$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa File: 3da83a5f-2475-344d-bc7c-33066927f827.roa (raw, json) Hash identifier: e7oVprTfySkkm9cuVGYvPI4oyAZ1LD/a2wmUz+taZrk= Subject key identifier: B7:43:E7:FD:D8:04:01:A3:E6:C9:2C:49:D9:C8:AC:3D:BD:15:F6:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785047401C9FB59B965FD40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:04:74:01:c9:fb:59:b9:65:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=250ed557-5128-4c75-8cf7-724f512b6a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:44:50:c8:42:aa:be:07:e9:ae:65:9b:30: 52:54:5c:60:fc:85:29:52:5f:b7:39:3d:23:fd:8a: bc:78:9a:d3:17:f1:07:ec:15:e2:58:74:95:ab:91: 68:bb:20:e3:d4:48:87:bf:96:b0:10:c3:97:a7:d7: c7:22:ef:06:9e:50:28:81:b4:36:e0:5d:18:2b:4e: 37:3b:27:15:bc:9f:24:7f:04:59:27:cc:e5:f9:d4: 74:52:2c:98:87:16:9f:9f:47:f1:20:be:05:91:53: 66:6b:73:79:71:ea:3c:11:e4:60:f7:25:3f:2d:39: 19:67:80:e6:2c:82:ec:69:27:5f:6f:68:91:55:b0: 3b:53:c6:20:45:9c:e8:a2:01:42:9c:95:57:fb:89: 88:c8:43:5a:76:f5:50:f8:82:d9:f4:9b:43:87:27: 55:66:6f:fa:88:f2:02:d9:85:ad:60:b6:42:99:89: 21:d3:6c:93:66:5b:27:29:5a:ff:dc:2f:95:cb:6e: 63:f2:2c:ed:c8:9d:9d:a2:d0:33:3b:49:3d:e9:79: b8:89:e0:c8:33:20:92:d7:03:04:98:9c:0f:83:4a: e5:f2:8f:d3:63:42:aa:e9:80:08:40:9f:2e:69:c7: 63:62:fb:d5:e9:c3:27:13:8b:e0:59:91:8c:be:67: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:43:E7:FD:D8:04:01:A3:E6:C9:2C:49:D9:C8:AC:3D:BD:15:F6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:af:3d:6d:d4:43:65:94:b1:1a:c9:ba:cd:90:ca:5c:1a:55: 1b:91:0d:8e:e2:0e:7b:26:12:9a:03:9b:be:fd:59:1f:6b:79: 19:60:40:bc:c8:3f:77:6d:c9:bd:06:eb:6b:ab:c6:b5:45:9f: 46:6f:f6:7c:d2:59:f6:6d:af:7e:20:68:9f:59:93:ef:ca:a2: 3b:8b:5a:d3:a1:d6:03:ba:e0:70:47:94:57:d0:f4:5a:56:01: 86:77:09:be:f0:d9:e5:0a:19:b3:81:46:6a:b1:dc:d5:c0:b9: c4:53:72:3a:37:30:2c:03:bd:1f:30:bf:f7:60:c3:c3:0f:ac: 11:1e:2d:53:23:a0:6f:16:40:e7:d0:51:ea:9b:dc:c7:75:20: 50:67:c1:58:f4:2c:1b:22:d7:d5:1b:5d:96:f6:46:fd:3a:7e: 4e:52:19:d0:42:bf:9a:2c:ce:b3:b2:f8:c5:55:f6:d4:b9:dc: 8e:78:02:f0:4e:88:84:5f:5b:86:fa:75:8f:1d:6a:04:68:d5: 52:db:09:3f:ca:0e:a9:8b:9b:63:0f:8d:52:25:a6:a1:31:ad: 86:52:b5:90:f6:89:ee:25:af:38:bd:13:94:77:cc:ca:aa:7c: e0:7c:14:08:56:dc:08:50:da:df:c3:6c:50:fa:cc:20:ea:cd: 92:17:ec:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQR0Acn7Wbll/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjUwZWQ1NTctNTEyOC00Yzc1LThjZjctNzI0ZjUxMmI2YTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXlEUMhCqr4H6a5lmzBSVFxg/IUpUl+3OT0j /Yq8eJrTF/EH7BXiWHSVq5FouyDj1EiHv5awEMOXp9fHIu8GnlAogbQ24F0YK043 OycVvJ8kfwRZJ8zl+dR0UiyYhxafn0fxIL4FkVNma3N5ceo8EeRg9yU/LTkZZ4Dm LILsaSdfb2iRVbA7U8YgRZzoogFCnJVX+4mIyENadvVQ+ILZ9JtDhydVZm/6iPIC 2YWtYLZCmYkh02yTZlsnKVr/3C+Vy25j8iztyJ2dotAzO0k96Xm4ieDIMyCS1wME mJwPg0rl8o/TY0Kq6YAIQJ8uacdjYvvV6cMnE4vgWZGMvmfgnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdD5/3YBAGj5sksSdnIrD29FfaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RhODNhNWYtMjQ3NS0z NDRkLWJjN2MtMzMwNjY5MjdmODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEavPW3UQ2WUsRrJus2QylwaVRuRDY7iDnsmEpoDm779WR9reRlgQLzI P3dtyb0G62urxrVFn0Zv9nzSWfZtr34gaJ9Zk+/KojuLWtOh1gO64HBHlFfQ9FpW AYZ3Cb7w2eUKGbOBRmqx3NXAucRTcjo3MCwDvR8wv/dgw8MPrBEeLVMjoG8WQOfQ Ueqb3Md1IFBnwVj0LBsi19UbXZb2Rv06fk5SGdBCv5oszrOy+MVV9tS53I54AvBO iIRfW4b6dY8dagRo1VLbCT/KDqmLm2MPjVIlpqExrYZStZD2ie4lrzi9E5R3zMqq fOB8FAhW3AhQ2t/DbFD6zCDqzZIX7Mo= -----END CERTIFICATE-----Generated at Sun Apr 27 11:37:43 2025 by rpki-client