$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa File: c50cd811-3be7-377f-aad6-f7366be2a40b.roa (raw, json) Hash identifier: wBUH+nPegm28AyNOtX79s4NWOXDWxRMCY91VV/jQsXw= Subject key identifier: 20:04:FB:58:E7:64:CC:AA:BD:44:47:E6:CD:8D:52:25:AA:0A:81:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7853A87A2DE39841584FE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3a:87:a2:de:39:84:15:84:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f480c4d4-19eb-4a8a-a534-36fde97c02fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:50:2d:70:fe:2f:b7:8b:19:68:43:eb:97:02: 0f:4f:74:f1:11:d7:18:65:c1:91:c0:2e:13:80:a9: 65:ec:8f:24:f4:ef:47:d3:5c:6a:e9:c2:7c:58:e7: 21:a3:46:42:0c:3e:36:9a:63:49:ff:3b:e2:e5:63: de:7f:c5:b9:b1:dc:6e:5d:01:5d:cf:54:9d:5f:a2: 35:75:62:91:82:ce:62:df:66:ac:36:5b:e0:00:35: 70:b0:5c:73:54:d6:a9:29:cc:6e:1f:9e:08:67:4a: 33:08:e1:4b:9f:b2:a5:e5:29:c0:a8:6b:0f:f2:40: 9d:bf:ea:b5:24:c6:9f:54:ac:02:ec:ae:f6:03:b2: ab:0d:cd:79:93:62:dd:0b:44:24:ab:3a:65:ba:bd: 80:3b:02:65:5e:0f:8d:8e:f3:bb:b8:ec:25:0b:ce: 49:5f:13:2a:32:e2:32:b0:9d:e0:03:c2:0d:cc:26: b3:e4:2a:b9:37:e4:c1:90:7f:51:e9:e4:27:d4:fe: 15:cc:0a:74:9d:6f:69:46:f8:63:ca:bf:2f:6e:16: e6:6b:0f:a6:53:6f:05:16:b4:37:e8:39:6a:47:51: 01:43:98:b1:0b:e1:39:b6:2d:22:66:af:a6:d1:f5: f6:3d:b6:af:37:79:64:b1:b8:02:1e:de:23:f9:ab: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:04:FB:58:E7:64:CC:AA:BD:44:47:E6:CD:8D:52:25:AA:0A:81:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:11:7f:25:9e:8b:32:e7:03:9c:2c:c6:28:65:bc:40:60:f2: 96:62:c1:db:37:69:72:8b:95:eb:15:e9:6c:b7:c8:1a:d1:d7: 0e:b7:0b:db:63:93:fd:4f:cc:68:d7:dc:8e:89:c6:f7:b9:1a: 32:7b:92:5f:5e:9a:fd:54:02:6d:46:13:ee:58:3e:b9:5d:a7: 1d:b1:b9:b2:80:38:d5:4f:ea:b6:10:3c:37:58:9a:b9:a3:29: 90:9a:70:97:54:a5:9b:fb:85:0e:d6:b3:f0:71:ad:98:34:cd: ea:cf:74:0b:b7:dc:50:51:c7:e1:a8:e2:5a:71:fa:9f:f1:5d: f9:11:35:a9:91:79:bd:64:47:d0:01:75:7b:ef:6b:85:d4:1e: 24:70:3a:78:c6:4e:02:f5:9c:7a:a5:e6:e6:a9:1f:6a:99:e7: 81:d9:25:4b:c9:ea:9d:45:54:bd:01:9b:06:50:c1:56:02:cf: 9c:9f:69:8f:64:da:72:7d:17:53:74:84:12:f2:62:fb:28:e4: e2:dc:43:a4:85:65:6a:f2:29:57:73:8f:30:84:00:de:7a:dd: ad:0c:b9:e6:ab:f4:4e:a4:56:fc:f8:f7:6a:79:7f:b1:6d:ab: bc:ba:c0:01:07:86:72:f8:39:da:32:ba:9e:e4:de:70:9a:6e: 73:1d:c4:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTqHot45hBWE/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjQ4MGM0ZDQtMTllYi00YThhLWE1MzQtMzZmZGU5N2MwMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VAtcP4vt4sZaEPrlwIPT3TxEdcYZcGRwC4T gKll7I8k9O9H01xq6cJ8WOcho0ZCDD42mmNJ/zvi5WPef8W5sdxuXQFdz1SdX6I1 dWKRgs5i32asNlvgADVwsFxzVNapKcxuH54IZ0ozCOFLn7Kl5SnAqGsP8kCdv+q1 JMafVKwC7K72A7KrDc15k2LdC0Qkqzplur2AOwJlXg+NjvO7uOwlC85JXxMqMuIy sJ3gA8INzCaz5Cq5N+TBkH9R6eQn1P4VzAp0nW9pRvhjyr8vbhbmaw+mU28FFrQ3 6DlqR1EBQ5ixC+E5ti0iZq+m0fX2PbavN3lksbgCHt4j+atDLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAE+1jnZMyqvURH5s2NUiWqCoGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUwY2Q4MTEtM2JlNy0z NzdmLWFhZDYtZjczNjZiZTJhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4RfyWeizLnA5wsxihlvEBg8pZiwds3aXKLlesV6Wy3yBrR1w63C9tj k/1PzGjX3I6Jxve5GjJ7kl9emv1UAm1GE+5YPrldpx2xubKAONVP6rYQPDdYmrmj KZCacJdUpZv7hQ7Ws/BxrZg0zerPdAu33FBRx+Go4lpx+p/xXfkRNamReb1kR9AB dXvva4XUHiRwOnjGTgL1nHql5uapH2qZ54HZJUvJ6p1FVL0BmwZQwVYCz5yfaY9k 2nJ9F1N0hBLyYvso5OLcQ6SFZWryKVdzjzCEAN563a0Muear9E6kVvz492p5f7Ft q7y6wAEHhnL4Odoyup7k3nCabnMdxLw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:47:41 2025 by rpki-client