$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa File: 56a1775b-c9a6-31aa-9040-b34009d9f364.roa (raw, json) Hash identifier: LAzCzH+nl4SoChM19Lo/kdINQLwoh6vD2UcXzcKe2G8= Subject key identifier: 74:8E:82:CB:4F:F8:46:C9:37:5B:BE:F2:CD:B3:EF:D6:5E:D6:45:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784F9F700E6E1DDF781AE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f9:f7:00:e6:e1:dd:f7:81:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ec2c74f8-8a0a-4507-a902-9e81b5e773ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:6e:e9:44:13:90:84:58:68:2a:81:00:eb: 53:79:12:6d:1f:fc:cc:40:d2:83:7d:79:57:c6:ce: 50:51:75:a7:30:0b:e0:53:9f:f9:74:65:bc:c1:67: db:d8:1b:b8:2b:1c:ac:57:1d:53:08:20:da:22:64: 19:93:83:8d:0e:4d:c1:0a:48:bc:22:ba:cb:f9:25: 33:87:26:23:98:24:e8:42:cf:74:6b:ef:bd:c6:47: fc:32:bf:bb:17:33:41:26:b3:a0:3e:33:c1:a2:d5: 04:80:db:93:ff:da:fe:6e:c2:f0:08:bf:a7:c2:27: a1:95:24:95:f2:02:1e:19:1c:1b:91:c4:a8:98:24: fc:ce:9f:aa:b9:d5:02:3c:7c:5c:f9:8c:5d:87:73: f7:a9:98:6e:31:62:22:91:ca:1c:41:53:e5:d8:19: 8f:1a:e8:92:76:e0:6a:47:58:0c:8b:2a:df:50:08: 04:42:bc:15:aa:93:2e:47:96:e3:ae:ca:66:8c:55: ce:4a:21:fd:2b:50:78:63:86:f1:b5:cb:57:6e:77: 82:00:5c:3a:69:c3:2f:9e:53:b9:21:a3:13:79:66: 3e:f0:16:c2:53:8b:d4:e1:8b:b4:67:fd:5f:14:d9: e5:21:c0:af:91:f6:dc:34:9f:7d:76:5f:98:5f:72: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8E:82:CB:4F:F8:46:C9:37:5B:BE:F2:CD:B3:EF:D6:5E:D6:45:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:65:22:3b:99:64:b1:d1:00:94:83:44:a0:70:66:63:4c:9d: c5:09:8f:76:0d:c9:cb:8d:95:f0:47:9e:80:8a:f3:f6:31:fd: 97:a3:ee:a2:43:9c:b1:5c:58:5a:ce:2f:26:d4:d4:12:dd:f4: 3a:99:84:a7:f2:fc:6f:31:2e:02:25:2c:c6:55:c0:77:c8:35: 8a:ba:a6:8c:67:c6:00:d8:7f:9d:45:0b:0e:b9:d8:07:56:0e: 9c:90:52:43:37:f1:02:3f:d5:29:55:32:93:1a:d1:68:75:35: a1:ca:c4:8e:f6:42:59:9e:e8:1f:42:15:12:30:6e:38:61:9f: be:76:63:42:2d:f0:77:3d:72:1d:96:e4:54:16:e5:a0:06:d6: c1:bd:b2:4d:04:f4:02:34:19:63:33:0c:68:2f:37:fd:95:a9: 9c:13:03:13:56:b4:dc:36:56:90:f4:75:28:03:f3:ed:c3:ac: 2b:df:9b:6b:76:92:fd:a0:32:5a:5b:44:05:69:7e:c9:fc:7d: 58:17:5b:6e:dc:99:46:a1:ce:39:0b:63:e4:7f:c4:73:a4:2c: d3:7f:46:a1:3d:1c:19:a4:62:ad:76:b7:fb:df:90:de:be:74: fa:5d:cd:06:69:55:3d:43:13:eb:74:31:62:6f:48:38:29:96: b7:ba:8e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPn3AObh3feBroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWMyYzc0ZjgtOGEwYS00NTA3LWE5MDItOWU4MWI1ZTc3M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL5u6UQTkIRYaCqBAOtTeRJtH/zMQNKDfXlX xs5QUXWnMAvgU5/5dGW8wWfb2Bu4KxysVx1TCCDaImQZk4ONDk3BCki8IrrL+SUz hyYjmCToQs90a++9xkf8Mr+7FzNBJrOgPjPBotUEgNuT/9r+bsLwCL+nwiehlSSV 8gIeGRwbkcSomCT8zp+qudUCPHxc+Yxdh3P3qZhuMWIikcocQVPl2BmPGuiSduBq R1gMiyrfUAgEQrwVqpMuR5bjrspmjFXOSiH9K1B4Y4bxtctXbneCAFw6acMvnlO5 IaMTeWY+8BbCU4vU4Yu0Z/1fFNnlIcCvkfbcNJ99dl+YX3IRfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSOgstP+EbJN1u+8s2z79Ze1kVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTZhMTc3NWItYzlhNi0z MWFhLTkwNDAtYjM0MDA5ZDlmMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFlIjuZZLHRAJSDRKBwZmNMncUJj3YNycuNlfBHnoCK8/Yx/Zej7qJD nLFcWFrOLybU1BLd9DqZhKfy/G8xLgIlLMZVwHfINYq6poxnxgDYf51FCw652AdW DpyQUkM38QI/1SlVMpMa0Wh1NaHKxI72Qlme6B9CFRIwbjhhn752Y0It8Hc9ch2W 5FQW5aAG1sG9sk0E9AI0GWMzDGgvN/2VqZwTAxNWtNw2VpD0dSgD8+3DrCvfm2t2 kv2gMlpbRAVpfsn8fVgXW27cmUahzjkLY+R/xHOkLNN/RqE9HBmkYq12t/vfkN6+ dPpdzQZpVT1DE+t0MWJvSDgplre6joQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:15 2025 by rpki-client