:ac:af:98:51:0c:3a:9d:97:7f:15:d5:34: f3:60:c8:44:55:a7:68:0b:74:f9:f7:2f:c6:9b:e3: 89:f3:79:1d:8d:b0:24:0a:4b:3c:9c:6f:72:ea:15: f7:2e:f5:e5:31:68:b0:11:c0:1c:25:22:1e:a2:df: a0:b1:2c:2f:1b:4e:02:52:11:e9:68:33:c4:c2:e7: 35:89:5f:45:76:58:bb:1e:c6:d9:18:ee:13:98:1e: 24:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E4:46:04:CB:45:9B:83:13:2C:5D:02:A1:4B:E5:F1:10:D4:17:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:db:ea:92:ae:1e:f1:e1:ec:36:52:4f:fc:a6:65:76:23:b9: 5c:2f:5f:a5:77:7f:61:73:d5:30:c9:aa:7a:05:63:b8:b3:25: e9:12:84:44:70:0b:03:98:28:1c:83:87:63:6d:57:7a:4e:25: 69:47:8e:82:40:6a:a0:78:e5:0d:c4:11:c6:9f:e1:f1:29:30: d4:a8:3b:27:53:41:fc:b5:cc:fe:45:14:e7:c7:14:48:50:08: 66:1c:73:c1:1e:5b:ad:b8:e2:9d:39:ac:1d:1a:c3:e5:cb:b9: 37:af:5d:83:4c:51:ac:2b:77:ce:d7:2d:e2:64:5d:7f:e2:de: d5:c8:f9:27:2c:2d:40:5b:35:20:9c:bc:99:a0:4f:c6:8b:e7: d7:f8:e4:3a:e1:3b:05:cb:8f:f1:28:65:cc:67:9c:cb:dc:02: 17:d1:7a:1b:91:79:b1:07:d1:eb:10:e3:0f:07:ff:3e:6b:10: 06:53:f2:fc:ed:ad:9a:5a:56:24:f0:e0:1d:b5:5f:f1:b9:52: f7:af:a5:79:b3:12:53:a7:3a:26:ae:58:76:9d:5d:b6:4a:63: a7:30:86:ea:f8:9f:a8:49:8a:19:5b:e6:a3:c4:0b:1c:62:d0: 8c:48:8f:d4:34:44:e5:03:1e:1d:b6:b7:68:7b:a4:90:56:f4: fe:16:68:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFCl1H4IwpqxFiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk YjE1MmZkMDEtODA0OC00ZDFiLWI3YWUtYTI3OTQzNWI5ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpyWlbDH8vJeBwHfG79DWeoiH3iIv2R41sUg GdX0HUaJc//rW8uckJevCRLnDSkYeIM1bk1DdGJViWPSIMv1+Y6sR5wP+JkhjdFW Xr7zqwYYYkJmJA7xDrHw/fJn8KKiRgZNZ9vPCFOh2R8jxb4RPtd5qoJkIGSJJix6 zvU3OpCyvtxu6QwNeRPcPKdhoQmB+1RE1qoGVAaux8B5XrvtU/RngG7E6Yysr5hR DDqdl38V1TTzYMhEVadoC3T59y/Gm+OJ83kdjbAkCks8nG9y6hX3LvXlMWiwEcAc JSIeot+gsSwvG04CUhHpaDPEwuc1iV9Fdli7HsbZGO4TmB4kjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3kRgTLRZuDEyxdAqFL5fEQ1BeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvODgwZGU3MmItODg4Yi0z ZGRlLWIxYjQtYzg2MDM4MTk3YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnb6pKuHvHh7DZST/ymZXYjuVwvX6V3f2Fz1TDJqnoFY7izJekShERw CwOYKByDh2NtV3pOJWlHjoJAaqB45Q3EEcaf4fEpMNSoOydTQfy1zP5FFOfHFEhQ CGYcc8EeW6244p05rB0aw+XLuTevXYNMUawrd87XLeJkXX/i3tXI+ScsLUBbNSCc vJmgT8aL59f45DrhOwXLj/EoZcxnnMvcAhfRehuRebEH0esQ4w8H/z5rEAZT8vzt rZpaViTw4B21X/G5UvevpXmzElOnOiauWHadXbZKY6cwhur4n6hJihlb5qPECxxi 0IxIj9Q0ROUDHh22t2h7pJBW9P4WaHk= -----END CERTIFICATE-----Generated at Wed May 7 16:29:13 2025 by rpki-client