$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e11929-fdd9-378d-af31-383f73149602.roa File: 41e11929-fdd9-378d-af31-383f73149602.roa (raw, json) Hash identifier: 5mZlixsddqVt6iKGr7PGgZWAdRlqAHu7svVegQPgEHA= Subject key identifier: FA:3F:AF:A7:75:56:E6:1B:05:8F:3E:BA:BF:4B:58:DB:4D:18:1E:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851F85B70630CB20960380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e11929-fdd9-378d-af31-383f73149602.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1f:85:b7:06:30:cb:20:96:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=77753909-4b5e-46b0-8518-f2dc72374d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:e6:2f:41:2a:37:b7:51:43:eb:3c:83:57: 1e:9a:f9:5b:79:8f:e2:38:94:fa:7d:92:43:c4:4f: 85:e0:6d:b8:3c:e7:d7:13:9e:a3:fe:f4:a2:e6:81: 9a:b8:ec:d3:0f:57:28:9c:10:6c:a6:b2:56:69:9b: 83:5d:08:a9:ed:2e:da:2c:5c:e2:31:5b:58:57:2a: 3c:59:31:0e:71:c7:4e:92:44:23:9c:5c:79:cd:b1: 43:06:01:32:e9:37:15:d4:da:49:e7:a3:e6:9e:cf: 87:cb:1d:a8:3f:45:31:61:4a:fa:a4:e4:6c:28:9f: 20:2a:c4:d5:d2:6f:8e:89:1f:7f:41:c2:43:9d:93: b6:a0:69:2c:e2:65:3f:12:74:a5:6c:24:f3:34:30: 2c:82:56:80:94:d1:fb:d8:ee:48:29:01:80:11:8a: 92:ad:75:e1:64:be:df:6f:b1:af:4c:a7:48:09:d1: 25:6c:e8:03:b9:2e:c6:6d:61:e9:5b:17:fa:3d:d5: e1:bc:e4:cc:70:0c:7b:e3:f7:13:9e:dc:de:7f:c2: cd:5a:5f:1f:83:87:fd:af:7c:ff:56:39:9b:24:fe: 25:b9:5a:a3:05:8d:11:53:60:66:23:d1:42:85:ed: fd:9e:3b:6e:81:11:54:d2:93:b4:c4:81:d7:26:b6: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3F:AF:A7:75:56:E6:1B:05:8F:3E:BA:BF:4B:58:DB:4D:18:1E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e11929-fdd9-378d-af31-383f73149602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:65:c2:7a:cc:78:d1:e7:04:8c:76:da:64:58:91:83:09:b0: 5c:9c:3e:52:e8:b5:5c:b0:d6:9d:83:50:36:80:9b:27:b7:97: d3:30:0d:44:db:4b:cd:73:4f:32:61:8e:24:5d:0e:0b:6a:38: c1:4f:6f:c0:16:76:4b:dd:b3:be:77:b0:cc:4b:38:36:e7:d8: 9d:91:6b:24:10:25:e6:4f:40:84:d5:b0:9e:8c:64:31:7f:77: 08:18:16:39:be:2d:bb:32:94:ab:53:97:35:d7:31:b8:8d:87: 9d:ed:a6:ef:19:45:45:35:86:52:a9:0f:c7:fc:e8:23:87:36: a8:66:2e:c7:4b:2b:ee:8e:82:3d:e3:57:e9:fb:e8:fe:47:84: e5:a0:12:cf:a7:a6:c7:ef:c6:6f:fa:8e:a4:4a:c6:1d:0e:25: 78:18:07:d6:ab:8a:83:3e:69:da:2d:e6:10:0c:25:41:ae:6b: 43:44:48:24:2c:c1:f8:70:bd:3e:55:5e:f2:21:9f:d7:57:99: 8c:55:7a:35:61:30:dc:02:b6:65:20:d8:5d:61:01:24:3d:f8: 61:b7:54:2d:fe:94:4d:0b:16:0d:8b:08:a8:03:6d:32:14:12: 37:6e:50:ed:ef:63:9a:e1:66:72:d9:c7:99:03:55:33:8f:a0: 4c:34:ec:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR+FtwYwyyCWA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Nzc3NTM5MDktNGI1ZS00NmIwLTg1MTgtZjJkYzcyMzc0ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+HmL0EqN7dRQ+s8g1cemvlbeY/iOJT6fZJD xE+F4G24POfXE56j/vSi5oGauOzTD1conBBsprJWaZuDXQip7S7aLFziMVtYVyo8 WTEOccdOkkQjnFx5zbFDBgEy6TcV1NpJ56Pmns+Hyx2oP0UxYUr6pORsKJ8gKsTV 0m+OiR9/QcJDnZO2oGks4mU/EnSlbCTzNDAsglaAlNH72O5IKQGAEYqSrXXhZL7f b7GvTKdICdElbOgDuS7GbWHpWxf6PdXhvOTMcAx74/cTntzef8LNWl8fg4f9r3z/ VjmbJP4luVqjBY0RU2BmI9FChe39njtugRFU0pO0xIHXJrYXrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo/r6d1VuYbBY8+ur9LWNtNGB6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFlMTE5MjktZmRkOS0z NzhkLWFmMzEtMzgzZjczMTQ5NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEllwnrMeNHnBIx22mRYkYMJsFycPlLotVyw1p2DUDaAmye3l9MwDUTb S81zTzJhjiRdDgtqOMFPb8AWdkvds753sMxLODbn2J2RayQQJeZPQITVsJ6MZDF/ dwgYFjm+LbsylKtTlzXXMbiNh53tpu8ZRUU1hlKpD8f86COHNqhmLsdLK+6Ogj3j V+n76P5HhOWgEs+npsfvxm/6jqRKxh0OJXgYB9arioM+adot5hAMJUGua0NESCQs wfhwvT5VXvIhn9dXmYxVejVhMNwCtmUg2F1hASQ9+GG3VC3+lE0LFg2LCKgDbTIU EjduUO3vY5rhZnLZx5kDVTOPoEw07F8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:15 2025 by rpki-client