$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa File: ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa (raw, json) Hash identifier: eAkZODfFBxF/Cd+vybSv9VyzxMrH5P7B1zf90BjZhOc= Subject key identifier: 35:7A:9B:56:D8:03:A3:8C:DE:71:C1:A7:CD:95:9B:47:20:0C:9B:CD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784D733E0EE0DAA70CECB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d7:33:e0:ee:0d:aa:70:ce:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=aa1b895d-eb20-4b17-87b4-9d2b90e2279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:d1:6f:13:c4:45:bb:e9:bc:83:c9:83:14: e3:b3:29:08:f1:03:ba:e1:18:ed:7e:1b:d8:f2:68: 42:79:54:fe:e1:7c:95:82:b5:9d:ea:fb:a1:49:4b: de:54:57:e2:73:ac:fe:8c:28:0e:5d:ee:a0:6c:a4: 6d:b6:04:01:f7:cb:e5:dc:27:35:7e:e5:75:41:cb: 39:21:1d:0e:89:a7:88:fe:4a:be:d9:8b:36:c8:3b: 05:64:3a:d1:ff:34:d9:8b:c8:78:0a:2d:71:79:45: b8:e8:6c:be:a7:d8:a4:ec:62:64:19:b3:61:e8:80: a7:9d:63:f0:a2:da:81:9a:2e:c8:c1:02:0b:67:1d: 8a:9d:37:86:72:a6:00:03:c1:2a:ad:e1:b7:7d:3d: f6:ae:b0:1c:f1:15:82:69:e8:bb:77:36:af:d7:37: fe:45:af:b5:65:9e:6e:19:fc:6a:f4:ce:7a:16:c0: fc:a8:b3:dd:a1:ce:22:df:de:46:c4:4c:38:a8:56: bb:25:29:7f:fa:6e:e0:29:ac:62:ab:e8:d6:e2:56: 95:3d:29:7b:5c:63:87:7b:1b:d8:e3:ee:98:52:bc: 17:27:c1:05:1f:d1:56:5e:29:e3:4c:d2:cc:30:68: 98:56:76:ea:71:5f:53:a2:9f:bd:28:d7:cb:24:e9: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7A:9B:56:D8:03:A3:8C:DE:71:C1:A7:CD:95:9B:47:20:0C:9B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6a:c2:39:40:13:e6:af:02:7a:63:d4:3d:45:1f:62:ba:43: 02:d0:0c:12:b5:6a:d9:7a:70:84:a2:d6:6d:a9:3d:5e:3f:af: e9:49:ee:ea:da:fd:d1:df:71:be:55:dc:e2:04:04:d2:8e:96: 5d:66:2b:d4:86:c0:f6:a6:cd:9c:dd:61:58:0a:50:01:7b:12: c0:8d:af:15:50:9b:f7:48:5a:85:9d:c5:67:6e:af:f1:e1:c1: 19:27:a8:f8:ba:ce:80:46:96:ab:f6:f4:57:d1:d0:3e:26:ed: 64:f5:1d:b6:65:bc:38:97:a0:45:c8:04:f5:5d:0f:36:5a:e1: c8:a1:93:90:22:b5:c8:f6:f8:8e:b5:2a:fb:3e:60:97:ef:6d: 63:0c:27:1e:ee:6a:a0:a4:02:8f:5c:22:c9:16:d2:fe:c4:25: 85:fb:3d:7c:bb:52:ea:d3:54:42:5a:ae:88:49:5e:39:5f:48: ab:65:00:2f:29:8d:c6:f2:5d:a3:17:72:da:25:0a:48:ee:9a: d8:97:80:b2:1e:c1:64:59:19:d8:e5:d7:43:30:50:be:e8:7c: 73:1c:94:70:b2:0b:c0:21:3d:fc:42:e2:c5:9a:fd:08:93:b0: 79:01:35:3c:16:8d:48:e4:06:49:f9:1d:5f:93:09:11:66:3a: 4e:0c:bf:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNcz4O4NqnDOy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWExYjg5NWQtZWIyMC00YjE3LTg3YjQtOWQyYjkwZTIyNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlonRbxPERbvpvIPJgxTjsykI8QO64RjtfhvY 8mhCeVT+4XyVgrWd6vuhSUveVFfic6z+jCgOXe6gbKRttgQB98vl3Cc1fuV1Qcs5 IR0OiaeI/kq+2Ys2yDsFZDrR/zTZi8h4Ci1xeUW46Gy+p9ik7GJkGbNh6ICnnWPw otqBmi7IwQILZx2KnTeGcqYAA8EqreG3fT32rrAc8RWCaei7dzav1zf+Ra+1ZZ5u Gfxq9M56FsD8qLPdoc4i395GxEw4qFa7JSl/+m7gKaxiq+jW4laVPSl7XGOHexvY 4+6YUrwXJ8EFH9FWXinjTNLMMGiYVnbqcV9Top+9KNfLJOlUkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV6m1bYA6OM3nHBp82Vm0cgDJvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2NhYzFjYjktZTRlOS0z ZmU4LWEwZWEtMzcwOWU5YjA3ZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFqwjlAE+avAnpj1D1FH2K6QwLQDBK1atl6cISi1m2pPV4/r+lJ7ura /dHfcb5V3OIEBNKOll1mK9SGwPamzZzdYVgKUAF7EsCNrxVQm/dIWoWdxWdur/Hh wRknqPi6zoBGlqv29FfR0D4m7WT1HbZlvDiXoEXIBPVdDzZa4cihk5Aitcj2+I61 Kvs+YJfvbWMMJx7uaqCkAo9cIskW0v7EJYX7PXy7UurTVEJarohJXjlfSKtlAC8p jcbyXaMXctolCkjumtiXgLIewWRZGdjl10MwUL7ofHMclHCyC8AhPfxC4sWa/QiT sHkBNTwWjUjkBkn5HV+TCRFmOk4Mv9I= -----END CERTIFICATE-----Generated at Sun Apr 27 09:11:05 2025 by rpki-client