$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa File: 192335d9-916c-318c-8388-956ea609b14b.roa (raw, json) Hash identifier: 9oD27TIR4UEx8oz3i98enjyEG8oLDOU515WnjNXJCFg= Subject key identifier: 7C:54:C4:62:65:96:F5:C1:F9:3D:85:D7:E9:DB:43:04:97:F2:D8:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784E4BFAB34133CF2069400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e4:bf:ab:34:13:3c:f2:06:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8a64b57f-4419-4722-ad94-4980c573cfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:fc:78:0a:7a:80:53:95:a2:59:34:75:b5:54: e4:7e:46:6a:de:15:23:61:a5:30:c2:07:73:ac:3a: b5:3d:1a:58:43:d6:1a:7a:10:15:f5:ba:dc:03:79: 88:f7:57:f5:1a:b5:ed:0f:5a:b1:15:a0:48:5d:72: 42:64:d0:d9:a8:60:aa:f8:4c:98:03:93:26:de:a5: 54:3e:07:35:89:43:d3:75:47:0f:6f:45:1a:8b:e9: 4a:5a:c5:7b:7f:0f:5c:dd:32:78:f4:06:ec:91:9b: 30:41:17:38:a4:19:67:06:d0:5d:ff:55:f1:63:69: 99:87:95:f1:37:11:af:68:5c:7a:74:f5:4a:3c:37: bd:94:05:ef:c8:1f:0b:d0:ed:02:f6:e6:0c:f1:d1: 86:02:8c:a2:04:3b:4e:ad:f4:d6:1a:a3:31:80:c1: 7a:29:6e:e4:6f:b1:29:fb:e4:c3:3b:72:f4:d2:87: 05:4f:f0:c5:f6:60:55:12:8d:dc:2e:88:e8:14:c9: 73:1c:d6:42:fb:38:7a:78:67:db:93:8f:0b:f9:80: 18:94:ea:cb:1b:e7:67:bc:48:69:d1:8e:3a:62:42: 44:a5:e1:aa:01:b1:9a:fb:27:79:65:07:10:ba:e4: d1:4c:b2:21:0c:cb:60:95:f9:49:50:cc:86:a9:85: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:54:C4:62:65:96:F5:C1:F9:3D:85:D7:E9:DB:43:04:97:F2:D8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:48:54:27:7d:e9:9b:fb:f9:79:31:0d:86:d4:b8:e5:e2:60: 14:36:ca:2a:f5:79:51:dd:d3:64:58:61:9a:81:f7:af:17:f6: cc:c8:58:ee:28:3a:dd:88:c9:73:66:f2:e4:21:a6:7a:e3:70: ef:da:4e:81:ad:59:6f:92:46:ad:2e:44:0d:a6:6a:7d:6a:61: 37:75:61:fc:33:db:de:be:9d:bb:ef:92:3b:6b:03:9d:ac:1b: bd:2c:ad:bb:e7:16:b0:1d:af:ed:f3:bf:12:d5:8d:8c:bb:d1: 12:95:b5:72:91:14:cd:c2:f3:b2:41:c4:d9:5a:8b:77:55:4d: f0:90:6d:e9:9d:83:03:22:31:f1:63:6d:3e:76:22:92:f1:03: 43:c7:d0:db:ff:22:b2:93:80:0b:c6:bb:bb:5f:24:89:af:d4: e5:a7:a6:8e:2a:19:21:cf:22:f0:10:04:b2:8e:42:72:84:2d: 5a:2f:71:46:f0:f7:37:9f:1f:b2:b0:b2:28:48:38:34:f6:40: 29:a0:4c:6b:bd:f2:d9:55:79:cd:64:be:cd:48:54:64:23:7a: b0:8e:a9:ac:20:e0:6f:be:0d:14:2c:89:90:9d:d8:67:f1:c7: a6:ec:35:29:b3:08:1e:90:ba:a7:48:16:8e:ef:90:86:55:75: 8b:33:10:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOS/qzQTPPIGlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGE2NGI1N2YtNDQxOS00NzIyLWFkOTQtNDk4MGM1NzNjZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vx4CnqAU5WiWTR1tVTkfkZq3hUjYaUwwgdz rDq1PRpYQ9YaehAV9brcA3mI91f1GrXtD1qxFaBIXXJCZNDZqGCq+EyYA5Mm3qVU Pgc1iUPTdUcPb0Uai+lKWsV7fw9c3TJ49AbskZswQRc4pBlnBtBd/1XxY2mZh5Xx NxGvaFx6dPVKPDe9lAXvyB8L0O0C9uYM8dGGAoyiBDtOrfTWGqMxgMF6KW7kb7Ep ++TDO3L00ocFT/DF9mBVEo3cLojoFMlzHNZC+zh6eGfbk48L+YAYlOrLG+dnvEhp 0Y46YkJEpeGqAbGa+yd5ZQcQuuTRTLIhDMtglflJUMyGqYXmCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxUxGJllvXB+T2F1+nbQwSX8thZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTkyMzM1ZDktOTE2Yy0z MThjLTgzODgtOTU2ZWE2MDliMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhIVCd96Zv7+XkxDYbUuOXiYBQ2yir1eVHd02RYYZqB968X9szIWO4o Ot2IyXNm8uQhpnrjcO/aToGtWW+SRq0uRA2man1qYTd1Yfwz296+nbvvkjtrA52s G70srbvnFrAdr+3zvxLVjYy70RKVtXKRFM3C87JBxNlai3dVTfCQbemdgwMiMfFj bT52IpLxA0PH0Nv/IrKTgAvGu7tfJImv1OWnpo4qGSHPIvAQBLKOQnKELVovcUbw 9zefH7KwsihIODT2QCmgTGu98tlVec1kvs1IVGQjerCOqawg4G++DRQsiZCd2Gfx x6bsNSmzCB6QuqdIFo7vkIZVdYszEHE= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:28 2025 by rpki-client