$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa File: 026b8b08-d03f-336f-8c9f-25cac406fa0b.roa (raw, json) Hash identifier: N6F+TWUrAJk5tP/0EbHuq/FpBCEeW1AICcaiWZMgqFg= Subject key identifier: B1:3D:D3:E7:7A:B8:BB:FC:33:70:9E:23:C3:DD:E2:70:91:FD:BC:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7853F35B1810A14B5B88AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 70.32.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3f:35:b1:81:0a:14:b5:b8:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a9188321-324a-4534-92a3-b088004a85dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:59:2e:b5:5b:fb:a9:c1:2e:73:e3:4b:4f: 53:e3:9a:b6:03:47:d8:90:dc:a5:98:1b:4b:77:42: 44:98:9d:67:9a:5f:97:f9:ed:ea:af:08:74:e1:d8: 37:ad:24:03:fa:f0:cd:cf:eb:31:d1:f2:f8:19:63: 17:0b:38:f8:28:be:1c:bf:b3:ae:af:18:e5:b4:06: 08:fa:fc:e3:ca:0e:60:99:5e:52:d2:ea:04:7d:f4: 37:91:1a:1d:a5:8a:13:f8:12:fd:e9:7e:ff:16:c7: fb:9b:6b:52:29:2c:d2:27:c0:c6:dd:ea:bb:55:46: c2:68:d8:83:ec:5e:dc:42:3d:41:63:61:3f:eb:48: 24:19:ad:7a:33:c3:29:34:ec:bd:63:34:81:23:a8: b7:d2:1d:ab:f4:6b:40:ee:7a:63:4f:c1:0c:bb:7e: 98:02:df:91:bd:29:e4:04:f4:41:a7:a1:4a:0d:c0: 39:b5:ee:f8:b9:b9:bc:9b:4f:f1:f7:cf:ca:41:d2: 07:6d:31:4a:9e:9e:34:8f:03:ba:fa:33:96:29:29: a6:f5:2a:e1:4c:c9:ac:df:bd:c7:66:1e:d4:5c:b5: 30:d5:39:56:95:11:4b:a2:96:8c:44:21:cd:eb:f6: 38:7b:14:be:d1:93:c2:3a:46:f1:1c:0e:ed:6d:01: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3D:D3:E7:7A:B8:BB:FC:33:70:9E:23:C3:DD:E2:70:91:FD:BC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:5f:82:e6:fa:f6:e1:0d:3d:21:15:78:64:b7:28:d3:00:01: ff:ae:2f:43:cf:18:0f:1b:c2:4a:8d:8f:0f:71:b1:7b:02:0a: 6b:e4:f9:96:58:05:00:7e:24:4b:bd:87:21:9f:15:e6:ad:8c: 08:3a:21:42:48:08:fa:4a:90:f2:bc:6d:a5:30:d9:fb:5e:7d: fe:3c:4c:3c:e8:f0:28:28:8a:e8:47:10:a4:8c:55:07:17:b0: 20:86:ea:af:89:fa:2e:8f:20:32:00:b2:33:0d:b5:e9:da:41: 0f:e6:f3:15:b7:10:b5:53:f0:be:8f:13:1e:eb:03:89:ae:9c: fe:16:0e:6a:19:04:ca:e8:9e:82:52:5c:fe:c1:7e:b5:cb:58: 88:27:a9:81:71:d5:15:e1:6e:13:93:82:b6:7f:3d:7c:ba:62: ad:79:33:6d:36:cc:1b:a4:ac:47:2f:0c:2d:28:6a:c2:20:b8: b5:fa:f0:a0:66:6b:f0:22:58:a6:07:fd:82:74:10:54:22:69: c3:56:dd:4a:6c:9e:cb:d5:b4:7b:65:e4:b3:a5:6e:4b:a0:c0: c0:94:b1:ca:90:59:38:cb:53:f0:4d:9c:c8:5f:73:d5:46:f8: ca:fe:19:a7:d9:d1:20:22:39:4d:5d:2f:a4:86:f7:50:b9:6e: 8b:3a:2c:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT81sYEKFLW4isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTkxODgzMjEtMzI0YS00NTM0LTkyYTMtYjA4ODAwNGE4NWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUpZLrVb+6nBLnPjS09T45q2A0fYkNylmBtL d0JEmJ1nml+X+e3qrwh04dg3rSQD+vDNz+sx0fL4GWMXCzj4KL4cv7OurxjltAYI +vzjyg5gmV5S0uoEffQ3kRodpYoT+BL96X7/Fsf7m2tSKSzSJ8DG3eq7VUbCaNiD 7F7cQj1BY2E/60gkGa16M8MpNOy9YzSBI6i30h2r9GtA7npjT8EMu36YAt+RvSnk BPRBp6FKDcA5te74ubm8m0/x98/KQdIHbTFKnp40jwO6+jOWKSmm9SrhTMms373H Zh7UXLUw1TlWlRFLopaMRCHN6/Y4exS+0ZPCOkbxHA7tbQHjWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE90+d6uLv8M3CeI8Pd4nCR/bymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI2YjhiMDgtZDAzZi0z MzZmLThjOWYtMjVjYWM0MDZmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNfgub69uENPSEVeGS3KNMAAf+uL0PPGA8bwkqNjw9xsXsCCmvk+ZZY BQB+JEu9hyGfFeatjAg6IUJICPpKkPK8baUw2fteff48TDzo8CgoiuhHEKSMVQcX sCCG6q+J+i6PIDIAsjMNtenaQQ/m8xW3ELVT8L6PEx7rA4munP4WDmoZBMronoJS XP7BfrXLWIgnqYFx1RXhbhOTgrZ/PXy6Yq15M202zBukrEcvDC0oasIguLX68KBm a/AiWKYH/YJ0EFQiacNW3UpsnsvVtHtl5LOlbkugwMCUscqQWTjLU/BNnMhfc9VG +Mr+GafZ0SAiOU1dL6SG91C5bos6LOY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:47 2025 by rpki-client