$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90a012f1-2317-3463-9993-e6f465af0112.roa File: 90a012f1-2317-3463-9993-e6f465af0112.roa (raw, json) Hash identifier: zYLAOQZjQDloXrd64K3x5lMCRwCKSdY1e/0dxN9m3c4= Subject key identifier: 22:D1:72:5A:44:10:FA:F3:5D:5A:A9:4A:67:46:5E:58:40:1B:67:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7853080CA56A683FD22D360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90a012f1-2317-3463-9993-e6f465af0112.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:30:80:ca:56:a6:83:fd:22:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8a383393-b4aa-4c7b-811a-7d32a61820f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:85:0b:eb:27:dd:04:d1:f2:b9:7c:83:88: 51:ee:07:ea:bf:43:1f:41:70:f6:f0:31:82:c1:34: 5a:78:b0:c6:4d:29:6f:a5:ea:21:8d:70:b4:33:e0: 08:d6:aa:6e:24:7f:88:e8:b4:2b:7e:81:f4:8d:1c: 3a:61:32:62:3e:39:d6:08:73:6b:97:b5:a2:24:d9: cb:ad:99:57:75:ee:e9:7b:88:45:9f:bb:90:a2:78: 23:16:e3:4e:c0:00:32:9e:8d:c5:ea:1a:62:97:5d: fa:ef:8e:6e:4e:00:57:e1:7b:1c:86:5e:22:63:5a: 4c:16:40:75:43:76:2e:e6:da:44:7a:bd:e3:15:93: af:7e:b2:da:34:3c:b7:8d:9d:0d:a1:28:aa:36:41: c9:c5:cc:85:79:95:bb:62:73:3c:42:8a:e1:2a:1f: e1:59:4c:cc:17:7b:8e:7e:96:df:9f:aa:84:af:05: 7d:55:84:b5:a2:0f:4c:e2:cb:59:57:00:6e:3e:66: 5b:af:99:cc:02:1b:c1:71:6a:c2:9c:06:31:80:4d: 7d:46:9f:1c:41:46:be:cf:21:8c:ce:42:eb:50:13: 26:08:b2:cf:00:ed:92:4a:57:45:80:70:df:37:18: 32:e6:87:da:1d:62:be:bb:ae:f6:23:dd:66:18:30: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D1:72:5A:44:10:FA:F3:5D:5A:A9:4A:67:46:5E:58:40:1B:67:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90a012f1-2317-3463-9993-e6f465af0112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d3:77:05:e3:a3:60:48:11:1c:e7:61:72:7c:5d:d5:91:f3: 04:2d:27:8b:23:ce:cc:df:56:71:ad:d0:4d:cf:61:9e:f0:4e: 06:38:3e:76:c6:46:eb:54:42:b4:1a:6c:e6:c4:37:ba:9f:0c: 1d:e7:97:0b:13:d2:7b:0d:c7:72:b4:6f:7a:e2:97:3d:b3:f2: 82:2d:89:15:46:4b:6b:a9:80:ca:ad:fd:21:ea:fc:a7:da:50: 65:bc:95:f7:aa:3b:4b:3b:3e:0c:0c:4a:d9:73:3b:4d:c5:14: a2:38:ff:bc:cb:c4:83:de:a3:f5:35:07:85:51:43:d9:f6:11: d9:37:82:f0:2d:f9:2f:cf:34:26:06:30:ef:21:a1:c9:b0:b2: 8a:4a:bf:b6:20:ba:c3:bc:eb:1b:36:ae:a4:65:d4:9e:c7:c2: 6e:ea:df:cf:a2:a8:09:31:67:79:c5:f8:9b:6b:bc:0b:2e:0e: ce:8c:e2:8e:c5:52:c0:96:0c:b2:b7:b6:eb:8f:11:c7:9d:22: 0d:9e:43:1d:5c:6f:87:03:42:8d:aa:e8:06:34:0a:db:45:72: d2:72:9a:bc:c8:c4:b1:4a:b3:59:9e:e0:5f:43:f0:f5:fe:61: ed:b8:c2:18:ae:cf:57:a8:20:5e:29:be:05:d3:3e:e4:e6:9d: 26:66:ab:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTCAylamg/0i02AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGEzODMzOTMtYjRhYS00YzdiLTgxMWEtN2QzMmE2MTgyMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMyFC+sn3QTR8rl8g4hR7gfqv0MfQXD28DGC wTRaeLDGTSlvpeohjXC0M+AI1qpuJH+I6LQrfoH0jRw6YTJiPjnWCHNrl7WiJNnL rZlXde7pe4hFn7uQongjFuNOwAAyno3F6hpil136745uTgBX4Xschl4iY1pMFkB1 Q3Yu5tpEer3jFZOvfrLaNDy3jZ0NoSiqNkHJxcyFeZW7YnM8QorhKh/hWUzMF3uO fpbfn6qErwV9VYS1og9M4stZVwBuPmZbr5nMAhvBcWrCnAYxgE19Rp8cQUa+zyGM zkLrUBMmCLLPAO2SSldFgHDfNxgy5ofaHWK+u672I91mGDC0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLRclpEEPrzXVqpSmdGXlhAG2cUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBhMDEyZjEtMjMxNy0z NDYzLTk5OTMtZTZmNDY1YWYwMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADTdwXjo2BIERznYXJ8XdWR8wQtJ4sjzszfVnGt0E3PYZ7wTgY4PnbG RutUQrQabObEN7qfDB3nlwsT0nsNx3K0b3rilz2z8oItiRVGS2upgMqt/SHq/Kfa UGW8lfeqO0s7PgwMStlzO03FFKI4/7zLxIPeo/U1B4VRQ9n2Edk3gvAt+S/PNCYG MO8hocmwsopKv7YgusO86xs2rqRl1J7Hwm7q38+iqAkxZ3nF+JtrvAsuDs6M4o7F UsCWDLK3tuuPEcedIg2eQx1cb4cDQo2q6AY0CttFctJymrzIxLFKs1me4F9D8PX+ Ye24whiuz1eoIF4pvgXTPuTmnSZmq/4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:16 2025 by rpki-client