$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa File: 1846a1ae-e4b1-342c-a08f-173f928c2d62.roa (raw, json) Hash identifier: gSLGnB+0OVHrRpu54ZR8yDuVfoAGLLLr6pfjfzEWQv8= Subject key identifier: 1E:E2:7E:E1:07:B4:A8:CE:88:33:CA:1E:62:B2:9C:47:67:B1:F4:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A78516CCC6C9E8670529D6C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:16:cc:c6:c9:e8:67:05:29:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9ef64d87-6c64-4cdb-940b-74677114f2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:93:24:12:b5:15:6d:08:1a:17:41:39:66: d7:2a:6d:83:20:86:7d:59:f0:b9:4a:dc:46:c5:42: 4d:c8:ed:98:7b:96:59:74:c1:9f:4e:f9:b5:7e:21: 95:3b:32:e3:d6:d5:e6:91:df:25:47:13:c4:17:66: 3b:4f:8c:89:59:2b:99:71:94:8b:00:09:5a:fc:3b: b8:32:07:44:a7:ef:00:37:93:c5:bc:f7:ce:ba:66: 76:c9:4c:ab:1e:61:c8:7c:4b:91:0a:bf:5b:75:fd: 48:4f:e7:e8:c2:79:06:93:a3:5a:62:06:94:a6:b1: df:1d:41:dd:c4:ea:f1:64:ba:59:51:c6:8b:77:1e: b5:6d:80:e0:9b:e3:c7:9c:55:81:b4:6d:1f:dc:42: 6f:3b:01:5a:8e:a5:46:0a:78:1c:04:4e:e4:05:2b: 2f:eb:c4:e6:7c:af:c0:3c:5c:0c:f8:f0:02:d2:94: a2:4f:3d:f6:00:9f:2d:b0:0b:89:1c:37:87:42:65: 62:62:86:51:a5:6d:13:13:2f:73:24:28:d8:8b:e3: cf:eb:06:a3:4b:1a:90:80:1f:65:11:35:5d:47:4c: 20:6b:c5:7b:65:6e:30:87:38:52:12:8c:88:e2:70: 7d:d9:7d:70:5b:56:28:c9:ab:b4:5e:83:73:cb:1b: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E2:7E:E1:07:B4:A8:CE:88:33:CA:1E:62:B2:9C:47:67:B1:F4:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2a:26:38:5c:94:92:93:21:f7:96:82:f5:68:ad:af:7f:03: 49:13:6f:0b:27:fe:15:31:ed:0f:da:ea:03:d6:e0:cc:dd:23: 0e:f4:ff:f9:77:5f:36:76:4b:fd:fb:32:30:bf:5f:4f:8d:fb: f6:6d:84:57:66:7d:cc:5c:ee:d5:f0:8f:ac:e7:42:f2:34:a9: a3:3a:f5:36:68:c5:1a:f6:85:56:d0:e1:c3:db:16:f9:13:07: f2:fe:e0:66:37:87:b8:c3:f2:85:4f:1b:4e:b7:3b:f9:7d:b8: ac:92:22:8f:0e:27:d4:af:e2:95:b1:a3:1c:be:f6:b5:e5:4c: b3:af:c6:dc:30:de:39:2b:e9:61:63:5b:81:8e:00:93:10:93: 0b:06:3c:15:9c:41:7f:14:73:7f:be:9c:b1:48:a2:d0:39:a4: 92:02:20:63:80:29:76:94:1e:7e:45:61:08:12:74:e2:30:62: d3:7a:06:bb:0d:6d:20:df:ee:92:cc:35:f7:bc:1f:24:11:a3: 35:a0:7b:42:28:a7:9a:68:7e:07:a1:82:8f:5c:91:e0:00:81: ed:9e:e1:f3:81:ad:bd:ff:cc:a6:ec:24:70:c9:b0:7c:bc:e3: 10:13:bf:f7:87:ab:ca:87:29:37:81:e4:65:1c:38:41:65:9f: 35:07:07:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRbMxsnoZwUp1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWVmNjRkODctNmM2NC00Y2RiLTk0MGItNzQ2NzcxMTRmMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhuTJBK1FW0IGhdBOWbXKm2DIIZ9WfC5StxG xUJNyO2Ye5ZZdMGfTvm1fiGVOzLj1tXmkd8lRxPEF2Y7T4yJWSuZcZSLAAla/Du4 MgdEp+8AN5PFvPfOumZ2yUyrHmHIfEuRCr9bdf1IT+fownkGk6NaYgaUprHfHUHd xOrxZLpZUcaLdx61bYDgm+PHnFWBtG0f3EJvOwFajqVGCngcBE7kBSsv68TmfK/A PFwM+PAC0pSiTz32AJ8tsAuJHDeHQmViYoZRpW0TEy9zJCjYi+PP6wajSxqQgB9l ETVdR0wga8V7ZW4whzhSEoyI4nB92X1wW1Yoyau0XoNzyxtfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7ifuEHtKjOiDPKHmKynEdnsfS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTg0NmExYWUtZTRiMS0z NDJjLWEwOGYtMTczZjkyOGMyZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsqJjhclJKTIfeWgvVora9/A0kTbwsn/hUx7Q/a6gPW4MzdIw70//l3 XzZ2S/37MjC/X0+N+/ZthFdmfcxc7tXwj6znQvI0qaM69TZoxRr2hVbQ4cPbFvkT B/L+4GY3h7jD8oVPG063O/l9uKySIo8OJ9Sv4pWxoxy+9rXlTLOvxtww3jkr6WFj W4GOAJMQkwsGPBWcQX8Uc3++nLFIotA5pJICIGOAKXaUHn5FYQgSdOIwYtN6BrsN bSDf7pLMNfe8HyQRozWge0Iop5pofgehgo9ckeAAge2e4fOBrb3/zKbsJHDJsHy8 4xATv/eHq8qHKTeB5GUcOEFlnzUHB7s= -----END CERTIFICATE-----Generated at Sun Apr 27 07:41:06 2025 by rpki-client