$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa File: 33822243-69e4-3d54-98ee-ca1bf1ad9525.roa (raw, json) Hash identifier: r50LcVVKOxR7qpanVRUHhOzAIyH50/0KeIU/tHBsfi8= Subject key identifier: 32:29:E8:E5:6B:D7:7D:27:99:CA:6F:E3:B4:28:53:CE:65:56:D5:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784D87E8670F354F0DDB2A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 19484 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d8:7e:86:70:f3:54:f0:dd:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d1e23449-07ab-4201-96ce-2a1b56780f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:22:c9:bc:5b:e5:bd:09:51:96:c1:2c:80: 02:b9:fc:50:b9:a7:cf:10:20:23:d0:bd:e7:00:25: 3e:da:17:d7:a5:23:5b:8f:68:51:33:81:19:c0:3b: 6a:25:d2:9f:b4:f7:85:2f:5f:7d:68:b1:7d:70:3d: ba:75:8f:99:1d:48:54:eb:8d:13:88:17:80:c2:39: 81:95:12:55:dc:59:87:7f:62:42:60:60:08:ea:30: 89:3f:ff:15:b2:82:62:fe:e6:fe:61:44:ea:30:ef: c6:93:ff:d2:ae:ba:a6:2f:53:98:6f:a5:f8:44:fa: 5e:8a:77:7b:de:27:09:a5:db:27:89:22:da:38:3e: 78:15:d5:a1:32:20:83:b7:e4:02:c3:d1:dd:07:e0: 36:10:23:bd:44:05:cd:39:32:e9:54:a3:32:6b:9a: ad:c8:a3:c5:a5:45:fa:6b:0f:6b:b3:0c:81:c7:25: a4:2c:2a:40:98:01:a9:e0:22:b9:e5:e0:35:98:a4: 5a:ca:f1:ab:e4:49:ae:50:c0:6d:c5:77:3b:b6:ea: 2f:a4:a1:c1:ae:18:a0:96:49:52:90:72:a2:95:71: fa:cb:fe:48:99:19:99:ae:12:0d:52:49:4a:30:32: 98:57:d7:26:d5:68:db:2e:81:c0:22:01:e3:8c:8f: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:29:E8:E5:6B:D7:7D:27:99:CA:6F:E3:B4:28:53:CE:65:56:D5:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3f:c7:7d:f5:39:d6:ec:74:46:f5:15:22:2f:22:45:b3:d4: b5:24:ac:18:3b:74:6e:f5:af:51:ae:39:4a:6b:25:bb:2c:ab: e1:a0:df:f5:28:27:62:f4:d5:12:17:cc:5b:dd:6a:56:96:a4: 18:83:ff:b8:1d:94:44:1e:b0:74:fb:e3:b1:01:91:47:53:f9: 37:2d:8a:ff:f0:95:e3:e9:f6:9c:4a:36:ba:3b:f5:fa:1c:23: db:29:dd:7d:a2:5e:99:d6:70:9b:0c:54:8d:df:60:30:d6:be: d2:eb:e8:70:70:0f:d7:05:47:6b:98:ba:44:be:b4:24:d9:ef: 70:45:aa:88:af:6d:98:4a:ba:47:38:2f:bc:22:47:41:22:99: ec:3a:85:8f:d3:0f:9c:8c:22:8e:df:ea:97:09:e5:22:20:4e: 5c:0c:da:09:62:55:51:44:74:1d:38:45:8f:d9:d7:ff:cb:15: e8:65:60:45:ed:f9:f2:ab:a6:81:fd:35:c6:85:6d:ea:c4:68: 98:0a:0b:03:98:a4:11:7a:20:1c:92:37:08:e7:a3:95:4a:d3: c5:2f:b8:db:8a:0e:29:df:7f:0d:c5:6f:0b:6c:cc:34:78:5d: eb:31:8f:b6:bc:4d:ba:c5:31:0a:e8:a5:07:c6:46:25:bd:02: e0:49:6e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNh+hnDzVPDdsqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDFlMjM0NDktMDdhYi00MjAxLTk2Y2UtMmExYjU2NzgwZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Eiybxb5b0JUZbBLIACufxQuafPECAj0L3n ACU+2hfXpSNbj2hRM4EZwDtqJdKftPeFL199aLF9cD26dY+ZHUhU640TiBeAwjmB lRJV3FmHf2JCYGAI6jCJP/8VsoJi/ub+YUTqMO/Gk//SrrqmL1OYb6X4RPpeind7 3icJpdsniSLaOD54FdWhMiCDt+QCw9HdB+A2ECO9RAXNOTLpVKMya5qtyKPFpUX6 aw9rswyBxyWkLCpAmAGp4CK55eA1mKRayvGr5EmuUMBtxXc7tuovpKHBrhiglklS kHKilXH6y/5ImRmZrhINUklKMDKYV9cm1WjbLoHAIgHjjI/ijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIp6OVr130nmcpv47QoU85lVtXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzM4MjIyNDMtNjllNC0z ZDU0LTk4ZWUtY2ExYmYxYWQ5NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg/x331OdbsdEb1FSIvIkWz1LUkrBg7dG71r1GuOUprJbssq+Gg3/Uo J2L01RIXzFvdalaWpBiD/7gdlEQesHT747EBkUdT+Tctiv/wlePp9pxKNro79foc I9sp3X2iXpnWcJsMVI3fYDDWvtLr6HBwD9cFR2uYukS+tCTZ73BFqoivbZhKukc4 L7wiR0Eimew6hY/TD5yMIo7f6pcJ5SIgTlwM2gliVVFEdB04RY/Z1//LFehlYEXt +fKrpoH9NcaFberEaJgKCwOYpBF6IBySNwjno5VK08UvuNuKDinffw3FbwtszDR4 Xesxj7a8TbrFMQropQfGRiW9AuBJbig= -----END CERTIFICATE-----Generated at Sun Apr 27 02:27:58 2025 by rpki-client