$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa File: d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa (raw, json) Hash identifier: Z76omAAiuu9Zh0Ok/XGlgKGk9pya//5RicqGRKoeOgU= Subject key identifier: C2:4B:EC:13:D4:E1:4F:36:F3:A7:64:AF:2B:F0:9E:BC:9F:E5:2D:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784D240F298B174FA08F9E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d2:40:f2:98:b1:74:fa:08:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=49469a17-e622-42f0-a1c1-8bd08887b6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:71:9b:b6:03:be:32:f5:72:f5:bc:bd:02: 87:3e:7d:9f:20:44:ea:5d:d3:46:b7:14:49:3d:03: a0:39:2e:eb:ad:89:14:14:20:44:31:eb:91:e9:be: b4:53:24:f0:e5:3f:18:4c:30:9f:0a:98:16:60:88: 87:85:24:02:05:8a:95:39:21:45:87:33:e6:4d:18: fb:e6:22:c3:4c:3c:5c:cf:09:77:fb:12:49:07:1a: a8:e3:5d:60:27:7d:df:67:e7:1b:79:2a:05:70:9f: f8:9e:d6:c2:07:c2:8f:6f:43:97:af:5f:b5:8e:a5: 0e:5e:e9:41:66:dd:2a:ce:5e:77:47:97:60:84:46: 39:6b:a8:be:ed:b0:22:db:e7:8f:a2:35:e7:82:00: 39:30:8e:4b:0e:4f:3d:e1:d6:6d:a2:40:1f:49:5b: 2a:a7:3c:7c:84:16:b5:96:a7:7f:91:1e:89:b4:66: 4f:4d:20:c6:ec:d7:b3:4a:8f:d6:a3:9e:59:cb:4b: ff:26:31:e8:1b:9f:b9:41:b1:9a:15:30:84:f0:b3: f8:29:40:e0:87:ec:8c:6f:f0:4d:9f:3e:6c:b8:d5: 65:1f:b6:4e:09:2e:34:2d:7f:a3:ce:cd:ea:66:d0: c1:23:83:c6:b9:3b:54:19:22:fb:ee:fe:bc:f6:2a: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4B:EC:13:D4:E1:4F:36:F3:A7:64:AF:2B:F0:9E:BC:9F:E5:2D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:99:50:3f:14:c5:75:f9:cc:6d:2f:26:a7:e3:9f:73:7a:1b: be:15:cb:cc:2d:c5:d7:0e:90:9e:d1:87:f5:ea:e3:52:63:79: ec:f8:6f:68:e5:31:06:2b:ad:9a:11:bf:66:fc:98:3b:f5:82: 44:7f:6c:f5:f7:07:bd:86:d6:54:13:fe:09:3c:c6:b4:43:10: d7:e5:34:d6:a1:fd:f1:39:d0:86:a3:e7:f4:35:5e:3d:a5:80: 1e:66:11:f6:6a:3f:46:6c:55:18:0d:25:89:c4:94:44:0c:cb: 11:e1:0f:d8:98:3d:15:bf:68:56:ed:81:75:18:a8:60:78:e7: 1b:ec:df:36:07:84:f3:ac:15:63:5b:d4:e2:36:e8:f8:96:23: fa:11:78:d0:85:b1:74:c0:46:cf:41:e0:ff:b9:4d:f7:7e:d7: 6f:35:a3:63:f8:43:a6:08:be:c4:69:6b:d1:d0:29:2b:e6:bb: 3b:83:94:63:6c:7d:4d:13:60:b8:7b:27:94:2f:b3:24:bd:ff: 54:99:67:5a:a9:1f:b6:4b:a9:85:63:9c:40:e9:67:82:3d:1a: d0:af:19:c1:dc:7d:1e:4b:84:a8:92:0f:7b:f8:ee:1e:8d:6f: bf:a7:c2:62:cb:e8:e1:0b:d3:58:4e:6b:ab:25:37:10:3c:5a: 68:24:aa:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNJA8pixdPoI+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDk0NjlhMTctZTYyMi00MmYwLWExYzEtOGJkMDg4ODdiNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Klxm7YDvjL1cvW8vQKHPn2fIETqXdNGtxRJ PQOgOS7rrYkUFCBEMeuR6b60UyTw5T8YTDCfCpgWYIiHhSQCBYqVOSFFhzPmTRj7 5iLDTDxczwl3+xJJBxqo411gJ33fZ+cbeSoFcJ/4ntbCB8KPb0OXr1+1jqUOXulB Zt0qzl53R5dghEY5a6i+7bAi2+ePojXnggA5MI5LDk894dZtokAfSVsqpzx8hBa1 lqd/kR6JtGZPTSDG7NezSo/Wo55Zy0v/JjHoG5+5QbGaFTCE8LP4KUDgh+yMb/BN nz5suNVlH7ZOCS40LX+jzs3qZtDBI4PGuTtUGSL77v689iquqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJL7BPU4U8286dkryvwnryf5S3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDc1M2ZkYmYtMjE0OC0z ZGYzLThjMDktYmRiMDVlZmY2NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuZUD8UxXX5zG0vJqfjn3N6G74Vy8wtxdcOkJ7Rh/Xq41Jjeez4b2jl MQYrrZoRv2b8mDv1gkR/bPX3B72G1lQT/gk8xrRDENflNNah/fE50Iaj5/Q1Xj2l gB5mEfZqP0ZsVRgNJYnElEQMyxHhD9iYPRW/aFbtgXUYqGB45xvs3zYHhPOsFWNb 1OI26PiWI/oReNCFsXTARs9B4P+5Tfd+1281o2P4Q6YIvsRpa9HQKSvmuzuDlGNs fU0TYLh7J5QvsyS9/1SZZ1qpH7ZLqYVjnEDpZ4I9GtCvGcHcfR5LhKiSD3v47h6N b7+nwmLL6OEL01hOa6slNxA8WmgkqmA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:50 2025 by rpki-client