$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa File: 783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa (raw, json) Hash identifier: Qx/1f6kzAGtt37pCD13hBwFOPizq+2nsHVFoGrhcnh0= Subject key identifier: 17:40:56:D2:20:31:ED:12:7A:95:97:80:15:64:68:8B:31:52:94:BE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7852B56A2DAAC09323D5E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2b:56:a2:da:ac:09:32:3d:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f01a54fe-2fe4-45a6-b589-677553411e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:47:c7:43:1a:f9:e7:e6:65:15:8d:ba:a2: 75:e6:fe:2e:d7:bb:1d:16:8b:8d:01:e6:3d:44:12: 69:aa:b0:ad:d1:1f:da:48:1a:24:4f:99:5d:e4:09: 53:bb:83:10:f9:70:25:36:65:bf:a3:6a:25:c9:a3: c4:f8:dc:6b:c9:92:60:2c:ef:e8:2f:0a:77:b1:00: a5:83:16:f9:44:69:e6:06:81:88:41:cd:cb:56:db: 5a:70:62:be:b3:1c:88:f0:5b:2d:82:08:b2:cf:05: f6:51:83:5f:7f:66:27:11:a5:19:61:33:db:a4:cc: a1:ee:b8:27:db:65:f9:35:1c:51:27:8e:87:ac:72: 84:cc:bf:7a:f2:0e:41:57:fb:3a:13:f6:86:02:25: ba:f6:7e:cd:83:e9:cd:68:89:7d:28:37:22:2d:6c: 39:a3:3c:21:88:e0:af:41:c2:e9:56:69:b8:8a:f3: 95:82:a3:7a:be:a1:be:32:55:e2:3d:df:57:a9:fe: a6:d3:fb:3e:26:c3:8a:30:3f:14:e8:66:7f:4a:22: bd:d9:b6:72:db:37:6d:ae:2c:77:e1:60:cf:5c:25: ea:22:f5:37:8d:ee:d9:9d:6e:1c:be:7e:82:8a:27: 51:a9:ea:a5:e3:79:fa:c4:bd:b8:e8:1e:ad:ca:8a: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:56:D2:20:31:ED:12:7A:95:97:80:15:64:68:8B:31:52:94:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:02:8b:13:94:82:01:02:d0:45:32:e8:70:8c:9e:fc:45:6e: 21:4a:f4:4b:37:47:f1:9e:62:b3:9d:d0:3c:f3:51:da:a7:c8: 56:f9:a9:79:df:0f:b4:05:17:98:e3:53:a1:56:0e:32:46:63: 12:be:4a:4c:db:48:30:bc:f7:fe:82:12:cc:e0:e8:1a:0e:c0: 9d:51:fc:42:76:57:f5:80:3e:3c:4a:d8:85:dd:c6:6d:78:3c: e7:0d:c4:b6:b0:43:c2:cb:65:1f:2b:60:3e:16:d7:ac:d8:fc: b7:fa:b4:6f:58:50:82:56:ca:92:6a:5c:ca:94:47:4b:e4:65: 7c:ef:0d:04:bd:c2:44:3d:30:a8:cd:eb:6c:61:a2:d5:7c:9b: fd:90:0a:19:1b:70:78:4f:70:75:8f:36:91:ad:29:c5:aa:68: ec:af:c9:5d:7d:d1:da:48:cf:51:e6:3f:4f:81:6c:b7:e6:10: dd:1e:80:85:b4:64:ce:3e:60:fb:86:25:67:76:c1:fd:df:44: 36:d4:54:0b:68:bf:df:f9:55:79:14:48:9f:a6:69:43:b6:80: e8:03:7e:c5:18:80:ab:b4:87:44:13:5b:3d:21:83:b5:5c:fd: f9:c5:a9:ff:a9:e6:eb:29:88:d5:19:25:18:91:a7:fc:0f:c1: c3:61:a5:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhStWotqsCTI9XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjAxYTU0ZmUtMmZlNC00NWE2LWI1ODktNjc3NTUzNDExZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMBHx0Ma+efmZRWNuqJ15v4u17sdFouNAeY9 RBJpqrCt0R/aSBokT5ld5AlTu4MQ+XAlNmW/o2olyaPE+NxryZJgLO/oLwp3sQCl gxb5RGnmBoGIQc3LVttacGK+sxyI8FstggiyzwX2UYNff2YnEaUZYTPbpMyh7rgn 22X5NRxRJ46HrHKEzL968g5BV/s6E/aGAiW69n7Ng+nNaIl9KDciLWw5ozwhiOCv QcLpVmm4ivOVgqN6vqG+MlXiPd9Xqf6m0/s+JsOKMD8U6GZ/SiK92bZy2zdtrix3 4WDPXCXqIvU3je7ZnW4cvn6CiidRqeql43n6xL246B6tyoplxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdAVtIgMe0SepWXgBVkaIsxUpS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzgzZWFlYjMtNTEyYi0z ZGZhLWExZTktMjgyZDMyMWFhNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQCixOUggEC0EUy6HCMnvxFbiFK9Es3R/GeYrOd0DzzUdqnyFb5qXnf D7QFF5jjU6FWDjJGYxK+SkzbSDC89/6CEszg6BoOwJ1R/EJ2V/WAPjxK2IXdxm14 POcNxLawQ8LLZR8rYD4W16zY/Lf6tG9YUIJWypJqXMqUR0vkZXzvDQS9wkQ9MKjN 62xhotV8m/2QChkbcHhPcHWPNpGtKcWqaOyvyV190dpIz1HmP0+BbLfmEN0egIW0 ZM4+YPuGJWd2wf3fRDbUVAtov9/5VXkUSJ+maUO2gOgDfsUYgKu0h0QTWz0hg7Vc /fnFqf+p5uspiNUZJRiRp/wPwcNhpTk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:55 2025 by rpki-client