$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa File: 738ca01d-c305-33d7-9286-16441f2c8e35.roa (raw, json) Hash identifier: KCmWlUUootghfDXUk9NdKfYAzjW2tge4TJXrD/d3bn8= Subject key identifier: DA:4A:6A:69:F8:0E:59:EA:2C:5C:10:9B:8B:2D:1E:D0:22:1B:20:11 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784E832C0FCD5433E7FB300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e8:32:c0:fc:d5:43:3e:7f:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4905c1b5-4d85-4be3-a9aa-6f961a4c91b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:73:7d:9c:4e:06:da:47:62:d2:77:74:ee: 07:05:88:a9:45:6b:dc:57:d7:4f:34:54:d8:5c:15: 5a:22:7f:a2:fd:da:24:90:37:f1:98:6b:53:ec:dc: e5:25:37:14:e5:b0:7e:70:8d:7c:fd:47:2d:14:72: 0b:eb:02:e5:18:ac:9b:2a:09:b2:28:df:02:15:30: 24:be:43:16:29:fe:49:10:94:0b:92:fb:e6:6b:46: ac:6e:02:c3:74:6b:48:24:5c:a3:82:27:82:e1:3c: 9e:a9:13:ba:10:fc:5f:d8:b3:31:f1:28:3b:0c:5a: 1b:21:dc:63:9d:36:7f:9e:06:a0:3c:59:07:56:24: 57:db:e5:b7:b6:4f:9c:ad:cf:64:22:33:9c:0f:23: a9:18:26:9a:af:97:6b:60:0e:81:88:df:59:f9:4e: 6c:6f:94:60:d7:20:c7:f4:d9:d4:73:ce:02:03:cb: 84:13:89:0d:52:82:6f:2b:ea:db:3c:25:40:4a:dc: f9:e6:99:11:71:43:2c:e2:af:5e:fd:d2:d7:0e:18: 74:f8:b7:88:44:de:7c:0e:9e:65:39:a9:28:76:d6: 3b:a9:6c:7e:d8:b8:48:20:43:7c:c0:6d:dc:43:f3: e9:5b:c8:55:d8:c0:e6:6b:bf:62:cb:2c:4f:44:49: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4A:6A:69:F8:0E:59:EA:2C:5C:10:9B:8B:2D:1E:D0:22:1B:20:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2a:03:4f:98:a3:ea:7c:a2:7f:39:54:cc:4f:58:af:e4:ee: 8b:ec:f6:b8:bd:97:87:9a:48:bf:e1:b1:c5:8b:cb:dc:67:69: 4a:a6:42:8e:c5:6c:fd:7b:47:96:4f:67:c6:da:94:71:f8:93: 99:cc:2d:0a:4a:51:dc:07:5a:d1:90:b3:f0:5b:e4:55:79:04: aa:bd:29:33:33:c5:75:b9:16:84:c3:e9:3e:1d:da:4e:a2:c6: 40:fc:ba:8b:c2:fa:4c:1a:84:35:5c:25:fc:94:5b:94:47:f7: 9f:5d:ce:0b:73:e2:d6:56:d9:97:57:93:31:f4:06:3c:20:57: e8:71:be:41:4d:d2:42:6f:c2:2a:89:44:20:e6:62:5d:aa:a0: b7:ce:a2:7a:8e:98:08:ce:a9:1c:7b:41:b5:3d:66:64:0c:33: 5b:39:aa:e8:c0:96:38:13:6b:9f:cf:5e:a0:05:b9:a8:f9:66: 93:9e:23:5b:5d:6b:7d:6a:07:31:5e:e2:76:22:98:ae:6a:88: 4f:a4:d5:3a:79:83:a5:7c:a4:25:2e:09:91:87:7c:e3:f6:72: 8d:07:0d:73:3c:ba:62:cc:3f:8e:e9:7d:0f:9f:a1:94:37:3b: 39:30:58:05:1e:f3:a6:b3:a6:28:39:d8:33:26:5d:0d:77:8b: fe:e2:5d:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOgywPzVQz5/swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDkwNWMxYjUtNGQ4NS00YmUzLWE5YWEtNmY5NjFhNGM5MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc1zfZxOBtpHYtJ3dO4HBYipRWvcV9dPNFTY XBVaIn+i/dokkDfxmGtT7NzlJTcU5bB+cI18/UctFHIL6wLlGKybKgmyKN8CFTAk vkMWKf5JEJQLkvvma0asbgLDdGtIJFyjgieC4TyeqRO6EPxf2LMx8Sg7DFobIdxj nTZ/ngagPFkHViRX2+W3tk+crc9kIjOcDyOpGCaar5drYA6BiN9Z+U5sb5Rg1yDH 9NnUc84CA8uEE4kNUoJvK+rbPCVAStz55pkRcUMs4q9e/dLXDhh0+LeIRN58Dp5l OakodtY7qWx+2LhIIEN8wG3cQ/PpW8hV2MDma79iyyxPREnBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpKamn4DlnqLFwQm4stHtAiGyARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzM4Y2EwMWQtYzMwNS0z M2Q3LTkyODYtMTY0NDFmMmM4ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgqA0+Yo+p8on85VMxPWK/k7ovs9ri9l4eaSL/hscWLy9xnaUqmQo7F bP17R5ZPZ8balHH4k5nMLQpKUdwHWtGQs/Bb5FV5BKq9KTMzxXW5FoTD6T4d2k6i xkD8uovC+kwahDVcJfyUW5RH959dzgtz4tZW2ZdXkzH0BjwgV+hxvkFN0kJvwiqJ RCDmYl2qoLfOonqOmAjOqRx7QbU9ZmQMM1s5qujAljgTa5/PXqAFuaj5ZpOeI1td a31qBzFe4nYimK5qiE+k1Tp5g6V8pCUuCZGHfOP2co0HDXM8umLMP47pfQ+foZQ3 OzkwWAUe86azpig52DMmXQ13i/7iXRw= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:48 2025 by rpki-client