$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa File: 5b001049-2767-39ce-b192-9f580ee34804.roa (raw, json) Hash identifier: ce4P3QYRPcB82UiInmWI28ewPfSe0S3nkiUhBPpKJDc= Subject key identifier: 44:ED:07:B7:3C:A6:8E:4E:3E:A3:5B:80:AA:F8:AB:CD:A7:14:1C:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7852F2898C3AE10954BB780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2f:28:98:c3:ae:10:95:4b:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0cecf308-08f4-485b-8fce-d425303eab41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:49:f5:55:1f:7b:bc:3c:5e:6f:2a:6d:5b: 52:3a:97:28:95:49:9d:97:3f:84:4c:b6:27:66:2d: 12:b7:56:0a:fa:e5:22:4f:25:19:a2:90:e8:1f:23: d4:98:ab:b0:12:f9:07:a6:fe:cb:d5:67:4b:14:35: 9c:31:8c:76:7c:70:df:c0:3c:c1:fc:0c:f8:46:ca: f2:20:eb:c1:49:f5:f9:4a:a8:be:9a:ad:06:17:60: 99:34:fa:28:39:f6:0f:1d:4b:aa:03:1b:d7:79:fd: 4b:f3:32:86:39:cd:a3:09:9e:bf:a9:6c:ee:1b:16: 1a:61:9a:1e:70:ca:12:e7:67:2e:10:a9:d2:72:3b: 3b:42:c0:e1:62:e1:2f:29:87:ca:ff:e1:d7:88:a3: a1:85:ef:2a:3b:df:68:8f:93:b0:88:10:ed:b3:b0: d3:57:64:d0:92:69:7b:94:e2:d7:27:eb:00:5f:f7: 97:a1:c6:bf:8e:a7:ca:28:0f:38:c2:41:f4:5e:7b: f8:99:b0:d1:5f:73:fa:9c:bc:93:f4:db:e8:3b:9c: f1:ff:96:35:28:e2:55:fa:66:7c:fe:e9:2f:64:7b: 62:81:08:39:ed:a8:35:16:3d:bb:8f:e9:b9:77:f5: 58:f2:fe:e5:6c:71:f9:eb:6d:3f:0b:a1:8d:51:d5: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:ED:07:B7:3C:A6:8E:4E:3E:A3:5B:80:AA:F8:AB:CD:A7:14:1C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:93:74:e7:fe:d7:77:a3:fa:90:41:f1:28:f8:b1:61:c3:30: d5:be:34:79:5e:8d:8c:7e:aa:73:90:d9:6b:af:4b:8d:e3:bb: 34:ef:0d:cd:50:b3:4b:bf:7f:69:40:bf:ca:29:ba:da:8a:be: 44:ba:e8:08:d2:a0:e4:c9:61:2e:0d:d8:a8:2f:d8:cc:71:1e: c7:44:1a:c4:7c:43:fd:b3:0c:65:b0:df:3c:a5:82:73:92:8f: bf:c8:73:09:dc:c2:26:b3:5f:28:c5:da:a1:c9:bb:2f:cd:39: 6c:c3:74:6f:75:dc:85:c5:f9:05:57:d3:0e:4a:b0:a7:fd:44: dc:aa:21:aa:c7:cc:a3:f7:16:7b:74:f9:89:67:a9:8a:22:06: 69:d2:ac:02:d9:1b:e6:ba:0f:bc:21:b3:b9:2a:1b:b7:1f:8a: 75:91:54:a8:87:2e:d9:63:f7:a5:df:62:e9:42:b8:1f:bb:f7: b4:a3:12:21:84:6f:0e:5a:06:4e:e2:f0:6a:d7:42:c5:8c:03: f6:3d:02:00:9b:f7:9b:24:bc:cb:55:d1:53:43:f5:1c:8f:03: f0:87:54:53:2e:60:d6:15:04:b5:2a:52:8c:3c:ae:5a:f8:a7: 6d:f4:b7:bf:72:36:e8:da:fd:ba:04:b5:ad:8d:2d:84:ef:5c: 65:23:80:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS8omMOuEJVLt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGNlY2YzMDgtMDhmNC00ODViLThmY2UtZDQyNTMwM2VhYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPhJ9VUfe7w8Xm8qbVtSOpcolUmdlz+ETLYn Zi0St1YK+uUiTyUZopDoHyPUmKuwEvkHpv7L1WdLFDWcMYx2fHDfwDzB/Az4Rsry IOvBSfX5Sqi+mq0GF2CZNPooOfYPHUuqAxvXef1L8zKGOc2jCZ6/qWzuGxYaYZoe cMoS52cuEKnScjs7QsDhYuEvKYfK/+HXiKOhhe8qO99oj5OwiBDts7DTV2TQkml7 lOLXJ+sAX/eXoca/jqfKKA84wkH0Xnv4mbDRX3P6nLyT9NvoO5zx/5Y1KOJV+mZ8 /ukvZHtigQg57ag1Fj27j+m5d/VY8v7lbHH5620/C6GNUdXoWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETtB7c8po5OPqNbgKr4q82nFBxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWIwMDEwNDktMjc2Ny0z OWNlLWIxOTItOWY1ODBlZTM0ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeTdOf+13ej+pBB8Sj4sWHDMNW+NHlejYx+qnOQ2WuvS43juzTvDc1Q s0u/f2lAv8oputqKvkS66AjSoOTJYS4N2Kgv2MxxHsdEGsR8Q/2zDGWw3zylgnOS j7/IcwncwiazXyjF2qHJuy/NOWzDdG913IXF+QVX0w5KsKf9RNyqIarHzKP3Fnt0 +YlnqYoiBmnSrALZG+a6D7whs7kqG7cfinWRVKiHLtlj96XfYulCuB+797SjEiGE bw5aBk7i8GrXQsWMA/Y9AgCb95skvMtV0VND9RyPA/CHVFMuYNYVBLUqUow8rlr4 p230t79yNuja/boEta2NLYTvXGUjgA0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:31 2025 by rpki-client