$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa File: 46f9df07-36a0-3c65-a35e-145db3b8735f.roa (raw, json) Hash identifier: WB7HifW8kKgyoqljfyHy1jeqkOFrlXhsEaSkO7rWVNo= Subject key identifier: 96:B9:8D:8A:3C:7C:B4:FC:F0:25:41:23:10:4B:19:64:2A:4D:79:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851C80A41D605E520105F0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1c:80:a4:1d:60:5e:52:01:05:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1ddadd55-2f0a-41e5-b2b4-8d98fbf989ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:29:30:d1:77:e6:8a:e5:6c:f4:ef:62:b4: d0:00:81:82:6a:12:24:27:5a:49:01:90:4f:38:13: 45:c1:15:4f:19:0e:f8:08:a6:98:ba:e7:a5:e7:a8: f4:5d:11:65:a2:87:b2:1d:c7:2c:05:8f:1e:b6:c3: aa:fd:e7:81:02:50:30:90:e5:62:d3:52:6c:b5:82: f6:16:38:43:d1:5f:0a:37:32:fc:33:49:c0:e0:e2: 80:ae:f5:a2:fc:e3:b6:36:eb:93:d6:89:58:f3:6e: 79:e4:fb:dd:65:0f:e3:46:9e:d8:9e:d2:01:f7:15: f1:73:8a:24:f4:6a:9e:ac:95:3c:4c:37:61:7a:dc: 84:b6:95:26:63:03:86:57:7e:b6:59:8e:c8:b1:15: a1:06:8b:0b:14:3f:31:4c:70:a7:b8:20:9a:0c:8b: ed:36:65:99:40:c3:08:61:7a:be:1c:7e:a7:a5:65: e3:2b:61:4f:93:5d:70:75:c2:7d:96:b9:ce:5f:8c: fc:0b:da:a1:14:0b:c2:0a:d1:c4:55:03:92:09:0e: 2d:d2:06:88:45:7e:0a:3b:96:78:3e:d8:14:e4:69: ef:00:c0:f3:0e:ad:40:56:f7:e7:91:3e:35:7e:4c: 5a:02:25:68:12:4e:a8:72:84:10:6e:75:74:5d:d4: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B9:8D:8A:3C:7C:B4:FC:F0:25:41:23:10:4B:19:64:2A:4D:79:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7f:53:ba:69:23:c6:f3:b1:e9:4b:5b:2e:5e:4d:22:b9:05: d7:9a:bc:59:61:b5:5a:54:c2:fe:7b:93:68:eb:ca:85:f1:2c: 54:26:06:65:e8:15:da:83:11:7f:71:8e:a7:98:a0:0a:c5:6c: 0c:68:10:70:84:3c:d9:c9:40:82:94:2a:5d:67:c2:28:a3:7b: 66:db:92:d5:87:57:b9:54:17:e8:93:7f:74:8a:52:ab:80:a3: 4f:d2:c6:dc:af:53:55:f2:24:b5:9b:dc:5b:f9:08:54:42:27: f6:38:e3:09:f0:ea:3c:a1:84:9f:37:7d:57:ae:de:bc:8a:3d: 5a:2b:ec:1a:e1:41:f8:ab:e4:eb:01:53:b5:91:f6:2b:ac:80: 66:a6:b7:82:d8:6a:aa:32:18:cc:4a:65:68:2a:fd:1f:f7:1f: 50:26:da:8f:b6:dd:11:4f:6d:18:81:e3:f5:41:df:3c:ec:7e: 33:f9:44:d9:e2:52:9b:e2:b2:08:70:85:19:ac:86:d7:15:16: da:e3:49:c2:66:9d:32:4e:53:b8:e4:a4:6f:89:34:95:72:59: a6:6f:c5:c2:0c:05:9f:a4:ec:71:65:3e:56:bf:ad:c7:67:8f: 2c:dd:eb:27:2b:d0:7c:69:df:d5:ac:a7:8d:fa:e1:64:20:79: 5e:1b:b8:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRyApB1gXlIBBfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWRkYWRkNTUtMmYwYS00MWU1LWIyYjQtOGQ5OGZiZjk4OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwggpMNF35orlbPTvYrTQAIGCahIkJ1pJAZBP OBNFwRVPGQ74CKaYuuel56j0XRFlooeyHccsBY8etsOq/eeBAlAwkOVi01JstYL2 FjhD0V8KNzL8M0nA4OKArvWi/OO2NuuT1olY82555PvdZQ/jRp7YntIB9xXxc4ok 9GqerJU8TDdhetyEtpUmYwOGV362WY7IsRWhBosLFD8xTHCnuCCaDIvtNmWZQMMI YXq+HH6npWXjK2FPk11wdcJ9lrnOX4z8C9qhFAvCCtHEVQOSCQ4t0gaIRX4KO5Z4 PtgU5GnvAMDzDq1AVvfnkT41fkxaAiVoEk6ocoQQbnV0XdSjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa5jYo8fLT88CVBIxBLGWQqTXnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDZmOWRmMDctMzZhMC0z YzY1LWEzNWUtMTQ1ZGIzYjg3MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9/U7ppI8bzselLWy5eTSK5BdeavFlhtVpUwv57k2jryoXxLFQmBmXo FdqDEX9xjqeYoArFbAxoEHCEPNnJQIKUKl1nwiije2bbktWHV7lUF+iTf3SKUquA o0/SxtyvU1XyJLWb3Fv5CFRCJ/Y44wnw6jyhhJ83fVeu3ryKPVor7BrhQfir5OsB U7WR9iusgGamt4LYaqoyGMxKZWgq/R/3H1Am2o+23RFPbRiB4/VB3zzsfjP5RNni UpvisghwhRmshtcVFtrjScJmnTJOU7jkpG+JNJVyWaZvxcIMBZ+k7HFlPla/rcdn jyzd6ycr0Hxp39Wsp4364WQgeV4buGA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:29 2025 by rpki-client