$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa File: fa6d7785-b363-37e6-834e-f8ca6302050e.roa (raw, json) Hash identifier: B1I4WhhVqtXLghYcDoRRaxdsOyPgGUG6LWvksvI7kq8= Subject key identifier: 09:54:42:E4:2D:8E:26:FC:EE:70:97:C9:BB:7C:C4:CF:1D:98:2F:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7853A57F10E7AA7D21A4040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3a:57:f1:0e:7a:a7:d2:1a:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8183b8ac-121d-4ef7-a9a0-f91ddfcfb325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:c3:ae:14:ec:ea:1f:e9:6f:4a:5e:88:3b: f6:bc:ce:05:19:e2:97:85:ac:7c:8c:a3:a5:94:8f: 57:08:f5:8d:95:00:fb:ec:af:3f:d5:c5:7d:15:ab: 87:77:c4:59:df:a1:bc:0d:6c:57:2a:66:fe:af:b0: e0:87:a6:7c:37:dc:a0:78:85:73:60:81:62:df:36: da:a8:e0:e2:b6:90:4d:43:79:22:0a:4e:30:0b:29: 70:fd:c4:0a:10:02:0c:a3:58:71:0c:b3:d8:3d:2e: 76:90:90:e2:d9:0d:95:bf:96:4e:05:c9:59:31:6d: 9b:ca:a8:48:31:98:c1:ce:27:58:cb:58:e3:73:3a: 9b:73:b5:38:9b:ba:35:3e:cd:f9:fb:e8:8c:56:c9: 4b:eb:c1:79:31:47:05:84:07:f9:6e:be:4d:a2:6f: e4:82:2f:50:75:f3:69:10:20:c0:e5:01:8a:5a:95: b9:a7:6a:00:77:76:aa:27:62:6d:0b:2d:97:bc:10: 34:c9:cb:f0:e6:e4:76:d9:44:cb:94:3a:86:84:d8: f9:a5:de:35:3e:aa:31:99:1f:1e:dc:37:bc:f8:76: 9d:dc:19:f9:18:3f:67:74:a0:00:3f:68:d4:80:26: eb:7f:d7:79:fa:36:6a:2c:7b:af:8f:3a:f0:63:e0: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:42:E4:2D:8E:26:FC:EE:70:97:C9:BB:7C:C4:CF:1D:98:2F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:78:1a:a9:a5:09:ff:24:04:b1:11:2d:b7:c4:43:ad:c6:c9: 65:bb:db:df:55:00:75:3c:20:0a:59:2e:cd:f8:f7:cf:b3:bd: bf:b9:20:ec:fa:71:b3:49:79:0d:34:bc:19:2d:55:7d:c5:cd: 8f:84:d8:b1:43:47:f7:50:2d:48:56:cc:9e:83:78:51:e9:f9: 41:f8:17:6e:09:d1:c2:fc:d5:20:2a:00:2b:4d:a9:2c:c0:8d: a5:b7:24:05:25:28:d5:a4:94:df:72:54:a5:c2:ea:ef:fa:fb: b1:6b:01:ad:22:1d:89:fc:02:19:25:9a:b8:68:b3:57:91:a6: 3b:2d:dd:0a:c1:bb:1c:ca:57:2b:da:68:39:b8:0f:46:a9:0c: 73:77:21:49:22:37:bd:13:49:e4:b8:da:fc:52:93:bd:dd:f7: d3:f4:44:a9:4d:4f:1e:65:e4:22:de:1f:3b:81:d3:04:01:48: d8:bd:41:d9:d5:e8:c8:39:19:4a:5a:a5:03:7e:69:6d:bc:ef: 5e:6d:f3:14:9c:76:77:f5:e5:a3:12:32:41:3c:24:c6:a0:1c: 74:55:77:59:ff:b9:a5:c5:8b:06:f6:9d:c8:90:8b:37:54:22: 57:d4:33:5c:ce:1b:58:85:7c:c4:6a:b9:bf:4e:5b:f2:cd:ef: b9:a5:62:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTpX8Q56p9IaQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODE4M2I4YWMtMTIxZC00ZWY3LWE5YTAtZjkxZGRmY2ZiMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt/DrhTs6h/pb0peiDv2vM4FGeKXhax8jKOl lI9XCPWNlQD77K8/1cV9FauHd8RZ36G8DWxXKmb+r7Dgh6Z8N9ygeIVzYIFi3zba qODitpBNQ3kiCk4wCylw/cQKEAIMo1hxDLPYPS52kJDi2Q2Vv5ZOBclZMW2byqhI MZjBzidYy1jjczqbc7U4m7o1Ps35++iMVslL68F5MUcFhAf5br5Nom/kgi9QdfNp ECDA5QGKWpW5p2oAd3aqJ2JtCy2XvBA0ycvw5uR22UTLlDqGhNj5pd41PqoxmR8e 3De8+Had3Bn5GD9ndKAAP2jUgCbrf9d5+jZqLHuvjzrwY+DoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlUQuQtjib87nCXybt8xM8dmC9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE2ZDc3ODUtYjM2My0z N2U2LTgzNGUtZjhjYTYzMDIwNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB54GqmlCf8kBLERLbfEQ63GyWW7299VAHU8IApZLs3498+zvb+5IOz6 cbNJeQ00vBktVX3FzY+E2LFDR/dQLUhWzJ6DeFHp+UH4F24J0cL81SAqACtNqSzA jaW3JAUlKNWklN9yVKXC6u/6+7FrAa0iHYn8Ahklmrhos1eRpjst3QrBuxzKVyva aDm4D0apDHN3IUkiN70TSeS42vxSk73d99P0RKlNTx5l5CLeHzuB0wQBSNi9QdnV 6Mg5GUpapQN+aW28715t8xScdnf15aMSMkE8JMagHHRVd1n/uaXFiwb2nciQizdU IlfUM1zOG1iFfMRqub9OW/LN77mlYmw= -----END CERTIFICATE-----Generated at Sat Apr 26 21:51:42 2025 by rpki-client