$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81f00e00-0284-3747-b154-af260a8fcf87.roa File: 81f00e00-0284-3747-b154-af260a8fcf87.roa (raw, json) Hash identifier: AO1RonETiApOsFbnTG6MqSyqcs/3sS2g3mm542i3k6Q= Subject key identifier: 9A:75:EF:BE:03:47:36:0A:1B:BF:6F:7B:7B:53:94:D1:D4:49:9F:51 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784FC9ECC606BD9BDCF2500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81f00e00-0284-3747-b154-af260a8fcf87.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fc:9e:cc:60:6b:d9:bd:cf:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=12da6cc6-3a39-4e47-8259-31ec6be67b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:1f:1e:0c:ed:69:38:63:4a:05:69:72:e4: d7:08:9c:4f:41:fa:86:ed:06:be:54:c8:9c:74:0d: f4:8f:23:20:18:c0:75:db:a3:9f:8f:5e:e8:83:42: 51:c3:a2:08:12:1c:fa:10:f5:89:b2:aa:91:34:10: 95:35:64:8a:51:ab:6a:25:88:50:ae:77:53:aa:dc: 8e:fc:26:f6:10:d5:e8:10:3e:c5:0b:c4:ed:a2:89: bc:e8:0f:dd:0a:32:a9:d3:f0:e0:69:56:a2:cd:13: 5a:29:28:dd:d5:ac:40:33:50:dd:8e:b9:a6:f2:c5: a0:a3:66:0d:63:26:ff:6e:32:8b:24:05:7f:f4:61: dd:6f:c6:bd:ce:5b:47:12:1a:09:26:13:e1:c1:7a: 23:81:b7:f7:69:af:e5:c5:eb:cb:3a:9d:e1:bb:02: 90:66:ce:c9:e6:d1:05:0b:cd:53:71:c8:3e:43:b1: 15:c8:07:08:0d:f5:23:2a:d8:56:8d:5b:fa:fd:f5: 8e:2d:3b:90:33:4b:85:c7:47:94:a5:36:88:3a:eb: 36:cc:85:0f:52:36:b8:15:a5:75:d0:9a:47:f8:df: ba:d7:91:fd:df:61:ba:26:29:df:0b:d7:d8:8a:08: 84:b3:29:43:95:d0:09:4a:97:c9:21:79:45:5c:44: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:EF:BE:03:47:36:0A:1B:BF:6F:7B:7B:53:94:D1:D4:49:9F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81f00e00-0284-3747-b154-af260a8fcf87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fd:5c:38:22:6c:df:53:99:75:25:8f:dd:2d:4b:d3:42:81: 1c:9b:d6:ce:ee:3d:0b:37:7c:65:23:49:20:7a:94:ea:18:01: d2:48:d5:35:f5:65:cd:6f:5a:32:d5:65:46:02:83:04:0b:b1: 6a:bb:b1:76:f0:d3:7a:3a:f0:a2:7d:aa:7e:a1:e1:5a:4a:c9: 0d:45:89:17:fc:9c:59:3d:c5:59:49:5a:d3:6e:90:58:fe:c5: dc:6d:a2:df:8e:96:6e:ba:77:d2:81:da:60:f6:4a:bc:ed:f0: 59:cd:e7:a8:d2:85:55:c9:58:c2:fe:7a:5d:a2:5d:87:aa:89: e3:0c:6f:da:e5:3e:11:c9:3a:da:de:31:35:56:a3:c9:7a:3a: 79:78:8b:de:81:bb:f3:c5:68:6a:24:67:b3:61:b1:5e:74:f5: bd:dc:c9:68:58:22:92:db:3b:85:d0:7a:29:72:2b:19:f5:77: 9f:84:4d:19:03:5a:9f:c0:cf:fd:45:ec:24:0e:41:f4:cf:a4: e0:e4:5a:da:c9:04:bc:eb:2a:7e:c1:26:20:71:47:9f:fc:50: c0:a2:de:df:e4:04:a6:15:8d:12:dc:08:3b:03:fd:fd:c7:f7: 77:05:01:a3:e6:0c:db:47:58:73:28:96:f7:bd:72:d3:e3:16: b5:84:ad:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPyezGBr2b3PJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTJkYTZjYzYtM2EzOS00ZTQ3LTgyNTktMzFlYzZiZTY3YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBUfHgztaThjSgVpcuTXCJxPQfqG7Qa+VMic dA30jyMgGMB126Ofj17og0JRw6IIEhz6EPWJsqqRNBCVNWSKUatqJYhQrndTqtyO /Cb2ENXoED7FC8Ttoom86A/dCjKp0/DgaVaizRNaKSjd1axAM1Ddjrmm8sWgo2YN Yyb/bjKLJAV/9GHdb8a9zltHEhoJJhPhwXojgbf3aa/lxevLOp3huwKQZs7J5tEF C81Tccg+Q7EVyAcIDfUjKthWjVv6/fWOLTuQM0uFx0eUpTaIOus2zIUPUja4FaV1 0JpH+N+615H932G6JinfC9fYigiEsylDldAJSpfJIXlFXEQdPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp1774DRzYKG79ve3tTlNHUSZ9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFmMDBlMDAtMDI4NC0z NzQ3LWIxNTQtYWYyNjBhOGZjZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA79XDgibN9TmXUlj90tS9NCgRyb1s7uPQs3fGUjSSB6lOoYAdJI1TX1 Zc1vWjLVZUYCgwQLsWq7sXbw03o68KJ9qn6h4VpKyQ1FiRf8nFk9xVlJWtNukFj+ xdxtot+Olm66d9KB2mD2Srzt8FnN56jShVXJWML+el2iXYeqieMMb9rlPhHJOtre MTVWo8l6Onl4i96Bu/PFaGokZ7NhsV509b3cyWhYIpLbO4XQeilyKxn1d5+ETRkD Wp/Az/1F7CQOQfTPpODkWtrJBLzrKn7BJiBxR5/8UMCi3t/kBKYVjRLcCDsD/f3H 93cFAaPmDNtHWHMolve9ctPjFrWErZE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:47 2025 by rpki-client