$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa File: 0426cb98-746d-3839-bac8-901e588c81ba.roa (raw, json) Hash identifier: FFQez/0SG21Vm+N0X0BdBmwhSFdICQ/64Kqgm3llUlU= Subject key identifier: 10:87:DF:2E:5A:59:6A:EF:8E:6E:F1:49:A5:D9:0A:04:83:9A:47:05 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785400299941A3964336FA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:40:02:99:94:1a:39:64:33:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f7565e9b-83b2-4fa2-a239-8ce8f4efb9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:6f:b2:2d:ea:88:86:c2:f9:6f:c7:ad:b2: 38:18:a6:13:76:b0:1d:5e:c2:e3:b7:92:22:0e:cd: dc:d5:25:a5:fe:cf:35:04:56:fe:d4:73:55:71:80: 05:5c:2c:f3:7f:61:44:ff:71:d2:ca:3e:ae:7d:d3: 4a:03:ac:ce:d1:38:5d:c2:38:94:a0:99:5f:e2:7c: 6f:00:21:8c:ac:45:3e:e3:4e:b1:ba:44:ff:58:bb: 49:46:ec:b4:4a:d9:d9:b9:77:c5:7b:27:99:a8:e6: 04:9a:8c:fa:4c:a5:66:71:fa:2d:66:94:2f:ba:c4: 0e:06:e9:95:4c:4d:cb:43:6a:54:f1:db:7c:e3:8c: c0:2d:16:74:3f:d2:f6:bd:ee:52:5c:3c:e6:8b:63: 31:66:cd:c4:ae:86:3a:c1:e4:02:96:2f:40:a6:30: 2c:a0:d2:31:8d:cc:ca:7c:94:4d:ca:24:3f:29:30: 92:b3:b1:bf:b9:c5:a7:b5:c2:18:ca:99:df:f4:ee: 96:97:bb:06:0f:b7:51:a8:4d:16:97:60:c3:a3:8c: 95:a5:46:33:07:4f:cc:da:6e:c8:94:5d:57:a8:4b: bf:ef:78:45:73:0c:d3:82:4a:6f:46:26:96:d3:53: 55:17:ee:8f:1c:eb:1c:24:13:df:0b:e6:a5:a3:9f: fc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:DF:2E:5A:59:6A:EF:8E:6E:F1:49:A5:D9:0A:04:83:9A:47:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2e:49:a6:87:56:52:7c:6b:9d:20:09:26:00:6f:c4:79:c8: 7e:c2:58:37:6e:54:57:4c:70:42:40:68:b9:e3:12:da:1b:78: 01:a4:32:00:57:6f:f2:83:e5:e1:b5:18:00:0e:60:dc:08:5f: ce:64:80:91:c1:86:c7:49:74:6e:3a:94:c2:f1:c9:69:d8:cf: b0:08:bc:dc:91:ee:e2:e0:3d:92:88:f5:c8:2d:79:ff:91:41: 44:39:1c:b4:ed:dd:2a:1f:f3:e4:8c:83:fc:49:08:2f:6b:7a: a4:57:cf:62:82:16:17:a4:9a:a2:e1:e7:07:6e:7b:55:de:6c: 07:84:9f:f0:cb:7e:b5:24:22:9b:d7:d0:fb:9a:bd:9b:95:a8: e4:37:f9:48:54:bd:02:cc:97:b4:9c:13:11:6f:0a:89:c2:d3: 75:b1:6c:c0:46:72:88:01:da:bd:58:13:dc:14:75:f3:ab:79: b0:e3:91:44:75:38:be:c4:21:a8:c9:05:96:c7:95:28:5a:54: ea:ab:69:d8:87:e5:b2:47:fa:c2:fd:51:e1:c5:65:81:8c:30: 3f:ab:b7:d3:9f:e1:6b:06:60:a5:5e:5a:0b:7f:a9:77:7e:9e: b7:0d:2e:6a:51:52:7a:d1:5f:83:f5:bd:2b:c8:bf:e6:83:68: b8:69:b4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhUACmZQaOWQzb6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Zjc1NjVlOWItODNiMi00ZmEyLWEyMzktOGNlOGY0ZWZiOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DZvsi3qiIbC+W/HrbI4GKYTdrAdXsLjt5Ii Ds3c1SWl/s81BFb+1HNVcYAFXCzzf2FE/3HSyj6ufdNKA6zO0ThdwjiUoJlf4nxv ACGMrEU+406xukT/WLtJRuy0StnZuXfFeyeZqOYEmoz6TKVmcfotZpQvusQOBumV TE3LQ2pU8dt844zALRZ0P9L2ve5SXDzmi2MxZs3EroY6weQCli9ApjAsoNIxjczK fJRNyiQ/KTCSs7G/ucWntcIYypnf9O6Wl7sGD7dRqE0Wl2DDo4yVpUYzB0/M2m7I lF1XqEu/73hFcwzTgkpvRiaW01NVF+6PHOscJBPfC+alo5/8MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCH3y5aWWrvjm7xSaXZCgSDmkcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQyNmNiOTgtNzQ2ZC0z ODM5LWJhYzgtOTAxZTU4OGM4MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMuSaaHVlJ8a50gCSYAb8R5yH7CWDduVFdMcEJAaLnjEtobeAGkMgBX b/KD5eG1GAAOYNwIX85kgJHBhsdJdG46lMLxyWnYz7AIvNyR7uLgPZKI9cgtef+R QUQ5HLTt3Sof8+SMg/xJCC9reqRXz2KCFhekmqLh5wdue1XebAeEn/DLfrUkIpvX 0PuavZuVqOQ3+UhUvQLMl7ScExFvConC03WxbMBGcogB2r1YE9wUdfOrebDjkUR1 OL7EIajJBZbHlShaVOqradiH5bJH+sL9UeHFZYGMMD+rt9Of4WsGYKVeWgt/qXd+ nrcNLmpRUnrRX4P1vSvIv+aDaLhptNk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:02 2025 by rpki-client