$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa File: d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa (raw, json) Hash identifier: w1NXI3RnoDvJM6uXOuLOZvzdlTjD8b6OuxHGwSwpmQ0= Subject key identifier: 00:A8:E4:9A:12:CD:6A:CD:0F:44:12:61:46:4D:DD:04:DD:14:15:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784E2F489C817CC818DC900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 2386 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e2:f4:89:c8:17:cc:81:8d:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b9602049-aeb3-496c-bce5-b45ae31aea53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:36:05:89:b2:a9:8f:3f:18:0e:2b:c5:46: af:de:c5:fa:dc:98:c0:63:9a:6f:da:8b:63:30:fa: 02:2f:f0:19:0e:9a:16:a0:9c:5c:dc:2b:9b:bb:65: 8d:4b:0f:28:30:7e:51:69:88:14:b5:66:34:74:ea: 71:ee:c4:81:73:0c:2f:a8:36:52:a8:65:99:6f:90: df:42:30:40:aa:f9:33:de:28:8c:d3:41:6f:1a:9d: 2d:7a:5d:a1:cc:35:0b:4d:45:39:68:8e:f7:9b:7b: 9e:1e:7f:7a:d1:7b:1d:7e:3e:e4:48:d5:61:b9:49: 1a:99:db:41:00:2f:ee:b6:4f:6e:bc:a2:09:34:a7: 8a:8b:be:a9:03:27:a1:10:bc:5c:ea:f5:60:d7:af: 8b:04:08:24:06:cd:aa:ce:d8:f9:6e:e8:f6:49:f8: 1c:58:a1:12:22:29:a9:47:fb:f8:89:e6:ff:24:cb: af:42:7d:76:71:27:17:1b:85:ca:d5:d9:7b:e3:84: e7:30:08:7e:00:ec:da:98:d5:99:d5:e0:2b:f1:fd: bf:93:56:14:bc:b6:59:89:2a:9c:1b:6e:1e:51:bd: a9:4e:20:23:8f:e0:22:41:37:28:bc:5f:e5:6c:29: 08:7d:cf:d1:1c:b5:87:09:44:e1:bb:11:1a:cd:84: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A8:E4:9A:12:CD:6A:CD:0F:44:12:61:46:4D:DD:04:DD:14:15:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a2:8d:63:41:26:dd:8f:b9:e9:b0:0b:03:3b:3d:86:49:f3: dc:d6:8f:eb:02:b3:b8:57:ce:be:48:41:4e:96:74:02:a6:b9: 49:8c:1a:db:c3:17:11:b8:7c:01:02:d9:e1:a2:e8:ec:f8:33: 40:e4:96:ff:0d:dd:32:de:80:ec:7e:b6:5a:3a:a8:08:68:ca: da:73:3e:bb:3f:a7:73:d8:bf:0b:33:c8:be:37:56:ba:6a:d4: 83:ea:56:71:17:0d:52:a1:37:41:0e:ef:a9:35:e5:a4:81:c2: 9d:c7:1b:6c:a8:8c:2a:24:96:91:5f:87:89:46:44:cd:94:a6: d0:e4:13:03:fb:8c:e0:a1:06:67:d2:06:46:9f:b9:dc:7d:a8: bb:8c:ed:2b:32:7c:29:5f:76:11:6b:6b:f0:20:28:63:93:c2: e4:cf:55:a6:ee:32:a3:7b:b9:d8:12:2b:38:5b:d3:d1:56:b2: db:8d:12:b3:4c:87:d2:19:48:63:bb:77:bf:ea:e7:cd:30:f1: d3:29:0e:3d:a9:cf:e7:39:03:af:6e:85:00:f5:d2:0d:a1:eb: c6:dc:4d:27:17:24:37:2f:5d:b0:d5:53:dd:5e:0f:8d:72:c6: 1a:60:d2:3a:bb:bd:29:1f:b7:3a:b2:35:71:94:8b:c5:50:d6: ef:10:55:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOL0icgXzIGNyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Yjk2MDIwNDktYWViMy00OTZjLWJjZTUtYjQ1YWUzMWFlYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ko2BYmyqY8/GA4rxUav3sX63JjAY5pv2otj MPoCL/AZDpoWoJxc3Cubu2WNSw8oMH5RaYgUtWY0dOpx7sSBcwwvqDZSqGWZb5Df QjBAqvkz3iiM00FvGp0tel2hzDULTUU5aI73m3ueHn960Xsdfj7kSNVhuUkamdtB AC/utk9uvKIJNKeKi76pAyehELxc6vVg16+LBAgkBs2qztj5buj2SfgcWKESIimp R/v4ieb/JMuvQn12cScXG4XK1dl744TnMAh+AOzamNWZ1eAr8f2/k1YUvLZZiSqc G24eUb2pTiAjj+AiQTcovF/lbCkIfc/RHLWHCUThuxEazYSS9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACo5JoSzWrND0QSYUZN3QTdFBX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlhNmFkYjQtNjlhNS0z YTQyLWI0YWEtM2I3MDU4YTczYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeijWNBJt2PuemwCwM7PYZJ89zWj+sCs7hXzr5IQU6WdAKmuUmMGtvD FxG4fAEC2eGi6Oz4M0Dklv8N3TLegOx+tlo6qAhoytpzPrs/p3PYvwszyL43Vrpq 1IPqVnEXDVKhN0EO76k15aSBwp3HG2yojCoklpFfh4lGRM2UptDkEwP7jOChBmfS Bkafudx9qLuM7SsyfClfdhFra/AgKGOTwuTPVabuMqN7udgSKzhb09FWstuNErNM h9IZSGO7d7/q580w8dMpDj2pz+c5A69uhQD10g2h68bcTScXJDcvXbDVU91eD41y xhpg0jq7vSkftzqyNXGUi8VQ1u8QVWo= -----END CERTIFICATE-----Generated at Sun Apr 27 00:43:21 2025 by rpki-client