$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa File: b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa (raw, json) Hash identifier: nw6iXRj3b89mw56yjtYL3Cj2Buzzh8cp5g39xpAUfhk= Subject key identifier: 18:24:E2:0A:72:B3:E0:12:FD:96:08:93:1A:67:78:22:CE:8B:23:79 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A78531588FF9F2D3758FDA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:31:58:8f:f9:f2:d3:75:8f:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1effa385-d207-4f91-9d23-ca00fc07437a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:3d:e5:14:74:1c:a3:c1:ca:61:a3:70:22: a8:50:a1:65:56:50:39:d0:95:f2:ca:17:bb:3c:b7: 83:23:b5:8b:ce:17:b6:37:6f:4d:8c:7d:69:67:f3: 3a:e6:a7:9d:3e:e9:cf:f8:6a:af:bd:4c:bc:34:dd: a3:2a:69:77:d9:5d:c9:97:59:48:62:e5:39:35:a9: f9:54:c8:59:22:82:c8:50:65:16:76:4f:0c:26:74: b7:27:a1:6e:ae:a4:01:9b:2b:b2:66:9e:aa:e6:36: 62:37:b0:ab:ea:86:3b:ee:cb:6b:02:3f:ab:7a:bd: fe:d9:19:10:c1:84:f6:f1:6d:07:b3:3c:08:ba:ca: 75:5f:88:94:ef:33:26:1a:3f:bb:ea:43:e1:8d:db: 0a:48:61:9f:21:e2:08:c8:c2:11:15:77:90:3b:4d: 2e:5b:56:e3:57:89:f9:40:39:5b:dd:30:85:a2:c0: 50:3d:46:c3:55:0c:33:3b:be:df:b4:66:4e:c9:a8: b6:4c:dc:01:ae:6d:a2:52:4c:dc:ae:7e:1b:9b:d8: 21:5f:6e:fa:24:de:1f:9a:be:5c:c2:02:98:db:32: e3:db:e3:c7:bc:64:f8:3e:1d:40:b3:01:74:27:54: 51:eb:5d:7c:1d:8a:b1:65:f5:d9:2b:29:ea:21:2f: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:24:E2:0A:72:B3:E0:12:FD:96:08:93:1A:67:78:22:CE:8B:23:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:8e:51:ce:b3:03:85:d9:eb:75:7c:e6:4c:01:8d:d0:94:1a: 49:75:02:2d:a1:72:5c:5b:e0:3c:14:8e:32:a4:51:9b:26:e7: bb:ec:e9:54:ce:48:2c:e9:95:4e:a4:eb:a5:4d:09:32:92:bf: 88:10:73:fc:93:c3:46:69:1b:91:a1:94:66:44:a5:4d:8f:07: d7:d6:be:e2:f6:9a:3d:e1:9d:3f:0a:5b:7b:bf:1c:45:dc:0d: 47:0d:9c:f2:b0:c5:4e:a2:2c:13:81:f5:41:d6:1c:01:c0:13: 2e:82:a5:fc:e0:d3:a0:8d:26:d8:b1:7e:28:eb:5d:cd:61:1a: 60:03:33:43:6a:af:53:56:96:62:ac:66:f6:ae:d1:7f:97:2e: 79:e6:8e:1d:41:c5:d6:71:d2:e4:50:60:f3:35:a7:2a:c2:1b: c4:f0:77:88:4d:c2:b4:6a:a1:60:fc:7c:3c:45:c7:38:eb:f1: 49:1e:c8:6b:32:9b:58:5a:e4:a0:4e:0f:0c:98:66:71:59:5a: 6d:c0:0a:f5:6d:cb:d1:bc:50:94:9e:88:ea:46:83:ab:84:80: b4:8a:cc:15:57:84:a3:df:be:63:62:83:60:bb:61:04:f8:ee: f4:13:08:b5:5f:f3:a2:a1:5b:9b:6c:9b:80:ae:1d:aa:78:9e: b6:a1:9b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTFYj/ny03WP2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWVmZmEzODUtZDIwNy00ZjkxLTlkMjMtY2EwMGZjMDc0MzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBE95RR0HKPBymGjcCKoUKFlVlA50JXyyhe7 PLeDI7WLzhe2N29NjH1pZ/M65qedPunP+GqvvUy8NN2jKml32V3Jl1lIYuU5Nan5 VMhZIoLIUGUWdk8MJnS3J6FurqQBmyuyZp6q5jZiN7Cr6oY77strAj+rer3+2RkQ wYT28W0HszwIusp1X4iU7zMmGj+76kPhjdsKSGGfIeIIyMIRFXeQO00uW1bjV4n5 QDlb3TCFosBQPUbDVQwzO77ftGZOyai2TNwBrm2iUkzcrn4bm9ghX276JN4fmr5c wgKY2zLj2+PHvGT4Ph1AswF0J1RR6118HYqxZfXZKynqIS8lmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgk4gpys+AS/ZYIkxpneCLOiyN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVjYzY2MTAtYmVhZi0z ZDUyLWE3OTQtM2RjNDU3ZWU2Y2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCOUc6zA4XZ63V85kwBjdCUGkl1Ai2hclxb4DwUjjKkUZsm57vs6VTO SCzplU6k66VNCTKSv4gQc/yTw0ZpG5GhlGZEpU2PB9fWvuL2mj3hnT8KW3u/HEXc DUcNnPKwxU6iLBOB9UHWHAHAEy6Cpfzg06CNJtixfijrXc1hGmADM0Nqr1NWlmKs Zvau0X+XLnnmjh1BxdZx0uRQYPM1pyrCG8Twd4hNwrRqoWD8fDxFxzjr8UkeyGsy m1ha5KBODwyYZnFZWm3ACvVty9G8UJSeiOpGg6uEgLSKzBVXhKPfvmNig2C7YQT4 7vQTCLVf86KhW5tsm4CuHap4nrahmx0= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:34 2025 by rpki-client