$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa File: eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa (raw, json) Hash identifier: 5/0RTpZxhecCEwwtDFjGanlg404dj9K5RyZR/svsa/4= Subject key identifier: 53:A3:B2:96:1E:A5:77:65:72:39:E4:B3:0A:5F:3E:76:82:4B:5F:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785245E8E15D9B658CAE100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:24:5e:8e:15:d9:b6:58:ca:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f072cbf5-0dd7-4090-b5e0-259239f2466b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:cb:2c:10:84:8d:09:bb:d6:57:3e:99:2c: 0c:43:c9:2c:fc:68:4d:30:e0:87:e6:6d:9e:cb:26: 80:b1:35:bd:32:ad:a7:3a:60:9d:2a:20:6a:aa:f7: d8:fb:5d:3f:55:85:c7:37:13:96:ae:2e:f2:eb:7f: af:16:49:d3:ff:2f:57:8c:50:24:11:bd:7e:9d:8a: e6:29:e8:35:52:36:40:e5:8b:3b:15:33:77:68:0d: c3:9f:96:74:84:10:8e:15:d0:fe:01:5e:53:90:c9: ce:1a:7b:e2:f7:b8:34:a2:7a:2b:e9:39:b4:3b:0a: 6b:8f:75:e8:e8:5d:51:28:c4:ef:f1:6b:7b:06:94: bf:84:4e:a9:47:1a:38:a8:38:17:dd:cb:6a:13:42: bc:dd:d1:c7:90:c2:01:d6:1f:79:96:99:9d:cf:2e: ba:78:16:b7:de:a0:8d:0d:36:8e:a7:67:0b:fc:f9: e0:f9:30:c0:f8:52:e9:d2:dd:83:e2:1c:52:f7:a0: 66:99:c4:d0:08:6a:fa:7d:01:cc:a7:41:95:17:77: 8c:ae:9d:91:d1:20:d9:96:82:a1:ff:51:34:13:00: a8:db:07:af:0c:11:8b:c5:ae:94:9b:e1:15:68:a9: f9:42:c5:24:23:66:e3:b4:14:d5:69:06:04:87:d5: 13:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:B2:96:1E:A5:77:65:72:39:E4:B3:0A:5F:3E:76:82:4B:5F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:35:88:89:27:40:59:b2:06:9a:d3:41:c0:d0:f4:cd:23:8b: 29:b8:67:32:1c:18:13:cf:29:99:7d:eb:69:9f:b6:bd:bd:58: 54:df:a5:53:88:b0:36:35:cf:fc:09:f1:e7:d2:d5:db:31:29: ca:62:bc:55:70:9d:89:3b:ad:e3:39:b2:14:5f:4e:24:6b:17: 8b:d8:44:0d:67:d0:78:94:40:f8:46:0e:62:ca:cb:d0:20:30: 53:00:9b:6d:bf:4b:a8:a6:85:ca:d2:09:56:e1:ff:60:fd:a6: 4b:33:6e:4b:73:e4:e4:19:ae:d6:aa:c9:a3:bb:9a:18:9c:40: 99:c9:62:30:d2:a8:f7:9b:d5:7d:0a:f6:2e:1b:8c:2a:3b:29: 81:84:63:86:b4:69:93:e0:a6:aa:c6:d0:ae:c6:8d:5a:23:6d: 22:2e:d2:7c:89:7d:0e:69:77:81:23:3c:e0:6e:be:cb:de:77: c7:cf:55:4a:5e:f4:44:ba:42:af:bb:b2:3a:14:00:cc:0f:07: e9:f8:b5:26:97:24:bc:7c:47:c1:0f:cb:c5:01:ae:40:e3:90: 8e:36:2c:e3:07:2a:e6:ab:ae:ab:0d:cb:1a:25:a5:65:77:0c: 5d:a4:07:62:f4:c1:f2:35:23:e4:ba:fe:c7:5c:e0:31:56:c4: b7:13:6d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSRejhXZtljK4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjA3MmNiZjUtMGRkNy00MDkwLWI1ZTAtMjU5MjM5ZjI0NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZnLLBCEjQm71lc+mSwMQ8ks/GhNMOCH5m2e yyaAsTW9Mq2nOmCdKiBqqvfY+10/VYXHNxOWri7y63+vFknT/y9XjFAkEb1+nYrm Keg1UjZA5Ys7FTN3aA3Dn5Z0hBCOFdD+AV5TkMnOGnvi97g0onor6Tm0Owprj3Xo 6F1RKMTv8Wt7BpS/hE6pRxo4qDgX3ctqE0K83dHHkMIB1h95lpmdzy66eBa33qCN DTaOp2cL/Png+TDA+FLp0t2D4hxS96BmmcTQCGr6fQHMp0GVF3eMrp2R0SDZloKh /1E0EwCo2wevDBGLxa6Um+EVaKn5QsUkI2bjtBTVaQYEh9UTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOjspYepXdlcjnkswpfPnaCS1/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWFmMjhlMGYtMDViZC0z MWEyLWI0YjAtY2IzNGU2MTk1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKk1iIknQFmyBprTQcDQ9M0jiym4ZzIcGBPPKZl962mftr29WFTfpVOI sDY1z/wJ8efS1dsxKcpivFVwnYk7reM5shRfTiRrF4vYRA1n0HiUQPhGDmLKy9Ag MFMAm22/S6imhcrSCVbh/2D9pkszbktz5OQZrtaqyaO7mhicQJnJYjDSqPeb1X0K 9i4bjCo7KYGEY4a0aZPgpqrG0K7GjVojbSIu0nyJfQ5pd4EjPOBuvsved8fPVUpe 9ES6Qq+7sjoUAMwPB+n4tSaXJLx8R8EPy8UBrkDjkI42LOMHKuarrqsNyxolpWV3 DF2kB2L0wfI1I+S6/sdc4DFWxLcTbZM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:04 2025 by rpki-client