$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa File: 0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa (raw, json) Hash identifier: Zz7nuMvsZ+6hkeyy808auO3h0TSZhV3o0Vd1TUbEBnU= Subject key identifier: 1A:32:29:E4:64:B7:5D:52:A7:6E:1E:CF:5E:CA:93:7C:28:48:C9:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785094F98AD8FBD0F4D5380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:09:4f:98:ad:8f:bd:0f:4d:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c3ed4c63-7e20-465e-85fd-e63d48eb0be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:10:a3:c3:40:e3:5e:5d:aa:e6:bd:f1:20: a8:83:4b:33:0b:77:6f:92:9f:2e:8d:0a:3e:8f:5a: 77:e8:c6:e3:e0:59:36:fd:f3:69:70:c4:7a:1d:0c: 81:a7:31:75:94:25:dc:52:95:51:8d:42:6e:e8:f3: f5:c0:bd:e9:01:84:30:89:e7:85:c3:08:30:98:85: 13:e7:48:2e:ca:6c:9c:ad:bb:cf:57:ae:e6:b3:c0: f5:e7:f5:a5:bf:15:bb:da:d0:2b:87:3f:52:07:6a: 92:99:82:c9:f5:c8:98:fd:98:68:47:97:15:d6:69: 3e:da:2a:7d:6b:6a:b8:a2:a0:b4:72:70:b8:e5:59: b1:88:35:25:dd:0a:64:44:99:f3:22:42:97:5a:4b: 51:72:1b:fc:f5:08:be:44:f1:2e:32:ce:a7:8d:a0: 69:7e:b4:a1:98:3b:8f:25:a0:30:f6:2a:76:93:43: a2:0e:98:79:fe:b5:e9:93:c5:75:bf:7f:03:ce:66: 36:78:81:11:72:e7:96:1d:a0:2a:35:6d:c8:bd:65: 3a:1c:3a:6e:3f:f5:c0:ae:90:39:c2:4f:83:1e:fc: a4:9a:e8:57:27:90:d7:3b:42:00:1b:17:25:7d:4c: bc:66:4e:20:6d:d0:e2:9a:c7:22:2e:70:b6:fd:14: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:29:E4:64:B7:5D:52:A7:6E:1E:CF:5E:CA:93:7C:28:48:C9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a5:be:a2:ee:28:14:65:f2:e2:2d:6b:0e:cf:22:ac:06:38: 37:da:0f:d6:1f:f1:af:8e:c2:d1:02:90:93:09:a7:73:24:36: 45:d9:1c:dc:17:c7:35:46:f3:d8:5a:aa:c3:7c:2f:26:81:70: 2c:a5:05:11:6f:c1:cf:6d:43:79:7a:bf:7b:fe:73:83:a0:7c: 50:fc:51:78:a6:ba:73:bd:dc:4c:21:01:37:50:42:66:be:82: 4b:ea:e2:ad:6c:b9:7e:c1:cb:55:b0:86:4d:4c:5c:a9:4e:2d: 9f:bc:0d:ec:d5:6b:e7:6e:56:70:bf:e9:3c:9d:81:67:eb:e7: a1:ae:1a:80:84:32:10:a0:86:be:69:21:41:f1:49:49:c2:0f: c2:32:72:75:5b:40:20:9c:81:c2:f2:4d:d8:98:e1:3a:a8:69: b8:1f:04:49:3c:3f:b2:6f:ca:a0:d7:e1:95:28:ef:54:e7:fc: 21:cb:c5:57:69:82:51:55:cf:12:37:a3:1b:b1:29:17:ca:7f: 7d:7f:e9:32:c9:d1:ac:4f:ca:0c:b1:38:bb:ac:c4:95:f8:54: da:54:af:e3:f4:a6:62:fb:85:1e:64:d2:96:0e:98:b7:53:42: ad:a6:83:6a:28:34:25:d4:51:a9:b4:8e:a2:f0:cc:1f:28:93: 93:42:b1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQlPmK2PvQ9NU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzNlZDRjNjMtN2UyMC00NjVlLTg1ZmQtZTYzZDQ4ZWIwYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/0Qo8NA415dqua98SCog0szC3dvkp8ujQo+ j1p36Mbj4Fk2/fNpcMR6HQyBpzF1lCXcUpVRjUJu6PP1wL3pAYQwieeFwwgwmIUT 50guymycrbvPV67ms8D15/WlvxW72tArhz9SB2qSmYLJ9ciY/ZhoR5cV1mk+2ip9 a2q4oqC0cnC45VmxiDUl3QpkRJnzIkKXWktRchv89Qi+RPEuMs6njaBpfrShmDuP JaAw9ip2k0OiDph5/rXpk8V1v38DzmY2eIERcueWHaAqNW3IvWU6HDpuP/XArpA5 wk+DHvykmuhXJ5DXO0IAGxclfUy8Zk4gbdDimsciLnC2/RSwiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoyKeRkt11Sp24ez17Kk3woSMldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY4NGJkNmYtNWQ2NS0z NGQyLTk4ZGQtMGIxZGQ2ZGIyODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEClvqLuKBRl8uItaw7PIqwGODfaD9Yf8a+OwtECkJMJp3MkNkXZHNwX xzVG89haqsN8LyaBcCylBRFvwc9tQ3l6v3v+c4OgfFD8UXimunO93EwhATdQQma+ gkvq4q1suX7By1Wwhk1MXKlOLZ+8DezVa+duVnC/6TydgWfr56GuGoCEMhCghr5p IUHxSUnCD8IycnVbQCCcgcLyTdiY4TqoabgfBEk8P7JvyqDX4ZUo71Tn/CHLxVdp glFVzxI3oxuxKRfKf31/6TLJ0axPygyxOLusxJX4VNpUr+P0pmL7hR5k0pYOmLdT Qq2mg2ooNCXUUam0jqLwzB8ok5NCsRs= -----END CERTIFICATE-----Generated at Sun May 4 11:13:31 2025 by rpki-client