$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa File: 16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa (raw, json) Hash identifier: WmU/tiFrKatAXwcowFek19Yc/slpTh1tOgc8oJHsPRs= Subject key identifier: BB:15:6B:49:69:56:A6:2F:3B:2F:A0:DA:2D:A8:C6:45:DF:9D:6E:C3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784F5A8E1AED128813CA5E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f5:a8:e1:ae:d1:28:81:3c:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=70a5c3c4-d967-4270-8e0b-4fbf08f57e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:cb:e5:50:5f:da:78:83:60:b8:74:87:45: 46:db:0c:d8:6c:ee:a0:c9:e2:d4:37:40:18:98:e9: d1:37:b4:03:8f:ce:a7:76:d5:95:92:46:38:8b:11: 08:72:9d:36:3a:48:f2:cb:37:2d:ec:f1:c2:a9:42: d5:3c:04:72:bb:63:53:61:51:a2:fd:83:58:0c:9e: 6f:ce:82:c5:bc:6d:1a:1f:e0:d6:97:df:88:fe:6d: 9d:41:5f:69:7a:4a:98:38:70:6d:55:6a:b1:dc:6b: c5:36:79:57:26:04:36:54:92:e3:16:ba:fa:df:17: 6e:66:df:d2:f3:cf:a6:32:2c:d2:20:a7:78:d0:0d: e8:18:09:9d:3f:0d:43:03:8b:ec:8e:b4:40:fc:da: 66:dc:bf:e0:71:b8:64:bd:e2:8b:d5:76:6d:5b:d5: 46:98:79:0f:e0:fb:48:67:f0:55:69:03:7e:2c:8d: 73:c9:ad:ab:62:f0:29:e9:f3:47:70:58:88:71:f0: a8:21:39:3e:a9:9f:45:7b:b2:5e:fa:0f:3c:f1:fa: 13:34:9d:a5:24:84:40:71:ef:d0:f6:f6:a6:69:ee: ff:4c:03:d1:07:7c:c9:8c:34:79:a1:13:03:25:9d: 37:1e:f8:39:9c:cb:9f:7f:23:63:5c:99:34:66:5f: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:15:6B:49:69:56:A6:2F:3B:2F:A0:DA:2D:A8:C6:45:DF:9D:6E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9d:db:ee:71:c1:5b:ca:9d:0a:43:26:1b:fa:36:54:f6:82: 05:ba:3a:4e:9c:fa:b9:18:a7:5f:c3:41:8f:ea:d7:8c:8c:d8: 8b:95:cb:40:48:7f:d8:cb:d7:92:d8:ca:f4:63:3a:9f:46:c3: f5:66:67:1e:e2:84:bf:fa:eb:42:49:d5:2f:22:93:33:af:3d: 66:d7:1e:e5:4c:f4:8a:aa:b9:21:66:6e:2f:3a:5b:b9:1a:9e: 3b:cd:d9:58:00:35:ca:df:92:36:a1:49:4c:1a:e8:b1:4f:77: 6e:9a:38:65:78:f4:e4:4e:f6:96:69:1b:4a:a0:04:7c:65:2c: b6:bf:ae:2a:2e:41:40:53:a5:c7:5d:a6:e0:24:b5:b9:8d:d8: 57:5f:b6:46:79:e6:10:ea:5d:7b:92:34:5e:8a:ff:3a:5e:5d: 90:f3:e0:46:50:46:f7:d8:a7:ee:63:fc:64:e9:82:64:cc:48: a1:f8:3f:76:9e:6b:f2:a9:21:04:2a:05:e6:2c:e7:87:3c:b4: 71:83:22:10:3f:2c:77:da:64:bd:2c:1a:83:dc:ae:58:1d:39: 17:09:4c:f8:b8:a2:8e:05:db:f8:2d:f5:90:d6:d5:8a:01:2c: 6f:f1:d0:26:06:71:a7:55:00:cc:25:80:52:3c:63:31:b6:ee: ec:54:22:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPWo4a7RKIE8peAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzBhNWMzYzQtZDk2Ny00MjcwLThlMGItNGZiZjA4ZjU3ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNHL5VBf2niDYLh0h0VG2wzYbO6gyeLUN0AY mOnRN7QDj86ndtWVkkY4ixEIcp02Okjyyzct7PHCqULVPARyu2NTYVGi/YNYDJ5v zoLFvG0aH+DWl9+I/m2dQV9pekqYOHBtVWqx3GvFNnlXJgQ2VJLjFrr63xduZt/S 88+mMizSIKd40A3oGAmdPw1DA4vsjrRA/Npm3L/gcbhkveKL1XZtW9VGmHkP4PtI Z/BVaQN+LI1zya2rYvAp6fNHcFiIcfCoITk+qZ9Fe7Je+g888foTNJ2lJIRAce/Q 9vamae7/TAPRB3zJjDR5oRMDJZ03Hvg5nMuffyNjXJk0Zl9KqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsVa0lpVqYvOy+g2i2oxkXfnW7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTZlMWFjODEtODBhOS0z ZGVlLTliZmEtYThhMGQzMjg1MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6d2+5xwVvKnQpDJhv6NlT2ggW6Ok6c+rkYp1/DQY/q14yM2IuVy0BI f9jL15LYyvRjOp9Gw/VmZx7ihL/660JJ1S8ikzOvPWbXHuVM9IqquSFmbi86W7ka njvN2VgANcrfkjahSUwa6LFPd26aOGV49ORO9pZpG0qgBHxlLLa/riouQUBTpcdd puAktbmN2FdftkZ55hDqXXuSNF6K/zpeXZDz4EZQRvfYp+5j/GTpgmTMSKH4P3ae a/KpIQQqBeYs54c8tHGDIhA/LHfaZL0sGoPcrlgdORcJTPi4oo4F2/gt9ZDW1YoB LG/x0CYGcadVAMwlgFI8YzG27uxUImY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:48 2025 by rpki-client