$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa File: acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa (raw, json) Hash identifier: 7wb9pvQQi5BKaCkg47k/1ZKL72CL6N7LOaW8Tv0/32c= Subject key identifier: 37:BD:91:EC:3A:10:1D:C5:10:A2:2D:87:10:60:FF:9F:74:02:A6:3A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784D01A2CFEAB12FE6CF5D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d0:1a:2c:fe:ab:12:fe:6c:f5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b6b48033-db87-4330-a819-1267a9dce35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:95:fa:35:3e:e6:8c:3b:fc:e1:d9:27:26:e5: 9f:84:2f:d2:75:aa:b8:b1:d2:d3:31:cd:b9:c0:a3: cd:d0:c2:4e:ee:9c:39:81:f2:26:47:13:ef:54:d9: 6c:6c:99:31:e0:16:1e:17:a9:9e:17:1b:f4:35:e2: 81:22:e0:45:9e:0e:36:b1:55:45:30:0d:b1:b3:19: 45:2c:84:2a:8a:a4:0a:b8:75:7e:db:79:e4:9b:84: 87:92:fa:73:1f:52:ca:a3:e0:54:e7:d3:89:9c:0c: a3:64:32:a9:05:48:a5:93:dd:0a:25:6d:05:94:92: e2:73:83:c7:c9:11:7e:f7:77:c6:e1:cf:cf:86:d5: d3:30:c7:61:33:84:7b:c1:e0:44:73:dd:4b:56:1f: 4a:0e:89:af:df:d8:79:03:58:a5:1f:41:82:37:82: 1b:8f:52:31:20:0e:84:11:20:ac:b9:79:0c:21:b4: a7:a8:6c:c4:a7:02:1b:8d:ef:20:80:16:c6:f1:5c: db:ed:a0:fe:f4:09:42:55:dd:5b:b7:9d:05:41:9c: 16:ab:f0:1a:99:b9:f3:37:9b:7f:c8:3a:09:cc:97: 51:e6:12:50:0f:28:ad:28:e1:ef:25:71:10:87:90: 5b:c0:81:2f:c7:7b:a9:4e:7e:39:9c:5c:32:29:f9: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BD:91:EC:3A:10:1D:C5:10:A2:2D:87:10:60:FF:9F:74:02:A6:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ee:25:e2:b8:74:ed:fa:dd:ed:76:3f:de:4a:c8:69:fb:0d: e2:f8:36:5a:8e:bf:64:6c:c5:64:a4:61:64:8f:27:c4:90:1f: 39:64:5b:08:77:5a:69:1f:4f:18:83:dc:63:7a:44:9e:28:ea: 7c:6d:44:da:19:57:68:6c:a4:28:3a:a4:32:30:fc:ad:ff:62: bf:ae:72:82:25:64:04:d9:98:e1:52:0f:71:17:41:1f:5d:12: 6a:4c:06:19:0f:b7:06:cb:86:63:7d:36:5d:80:1b:80:3e:a5: 14:a5:60:2e:6a:c4:29:af:56:6d:e2:7b:9d:21:b1:7f:e7:54: 54:35:41:53:2f:19:c8:8f:5c:8f:8e:51:c6:b8:4f:fc:b5:f4: 21:a8:33:9e:8a:75:35:62:7b:3e:8b:af:63:f1:d1:29:cc:4b: 91:cf:2b:95:63:80:e0:27:f7:86:08:b0:23:7c:39:d3:4a:e0: 99:7c:aa:8e:cf:45:d3:7e:e0:06:cf:d4:83:ae:a7:d5:01:bd: ba:fb:46:1b:eb:a8:13:2d:fd:6a:a4:7d:19:9f:00:18:4e:4a: d6:23:88:06:3e:e8:ba:55:2f:7a:cd:53:7f:9a:70:2c:a0:5b: bf:09:ac:11:c2:85:7d:83:93:40:6b:03:1e:66:ba:6d:1e:11: a4:db:8a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNAaLP6rEv5s9dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjZiNDgwMzMtZGI4Ny00MzMwLWE4MTktMTI2N2E5ZGNlMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZX6NT7mjDv84dknJuWfhC/Sdaq4sdLTMc25 wKPN0MJO7pw5gfImRxPvVNlsbJkx4BYeF6meFxv0NeKBIuBFng42sVVFMA2xsxlF LIQqiqQKuHV+23nkm4SHkvpzH1LKo+BU59OJnAyjZDKpBUilk90KJW0FlJLic4PH yRF+93fG4c/PhtXTMMdhM4R7weBEc91LVh9KDomv39h5A1ilH0GCN4Ibj1IxIA6E ESCsuXkMIbSnqGzEpwIbje8ggBbG8Vzb7aD+9AlCVd1bt50FQZwWq/AambnzN5t/ yDoJzJdR5hJQDyitKOHvJXEQh5BbwIEvx3upTn45nFwyKfkO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe9kew6EB3FEKIthxBg/590AqY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWNjMWZkYzYtMzBkYi0z YWY0LWI4ZjUtMzI1NTFhMzMwYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjuJeK4dO363e12P95KyGn7DeL4NlqOv2RsxWSkYWSPJ8SQHzlkWwh3 WmkfTxiD3GN6RJ4o6nxtRNoZV2hspCg6pDIw/K3/Yr+ucoIlZATZmOFSD3EXQR9d EmpMBhkPtwbLhmN9Nl2AG4A+pRSlYC5qxCmvVm3ie50hsX/nVFQ1QVMvGciPXI+O Uca4T/y19CGoM56KdTViez6Lr2Px0SnMS5HPK5VjgOAn94YIsCN8OdNK4Jl8qo7P RdN+4AbP1IOup9UBvbr7RhvrqBMt/WqkfRmfABhOStYjiAY+6LpVL3rNU3+acCyg W78JrBHChX2Dk0BrAx5mum0eEaTbijg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:51:10 2025 by rpki-client