$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa File: 1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa (raw, json) Hash identifier: MOF4R06UnCGEjZ1gr3LV9Z2JVBkR5d4Xj4wKnWecV4E= Subject key identifier: ED:FA:CB:C8:E6:A2:4E:F9:52:06:88:02:23:51:75:C9:62:4B:28:A0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784DF3F4E33238EF638F580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:3f:4e:33:23:8e:f6:38:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2fc42ab1-38df-4126-b7e4-2579277848a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:96:9f:61:82:b7:2e:e2:70:eb:25:0b:f8: 67:38:83:61:27:ca:30:ac:54:e6:d6:55:9b:1c:c6: 74:e7:36:2c:5a:d2:62:68:7d:54:b3:ed:0a:17:f9: 6a:e0:b5:61:72:e7:20:ea:67:6a:e9:48:c1:d6:ce: 81:07:a3:f6:4e:e3:da:16:47:99:a8:00:45:3e:98: 05:b1:4c:be:f5:b1:da:93:a4:60:79:a3:8a:4a:cb: 49:ab:4d:94:47:c5:27:82:6c:1b:45:99:65:11:3a: a8:29:05:fb:b1:90:ac:00:45:59:cb:3d:38:5c:81: a5:cb:45:47:08:2f:23:9a:5e:2a:8a:8b:94:85:23: 36:c9:c9:b5:b5:af:0a:7b:d7:5a:04:04:ef:59:50: d0:fa:82:fa:a6:b2:7d:3a:c8:e8:e1:25:23:7f:d7: c1:bf:f9:40:87:4e:c6:ea:76:15:38:fa:ed:90:ad: ae:e4:3d:fc:b8:e7:24:de:98:a0:73:51:0e:b7:a8: 0e:ba:46:81:df:06:ee:21:64:9c:87:ad:c0:26:fa: bd:a5:0c:9a:dd:74:c5:4c:a2:18:aa:be:2e:cc:18: 23:97:53:fc:af:91:37:db:df:5e:33:66:3f:8d:0f: 1d:c7:4c:73:40:08:8c:34:97:0e:8a:db:4f:a6:a3: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FA:CB:C8:E6:A2:4E:F9:52:06:88:02:23:51:75:C9:62:4B:28:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f9:13:2d:d3:e5:d9:ba:92:77:30:0a:6d:dc:66:1f:a0:74: f7:14:b5:b1:24:79:72:09:99:24:0d:a9:3e:47:94:4c:0a:f9: 4a:0b:5b:26:a3:0e:9a:81:10:d6:85:37:f3:07:c1:5b:22:36: 23:ad:41:a6:c6:e5:8e:d2:76:0f:78:9c:3e:9b:ac:10:32:e6: b3:ac:7d:31:2b:7a:b9:72:95:a7:79:da:5c:f8:66:ae:77:ce: 66:8c:f6:ea:fa:85:1d:fe:bc:56:b1:2e:a7:7b:21:66:7c:30: 4f:7b:6b:07:6c:a4:77:6c:47:0b:c7:4c:21:59:85:59:c7:ff: b6:f3:f4:f1:f2:a5:3d:bc:aa:cf:f6:2a:a2:a4:df:05:8f:9e: 34:70:15:6b:82:82:53:ce:69:da:1c:7d:9b:32:65:02:45:8f: 22:94:ae:22:2a:83:5c:59:32:ac:d5:d2:59:a0:88:4f:bc:cb: e7:e4:fb:ce:e7:7f:0c:1b:4a:f0:e1:99:7f:22:28:de:98:6b: d7:7d:34:9b:c3:e0:2b:a9:69:61:9c:c8:0a:43:b9:c2:9b:f6: 67:87:e9:be:00:82:24:30:1a:85:b1:8b:08:6c:c7:ec:f2:80: b3:2c:3b:a6:ef:9f:b4:cb:f6:b2:5b:84:6a:7d:c0:59:5a:e5: 48:bc:ed:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN8/TjMjjvY49YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmZjNDJhYjEtMzhkZi00MTI2LWI3ZTQtMjU3OTI3Nzg0OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFmWn2GCty7icOslC/hnOINhJ8owrFTm1lWb HMZ05zYsWtJiaH1Us+0KF/lq4LVhcucg6mdq6UjB1s6BB6P2TuPaFkeZqABFPpgF sUy+9bHak6RgeaOKSstJq02UR8UngmwbRZllETqoKQX7sZCsAEVZyz04XIGly0VH CC8jml4qiouUhSM2ycm1ta8Ke9daBATvWVDQ+oL6prJ9Osjo4SUjf9fBv/lAh07G 6nYVOPrtkK2u5D38uOck3pigc1EOt6gOukaB3wbuIWSch63AJvq9pQya3XTFTKIY qr4uzBgjl1P8r5E3299eM2Y/jQ8dx0xzQAiMNJcOittPpqPXzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO36y8jmok75UgaIAiNRdcliSyigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTEwOGM1NWEtZDJjMC0z Y2YyLWE2NmItODY3NGE3MGU0Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr5Ey3T5dm6kncwCm3cZh+gdPcUtbEkeXIJmSQNqT5HlEwK+UoLWyaj DpqBENaFN/MHwVsiNiOtQabG5Y7Sdg94nD6brBAy5rOsfTErerlylad52lz4Zq53 zmaM9ur6hR3+vFaxLqd7IWZ8ME97awdspHdsRwvHTCFZhVnH/7bz9PHypT28qs/2 KqKk3wWPnjRwFWuCglPOadocfZsyZQJFjyKUriIqg1xZMqzV0lmgiE+8y+fk+87n fwwbSvDhmX8iKN6Ya9d9NJvD4CupaWGcyApDucKb9meH6b4AgiQwGoWxiwhsx+zy gLMsO6bvn7TL9rJbhGp9wFla5Ui87Xk= -----END CERTIFICATE-----Generated at Sun Apr 27 23:49:00 2025 by rpki-client