$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc631e5-4879-3a4a-9694-621c467470e1.roa File: 7fc631e5-4879-3a4a-9694-621c467470e1.roa (raw, json) Hash identifier: B50HoJyxaYUcfu4WabNSneueU8+8HJRqQO+23UGuC48= Subject key identifier: DE:CE:F3:5A:F4:D6:50:15:03:02:72:35:CE:7F:EC:C4:08:3F:DD:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784E2E6F80596D88BF45340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc631e5-4879-3a4a-9694-621c467470e1.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 19484 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e2:e6:f8:05:96:d8:8b:f4:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9fbd9bca-e02d-4c9d-8198-f31e22e1d886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:16:02:26:ff:ee:a2:c9:45:b5:e6:b0:d3: 89:35:f2:ed:70:6c:5f:43:3c:1a:4b:12:63:75:61: b1:24:8a:f2:3b:2f:0b:c7:44:e1:f1:e8:84:b8:b7: c9:2c:23:66:db:dc:a5:b4:c1:d2:f4:73:05:d3:0e: e3:10:f2:9f:ec:f5:b5:0c:b8:97:e6:3b:77:bf:f9: 7c:fc:fa:0f:bb:38:d9:f6:ac:a9:d6:e8:e9:6a:31: 6e:ac:7b:83:e9:5d:da:24:2b:5b:ee:f3:d8:8d:39: 2f:e4:ad:dc:86:90:cb:79:67:cf:6a:c6:8c:e0:92: e6:8a:36:3f:6f:ff:65:5c:a9:a8:74:d0:26:b2:8e: ed:e5:ea:a2:73:06:83:e6:ec:85:93:d3:da:0e:6d: ec:b9:0d:ca:84:4d:8f:c4:4b:cd:d7:95:41:a6:36: 0a:6b:de:7f:55:41:98:db:cd:07:b9:8a:43:76:ba: 39:10:3a:35:6e:6e:af:e5:fd:03:63:51:b7:bd:32: 52:5c:0c:59:4c:13:66:94:66:2e:71:cd:c3:47:67: a2:4b:cc:d2:ab:f1:91:12:7b:b5:17:72:e8:4a:12: 45:e4:8f:63:cf:cd:60:ae:61:18:d9:35:a1:48:3d: fa:d2:d7:13:d9:d9:ae:fe:04:84:9e:42:0e:a5:be: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CE:F3:5A:F4:D6:50:15:03:02:72:35:CE:7F:EC:C4:08:3F:DD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc631e5-4879-3a4a-9694-621c467470e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:17:7a:96:58:80:56:70:d6:8b:93:2b:37:c5:b1:4f:82:86: 23:b8:7d:09:bf:a4:22:86:9a:4b:41:3a:d8:01:9a:9d:40:54: 58:7b:ba:cc:5b:40:34:5e:0b:5d:de:37:14:93:96:01:72:ae: 5f:aa:45:f1:c1:67:16:71:0c:fa:48:c2:92:70:23:8f:a4:32: 72:00:72:7b:14:a0:97:03:e6:71:87:1e:60:14:e0:c9:3c:f5: ab:8b:e0:00:c6:87:e3:24:8f:19:88:80:0f:31:28:dc:3d:25: 38:6b:5f:22:9f:eb:61:3a:35:94:5e:be:8d:8d:37:e8:90:6b: 94:00:86:cf:69:f9:25:5c:da:40:cc:24:83:92:ff:07:fa:2a: 97:14:d9:44:96:f5:24:25:ac:dd:ff:13:6d:73:cc:9e:83:d7: 2a:1a:3a:99:29:97:83:0e:11:e9:29:98:2c:ad:b8:5d:56:3e: e9:f0:f4:d1:05:eb:1f:8c:c7:14:de:cb:16:35:f8:ff:a4:bb: 5c:23:76:3e:7c:95:36:d2:28:08:54:b5:23:ee:52:3c:2f:86: 7b:66:90:bf:4e:43:f1:19:53:d9:83:51:a2:9a:09:7b:42:9f: 0c:70:60:97:43:1a:ee:e7:a2:56:95:01:60:80:ac:ee:2f:10: a9:a1:28:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOLm+AWW2Iv0U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWZiZDliY2EtZTAyZC00YzlkLTgxOTgtZjMxZTIyZTFkODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVgWAib/7qLJRbXmsNOJNfLtcGxfQzwaSxJj dWGxJIryOy8Lx0Th8eiEuLfJLCNm29yltMHS9HMF0w7jEPKf7PW1DLiX5jt3v/l8 /PoPuzjZ9qyp1ujpajFurHuD6V3aJCtb7vPYjTkv5K3chpDLeWfPasaM4JLmijY/ b/9lXKmodNAmso7t5eqicwaD5uyFk9PaDm3suQ3KhE2PxEvN15VBpjYKa95/VUGY 280HuYpDdro5EDo1bm6v5f0DY1G3vTJSXAxZTBNmlGYucc3DR2eiS8zSq/GREnu1 F3LoShJF5I9jz81grmEY2TWhSD360tcT2dmu/gSEnkIOpb4w5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7O81r01lAVAwJyNc5/7MQIP90MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2ZjNjMxZTUtNDg3OS0z YTRhLTk2OTQtNjIxYzQ2NzQ3MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgXepZYgFZw1ouTKzfFsU+ChiO4fQm/pCKGmktBOtgBmp1AVFh7usxb QDReC13eNxSTlgFyrl+qRfHBZxZxDPpIwpJwI4+kMnIAcnsUoJcD5nGHHmAU4Mk8 9auL4ADGh+MkjxmIgA8xKNw9JThrXyKf62E6NZRevo2NN+iQa5QAhs9p+SVc2kDM JIOS/wf6KpcU2USW9SQlrN3/E21zzJ6D1yoaOpkpl4MOEekpmCytuF1WPunw9NEF 6x+MxxTeyxY1+P+ku1wjdj58lTbSKAhUtSPuUjwvhntmkL9OQ/EZU9mDUaKaCXtC nwxwYJdDGu7nolaVAWCArO4vEKmhKP8= -----END CERTIFICATE-----Generated at Sun Apr 27 14:17:16 2025 by rpki-client