$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa File: fd51bf42-6a03-3383-9b75-4b273b788025.roa (raw, json) Hash identifier: YlIqBNT+uxTuZO4LUa9pngZKKP/EB5V/1KRMQu/y4GA= Subject key identifier: 8C:26:4F:87:16:52:7D:B8:17:D1:CD:F6:25:27:76:05:FF:AD:11:60 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784D88CA573C1B5FACFDF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 2386 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d8:8c:a5:73:c1:b5:fa:cf:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e8e90209-bf2e-4cef-a1fe-ca4a0786cbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:44:3f:bb:2c:9e:f8:4e:1d:17:84:18:7f: 65:9b:3a:10:33:80:3c:51:9c:a3:3c:75:bd:6e:c6: 21:d3:f2:c9:7e:1b:65:6d:99:60:81:e5:ca:90:d0: 1e:87:92:26:09:d2:f7:29:39:ec:cf:fb:c3:25:b4: 7f:43:bb:7a:46:52:04:08:c1:40:a2:ae:66:46:f9: aa:0c:1c:0e:cc:00:c9:ea:9b:60:fa:a4:a0:3e:af: 3a:72:3c:5f:4f:34:11:44:6b:78:65:87:3b:ae:e1: a8:3b:28:31:58:da:c6:f2:9f:bc:b3:f7:90:05:dd: e2:dd:5e:fe:b2:c4:c6:e7:33:52:3d:dc:15:9d:16: 93:18:bd:de:8d:d5:27:0f:cf:9d:bd:b9:a3:6c:bf: e7:e0:3a:9a:5a:76:ea:e9:20:73:87:e0:99:8e:c7: 25:05:70:13:59:04:4a:42:11:6e:d4:2f:9a:49:98: 7c:f2:8c:ce:f1:76:1b:01:b2:5e:68:1e:d0:cc:c7: 5b:1e:af:f4:13:70:b2:ba:5f:f5:eb:d2:7c:42:43: 82:0f:bc:53:65:55:bf:dd:c4:ca:1a:74:77:2d:f1: 83:2d:42:68:72:6f:48:29:f3:24:72:1d:00:3e:ae: 4a:80:6d:21:4b:87:63:5e:07:81:5f:5f:13:2b:c3: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:4F:87:16:52:7D:B8:17:D1:CD:F6:25:27:76:05:FF:AD:11:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:13:c7:c4:3c:b5:93:9b:e0:07:cf:aa:e7:a6:dc:43:bf:90: c0:1a:0c:d3:3e:ab:3b:8e:20:b7:f3:8c:5a:8b:47:f2:86:2f: 43:04:d7:30:d8:aa:c3:e7:f4:d1:7a:b6:b9:af:00:8c:92:71: 23:a0:e9:1b:06:a2:b2:74:10:6d:77:65:7c:29:00:b9:56:2b: c0:9e:fd:62:bb:fd:10:05:62:1b:af:d9:63:13:86:de:f5:60: ca:ae:38:8b:80:53:08:2f:11:b2:ae:95:3f:e7:c2:d3:b0:17: d6:6b:de:18:c2:55:42:73:b8:a4:04:75:27:64:39:d1:0e:ea: 10:fa:aa:17:21:50:cd:67:ca:f7:71:0a:4c:1d:e6:6a:0f:49: 67:33:41:c7:fc:95:85:20:13:fa:c5:0c:d2:b2:df:57:e9:49: b7:f9:7c:50:02:2b:fb:c0:bb:a8:ae:a3:50:bf:13:2c:b3:b2: e4:ca:b0:18:e0:b7:cf:c2:6d:20:b1:68:ef:8b:73:71:5b:c2: 15:14:f0:82:b2:9e:aa:33:de:49:da:e1:24:bf:f3:3c:97:37: ff:e8:e7:c6:c3:bc:18:55:5b:8c:56:3e:50:bc:42:a8:40:7b: 90:0b:11:60:1f:20:5d:4a:b7:e1:32:be:6f:89:18:3b:2c:dc: bd:0d:d4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNiMpXPBtfrP34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZThlOTAyMDktYmYyZS00Y2VmLWExZmUtY2E0YTA3ODZjYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW1EP7ssnvhOHReEGH9lmzoQM4A8UZyjPHW9 bsYh0/LJfhtlbZlggeXKkNAeh5ImCdL3KTnsz/vDJbR/Q7t6RlIECMFAoq5mRvmq DBwOzADJ6ptg+qSgPq86cjxfTzQRRGt4ZYc7ruGoOygxWNrG8p+8s/eQBd3i3V7+ ssTG5zNSPdwVnRaTGL3ejdUnD8+dvbmjbL/n4DqaWnbq6SBzh+CZjsclBXATWQRK QhFu1C+aSZh88ozO8XYbAbJeaB7QzMdbHq/0E3Cyul/169J8QkOCD7xTZVW/3cTK GnR3LfGDLUJocm9IKfMkch0APq5KgG0hS4djXgeBX18TK8PdoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwmT4cWUn24F9HN9iUndgX/rRFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQ1MWJmNDItNmEwMy0z MzgzLTliNzUtNGIyNzNiNzg4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4Tx8Q8tZOb4AfPquem3EO/kMAaDNM+qzuOILfzjFqLR/KGL0ME1zDY qsPn9NF6trmvAIyScSOg6RsGorJ0EG13ZXwpALlWK8Ce/WK7/RAFYhuv2WMTht71 YMquOIuAUwgvEbKulT/nwtOwF9Zr3hjCVUJzuKQEdSdkOdEO6hD6qhchUM1nyvdx Ckwd5moPSWczQcf8lYUgE/rFDNKy31fpSbf5fFACK/vAu6iuo1C/EyyzsuTKsBjg t8/CbSCxaO+Lc3FbwhUU8IKynqoz3kna4SS/8zyXN//o58bDvBhVW4xWPlC8QqhA e5ALEWAfIF1Kt+Eyvm+JGDss3L0N1IE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:16 2025 by rpki-client