$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa File: cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa (raw, json) Hash identifier: IiRriA/B28xl4CJuOX8qKA1pVvn5bclY03apEatht50= Subject key identifier: 85:91:8A:6D:EC:C9:45:A0:3B:F8:38:09:89:23:4B:16:AC:BD:0E:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784CEE8F964684D82F43360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ce:e8:f9:64:68:4d:82:f4:33:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9acb1a81-d0de-4799-9324-acd2bcf76bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3d:da:fd:c5:87:b4:0f:09:43:af:26:42:d8: c2:5d:e9:b8:82:80:16:e4:2b:09:19:06:c5:94:f6: d3:3b:b9:3b:14:06:23:46:cb:56:cb:af:3b:77:4e: e5:b2:b5:91:d7:ad:a2:a6:65:29:a7:4a:12:17:0c: de:3d:4f:24:9d:38:6f:33:a1:12:33:3c:f8:98:9f: 46:0d:b2:d0:63:47:fb:b1:98:0f:cc:da:1c:01:00: 91:10:16:de:af:cd:45:d9:af:d3:16:7f:df:be:77: ca:4f:52:fe:f8:04:76:1f:aa:93:a6:24:15:e0:f0: b9:ca:27:f3:da:b6:0b:25:1f:f9:7d:a6:e4:e5:a7: e2:b7:d2:89:e7:78:7a:b3:5a:f0:81:eb:87:56:f8: b8:d6:9e:96:d2:c5:9a:d6:43:25:4f:13:5e:cc:f5: ba:e4:76:9a:ad:e4:0c:0a:86:bf:82:6a:df:c4:2f: 19:9f:f2:1b:fc:3d:3c:03:ae:3a:d8:16:ff:63:50: e0:ca:1e:06:d5:df:96:4b:e1:51:9d:3c:ab:4a:03: 83:7e:96:b2:05:25:d6:9b:ac:42:17:cd:93:89:1e: 80:26:c7:f7:bb:41:ba:e1:ed:b0:6d:2c:4a:64:84: f3:15:8b:af:8b:df:35:5f:ac:87:8e:1f:d5:c1:1e: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:91:8A:6D:EC:C9:45:A0:3B:F8:38:09:89:23:4B:16:AC:BD:0E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:47:20:3e:62:97:8d:f3:ee:08:2b:04:dc:5f:cb:6f:d5:08: fc:1a:0e:fa:c7:82:ce:6b:94:15:d2:9f:d6:98:1d:b0:47:bd: b0:b1:03:76:03:b3:c6:a8:90:80:5b:27:bc:55:0c:8e:51:6d: ce:4f:3f:27:db:10:6b:f7:a3:61:e2:98:2b:05:a3:d9:f9:a3: b7:74:4c:da:ed:03:ec:34:c9:b5:2f:21:6b:06:30:f7:4f:5b: d2:f3:b5:5d:60:19:c7:8b:48:b8:83:6f:08:24:6a:e2:b8:2f: 64:c8:54:6b:a9:78:c4:e7:5c:4d:81:c6:cf:3e:3f:7d:00:a3: 0a:8d:35:7f:ab:68:8b:64:25:3f:9f:59:5c:00:5d:79:c4:63: 4d:f1:d5:73:1b:65:7d:24:54:11:de:c8:ca:8c:04:7e:dc:bd: ac:a0:dc:f5:0a:06:94:3b:20:30:47:be:10:95:56:c3:f8:82: 24:34:7c:73:db:42:ae:d7:a5:2d:1a:cb:b9:cb:88:61:57:12: 5f:dd:6b:20:53:27:6a:6e:26:bf:14:01:7e:29:0e:73:3a:e6: ef:24:1d:ed:09:50:a6:6a:96:c9:ff:e4:6d:33:d6:36:76:10: 38:83:8b:b2:66:42:a7:9b:8a:6f:74:4f:f2:aa:4f:54:bc:7e: 03:7b:2d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM7o+WRoTYL0M2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWFjYjFhODEtZDBkZS00Nzk5LTkzMjQtYWNkMmJjZjc2YmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz3a/cWHtA8JQ68mQtjCXem4goAW5CsJGQbF lPbTO7k7FAYjRstWy687d07lsrWR162ipmUpp0oSFwzePU8knThvM6ESMzz4mJ9G DbLQY0f7sZgPzNocAQCREBber81F2a/TFn/fvnfKT1L++AR2H6qTpiQV4PC5yifz 2rYLJR/5fabk5afit9KJ53h6s1rwgeuHVvi41p6W0sWa1kMlTxNezPW65HaareQM Coa/gmrfxC8Zn/Ib/D08A6462Bb/Y1Dgyh4G1d+WS+FRnTyrSgODfpayBSXWm6xC F82TiR6AJsf3u0G64e2wbSxKZITzFYuvi981X6yHjh/VwR70MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWRim3syUWgO/g4CYkjSxasvQ7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q4NmJkNjUtNjlkYS0z NjhjLTlkYzItODQzNWYxZmY5Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVHID5il43z7ggrBNxfy2/VCPwaDvrHgs5rlBXSn9aYHbBHvbCxA3YD s8aokIBbJ7xVDI5Rbc5PPyfbEGv3o2HimCsFo9n5o7d0TNrtA+w0ybUvIWsGMPdP W9LztV1gGceLSLiDbwgkauK4L2TIVGupeMTnXE2Bxs8+P30AowqNNX+raItkJT+f WVwAXXnEY03x1XMbZX0kVBHeyMqMBH7cvayg3PUKBpQ7IDBHvhCVVsP4giQ0fHPb Qq7XpS0ay7nLiGFXEl/dayBTJ2puJr8UAX4pDnM65u8kHe0JUKZqlsn/5G0z1jZ2 EDiDi7JmQqebim90T/KqT1S8fgN7LQY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:33 2025 by rpki-client