$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa File: 555e037a-a202-3c23-9d76-142b857e9d3c.roa (raw, json) Hash identifier: hzI4gSmF/P5lceTbjpvbwGOYreeic+WOj/Jj1/99ePg= Subject key identifier: F7:F5:CE:AB:C7:FE:B6:79:03:E1:35:CE:5F:EF:42:E0:9D:DF:CE:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7850E27EC83B543D1710B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0e:27:ec:83:b5:43:d1:71:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=56d4b6b3-5425-4067-8d96-743cb097c149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:92:cf:f2:2b:e7:31:9c:fc:f0:9f:fc:b3: 98:9f:dc:69:f0:0e:57:28:70:4e:2d:01:8d:8f:df: d5:50:ed:7f:1e:22:6b:3c:06:00:80:e3:48:9d:4b: 0e:a8:32:4a:bf:3b:44:2a:53:d8:87:e7:4e:43:a5: 07:57:c7:f9:9b:a1:60:a7:5e:5f:56:92:c1:49:6c: a7:f4:b0:c1:2d:af:b3:61:58:23:42:2f:88:cd:1e: 41:4f:0a:94:2f:30:a4:2e:59:42:43:f4:d8:1f:40: ff:b3:92:7f:06:d5:9e:8c:83:9f:11:0d:ff:50:05: 53:97:04:eb:1c:fb:2d:c6:0f:1a:a6:37:73:3d:7c: 25:81:d0:43:6c:52:a9:1c:fa:de:55:45:37:e7:26: 31:ef:1c:a8:83:04:c1:51:a1:d5:1a:56:cd:b5:c4: f2:77:97:f3:c7:a5:87:36:c7:21:4b:32:6a:0a:d8: d7:47:bd:c4:0c:7c:bd:a8:30:83:4c:f2:cc:d4:5f: 1c:0c:ea:40:59:d6:24:92:20:ed:39:53:46:70:29: ad:62:1b:fb:86:87:d9:cd:21:f7:92:36:11:17:65: ea:43:e9:f9:5b:29:86:da:82:33:e9:d0:39:9f:36: 38:99:22:b0:ff:1a:9d:b8:61:3f:93:e6:2a:16:33: 43:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F5:CE:AB:C7:FE:B6:79:03:E1:35:CE:5F:EF:42:E0:9D:DF:CE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:97:38:ba:54:69:70:ef:b0:01:45:f6:93:ec:46:a8:ef: 4a:9a:0f:cd:b5:9f:b6:ad:c6:b9:55:75:70:32:02:98:ac:1e: 8d:3f:bf:c0:03:0f:ad:00:ec:09:df:4a:f5:e2:d4:6b:3a:a6: 6a:7f:e2:9f:f2:7d:a0:fe:ff:6a:27:b8:aa:2a:03:ce:0f:b1: a1:0b:ff:dd:e1:96:4e:49:b7:93:44:6c:4f:04:38:97:fe:66: d5:0a:55:8d:e8:1e:c1:35:ad:78:03:4a:3d:2b:50:00:f7:4b: e6:f5:4b:2f:9a:67:d6:d2:6f:14:c6:40:ea:01:52:a7:2b:a0: d3:6c:5c:29:05:b6:b4:d4:d3:d5:f8:6f:fa:e2:48:34:39:6a: e0:af:db:81:98:49:3f:cc:f3:30:18:95:c9:e8:b4:ef:e1:6b: 35:d6:b2:90:c1:30:3a:19:c4:ea:27:d0:10:72:1b:9b:db:c9: 53:9d:19:a7:c9:26:3d:40:85:28:4f:3c:d1:34:86:f6:1c:fb: 66:6e:e8:fc:6d:af:cf:3c:ea:73:62:81:01:55:b8:63:da:28: bb:3e:70:8a:fd:31:07:d7:ec:18:df:a4:0a:c8:3b:e4:66:97: c6:cf:2e:7d:ab:e6:f2:02:eb:62:f6:ce:04:24:a2:b8:e4:19: 67:1e:73:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQ4n7IO1Q9FxC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTZkNGI2YjMtNTQyNS00MDY3LThkOTYtNzQzY2IwOTdjMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuKSz/Ir5zGc/PCf/LOYn9xp8A5XKHBOLQGN j9/VUO1/HiJrPAYAgONInUsOqDJKvztEKlPYh+dOQ6UHV8f5m6Fgp15fVpLBSWyn 9LDBLa+zYVgjQi+IzR5BTwqULzCkLllCQ/TYH0D/s5J/BtWejIOfEQ3/UAVTlwTr HPstxg8apjdzPXwlgdBDbFKpHPreVUU35yYx7xyogwTBUaHVGlbNtcTyd5fzx6WH NschSzJqCtjXR73EDHy9qDCDTPLM1F8cDOpAWdYkkiDtOVNGcCmtYhv7hofZzSH3 kjYRF2XqQ+n5WymG2oIz6dA5nzY4mSKw/xqduGE/k+YqFjNDEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf1zqvH/rZ5A+E1zl/vQuCd384qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU1ZTAzN2EtYTIwMi0z YzIzLTlkNzYtMTQyYjg1N2U5ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfQlzi6VGlw77ABRfaT7Eao70qaD821n7atxrlVdXAyApisHo0/v8AD D60A7AnfSvXi1Gs6pmp/4p/yfaD+/2onuKoqA84PsaEL/93hlk5Jt5NEbE8EOJf+ ZtUKVY3oHsE1rXgDSj0rUAD3S+b1Sy+aZ9bSbxTGQOoBUqcroNNsXCkFtrTU09X4 b/riSDQ5auCv24GYST/M8zAYlcnotO/hazXWspDBMDoZxOon0BByG5vbyVOdGafJ Jj1AhShPPNE0hvYc+2Zu6Pxtr8886nNigQFVuGPaKLs+cIr9MQfX7BjfpArIO+Rm l8bPLn2r5vIC62L2zgQkorjkGWcecxQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:51:32 2025 by rpki-client