$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa File: c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa (raw, json) Hash identifier: F5lvXPcs7hV+8xWaC6BofdHNC1+yAXEysaitXXwDJ7w= Subject key identifier: 54:2D:A3:89:22:99:13:85:16:3F:F5:08:E2:6F:00:60:F7:48:00:D2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784DB830FF7FE800A1ABE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:db:83:0f:f7:fe:80:0a:1a:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=40069b2a-b662-44b7-9a1f-3f772bb7097a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:6e:a4:80:35:ed:77:d3:c1:66:60:8f:cb: 7d:99:23:2e:d0:d0:93:f8:ed:52:16:13:ba:b6:b7: bb:5d:13:20:8a:ec:b2:01:29:15:a4:bb:f1:58:f3: 7d:e2:14:fd:98:55:e3:0c:10:2f:70:1e:9f:f4:11: b7:39:ad:a7:fa:09:bd:06:ed:1f:c1:74:6b:d4:5d: d1:7b:47:e8:db:21:5f:d0:bf:b8:38:c4:0a:cc:84: 4d:c0:e0:55:de:b0:d9:28:e5:89:a5:78:0c:6d:a7: 3e:9d:22:48:37:a2:4a:69:47:ce:de:ef:aa:9d:e1: 2f:1a:4c:d0:9a:9e:8e:05:e2:61:97:51:d9:03:35: a3:90:26:a2:67:22:8c:a2:91:09:7b:d4:4b:5a:c2: e4:06:54:a0:a9:23:11:4e:16:d1:4e:12:8e:05:bd: 64:c8:0c:fe:d9:3b:72:a8:fe:6f:b9:e1:13:1b:22: 96:47:e8:09:96:8d:f9:9b:f0:b3:d2:b6:82:7e:99: f7:3b:cd:1b:c4:db:48:5c:18:70:d3:dc:7e:11:36: 8a:bb:10:95:04:89:f2:76:19:6a:58:fd:fa:b8:69: b0:4d:f6:8b:6f:04:bc:24:00:56:17:ee:9f:91:ef: 39:0d:a5:4e:bf:3c:f4:b8:a0:a3:4f:18:bb:23:3d: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2D:A3:89:22:99:13:85:16:3F:F5:08:E2:6F:00:60:F7:48:00:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2a:38:8d:9e:ea:52:be:60:ac:b0:f6:19:38:4b:51:ad:e7: 9a:75:af:b1:fd:63:26:98:59:0e:14:1f:7a:e0:d5:83:c1:81: 75:d1:20:f9:67:0b:32:9a:d4:69:9d:91:15:25:f8:64:00:85: 49:0e:2f:1d:33:3c:c9:81:48:14:8a:58:c1:4a:f3:84:3e:d3: 99:90:68:b8:0b:49:4f:62:6c:e0:31:14:27:16:31:cf:4b:d9: f3:12:c7:8e:3b:dd:43:c6:46:d1:9d:59:bc:48:f0:e7:31:f9: 31:2a:20:6a:9f:85:84:32:83:4d:5a:9a:cf:fe:46:2d:10:de: a8:9a:57:af:b2:c4:68:b7:fb:7c:df:50:27:9a:12:22:00:12: f0:1f:a8:92:30:24:92:1c:35:23:f6:64:6b:ac:05:d5:e3:f8: 00:a0:ff:df:8d:d4:99:07:ae:87:f0:77:d9:35:07:cf:24:cc: b1:84:ad:65:83:7b:37:35:4a:63:98:84:9b:94:ea:3f:16:c2: d4:31:52:71:54:8b:47:94:cd:a4:2f:88:b8:67:89:ff:7e:be: 3c:1c:0d:5e:41:05:83:f5:74:67:6d:e6:55:ab:4a:46:f8:0b: f9:08:8e:35:2c:f4:bd:09:36:0e:4b:11:b7:b8:8b:8c:40:f7: 6d:cd:3a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNuDD/f+gAoavoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDAwNjliMmEtYjY2Mi00NGI3LTlhMWYtM2Y3NzJiYjcwOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgONupIA17XfTwWZgj8t9mSMu0NCT+O1SFhO6 tre7XRMgiuyyASkVpLvxWPN94hT9mFXjDBAvcB6f9BG3Oa2n+gm9Bu0fwXRr1F3R e0fo2yFf0L+4OMQKzIRNwOBV3rDZKOWJpXgMbac+nSJIN6JKaUfO3u+qneEvGkzQ mp6OBeJhl1HZAzWjkCaiZyKMopEJe9RLWsLkBlSgqSMRThbRThKOBb1kyAz+2Tty qP5vueETGyKWR+gJlo35m/Cz0raCfpn3O80bxNtIXBhw09x+ETaKuxCVBInydhlq WP36uGmwTfaLbwS8JABWF+6fke85DaVOvzz0uKCjTxi7Iz2GUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQto4kimROFFj/1COJvAGD3SADSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzRlNWRjMjYtMjM0OC0z NGM1LThhMGQtOGVkNzFlMDJmNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0qOI2e6lK+YKyw9hk4S1Gt55p1r7H9YyaYWQ4UH3rg1YPBgXXRIPln CzKa1GmdkRUl+GQAhUkOLx0zPMmBSBSKWMFK84Q+05mQaLgLSU9ibOAxFCcWMc9L 2fMSx4473UPGRtGdWbxI8Ocx+TEqIGqfhYQyg01ams/+Ri0Q3qiaV6+yxGi3+3zf UCeaEiIAEvAfqJIwJJIcNSP2ZGusBdXj+ACg/9+N1JkHrofwd9k1B88kzLGErWWD ezc1SmOYhJuU6j8WwtQxUnFUi0eUzaQviLhnif9+vjwcDV5BBYP1dGdt5lWrSkb4 C/kIjjUs9L0JNg5LEbe4i4xA923NOrc= -----END CERTIFICATE-----Generated at Mon Apr 28 23:27:32 2025 by rpki-client