$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa File: cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa (raw, json) Hash identifier: mJ7Oz0OOZoNeBlFSBVlexIL5kNVa4c6h3pLwL540NsE= Subject key identifier: 81:16:9B:EA:07:1D:4C:DA:73:73:5F:33:53:93:4B:94:40:49:1C:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7850E34EBD4B09D73D31AE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0e:34:eb:d4:b0:9d:73:d3:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5998db00-d648-4216-b1e1-f416fba44ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:09:f3:a2:c5:20:12:a0:70:83:f7:83:fc: ac:31:e7:e6:e7:7a:5e:c7:99:fe:e6:ee:c1:76:65: 79:5e:2f:d3:02:45:35:95:d0:e4:25:c6:59:b8:66: eb:d4:8e:f5:d7:f2:57:96:6e:0b:9f:3b:15:b1:27: 98:42:f0:a4:fb:09:fe:5e:14:b8:f7:7b:6d:66:82: 7b:9d:d1:93:1d:f9:de:dc:12:bd:25:28:85:cf:0e: 1d:fc:77:01:a6:69:52:f6:60:f9:68:02:21:11:f8: dd:7e:0c:aa:68:e9:91:17:66:6d:7e:32:da:71:0e: 1a:d1:14:a7:f5:80:24:4b:ef:5f:83:7f:7d:70:82: 8a:a1:84:a2:d6:5c:7f:a5:02:25:b4:2e:a6:a5:d8: 0a:11:d7:c2:91:2f:2b:e8:b9:4e:b1:9a:fd:b2:b7: ce:09:37:ce:9e:e6:62:ae:af:ea:b4:94:11:81:d1: c2:4d:8d:39:1b:12:41:af:83:69:6a:f6:27:d5:6c: 4f:68:07:c8:1a:5d:e0:7d:be:08:c4:f1:b6:b2:10: 21:ec:99:0d:fe:b1:00:64:e9:75:70:82:a8:b4:7c: 5b:0f:fc:7b:24:01:48:6f:19:7f:ad:22:95:dc:1f: 33:f3:f4:c9:69:e1:9b:31:62:10:9a:aa:75:f7:eb: 0b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:16:9B:EA:07:1D:4C:DA:73:73:5F:33:53:93:4B:94:40:49:1C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a1:a7:38:c4:3e:42:6b:29:f4:8c:70:1a:a4:36:a6:54:68: 48:ae:21:9f:b4:5d:b0:3d:fe:7f:fd:56:c0:13:9f:b2:ee:cb: 8a:84:70:f4:20:b1:ad:22:16:d8:66:78:a5:59:1d:51:90:5e: bc:76:54:20:e9:b5:53:fa:c9:03:f9:1e:12:8a:6b:5b:b1:90: ee:07:66:96:8a:5b:ad:13:7a:9f:4b:e8:dd:5b:80:a5:07:25: 3a:0b:90:eb:12:8c:3d:b9:77:31:62:af:b9:47:64:01:fe:e7: 88:52:ec:eb:21:76:d9:67:d0:87:8d:77:3e:9f:96:2a:c0:fd: f3:82:aa:49:9c:bc:3f:72:0e:96:79:de:4b:3b:00:05:3a:07: 03:f5:8e:ad:03:47:7a:ef:d8:0e:5c:ff:72:2c:98:34:bc:6d: 03:74:a3:68:fd:40:3b:fe:93:90:3c:f1:e4:b1:d6:67:0f:42: c7:c8:89:9f:da:b5:61:35:6f:c5:3b:de:dc:83:31:8e:38:98: bd:57:43:13:a8:e6:f2:6d:b0:42:b9:bc:bc:04:b2:94:a5:7a: c1:1e:fa:3a:47:34:ab:55:64:27:ac:4f:0d:42:e8:5b:5c:65: d4:55:b8:90:5a:be:97:d6:08:e1:dc:ac:7f:d0:af:8c:52:5a: 81:29:cc:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQ4069SwnXPTGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTk5OGRiMDAtZDY0OC00MjE2LWIxZTEtZjQxNmZiYTQ0ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouYJ86LFIBKgcIP3g/ysMefm53pex5n+5u7B dmV5Xi/TAkU1ldDkJcZZuGbr1I711/JXlm4LnzsVsSeYQvCk+wn+XhS493ttZoJ7 ndGTHfne3BK9JSiFzw4d/HcBpmlS9mD5aAIhEfjdfgyqaOmRF2ZtfjLacQ4a0RSn 9YAkS+9fg399cIKKoYSi1lx/pQIltC6mpdgKEdfCkS8r6LlOsZr9srfOCTfOnuZi rq/qtJQRgdHCTY05GxJBr4NpavYn1WxPaAfIGl3gfb4IxPG2shAh7JkN/rEAZOl1 cIKotHxbD/x7JAFIbxl/rSKV3B8z8/TJaeGbMWIQmqp19+sL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEWm+oHHUzac3NfM1OTS5RASRyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y2YjBkNjAtMTlmZi0z NzQyLTlkNjctZDRkNzNhYWJmOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJShpzjEPkJrKfSMcBqkNqZUaEiuIZ+0XbA9/n/9VsATn7Luy4qEcPQg sa0iFthmeKVZHVGQXrx2VCDptVP6yQP5HhKKa1uxkO4HZpaKW60Tep9L6N1bgKUH JToLkOsSjD25dzFir7lHZAH+54hS7Oshdtln0IeNdz6flirA/fOCqkmcvD9yDpZ5 3ks7AAU6BwP1jq0DR3rv2A5c/3IsmDS8bQN0o2j9QDv+k5A88eSx1mcPQsfIiZ/a tWE1b8U73tyDMY44mL1XQxOo5vJtsEK5vLwEspSlesEe+jpHNKtVZCesTw1C6Ftc ZdRVuJBavpfWCOHcrH/Qr4xSWoEpzO0= -----END CERTIFICATE-----Generated at Sun Apr 27 08:21:26 2025 by rpki-client