$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa File: 089de854-3bd0-3daa-8427-ce457804664f.roa (raw, json) Hash identifier: dXCFnv1iz3aox8rUnGvxrzy79u6O0mNsanqXNfoVRuU= Subject key identifier: 33:23:B6:84:05:7B:8B:BF:D5:09:68:A2:68:D4:B1:96:72:E7:29:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784EAFFF747512AF2C4C980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ea:ff:f7:47:51:2a:f2:c4:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d9805c17-a9cf-4623-99d1-a2d8f9f58e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:71:f3:ef:df:f8:be:05:44:69:20:ef:80: 20:61:c6:f6:d0:1f:4d:d9:1c:bc:41:9f:cf:8d:22: d6:e2:ff:92:44:d3:64:1b:ea:ae:f5:92:ba:0b:ef: 2f:80:69:d7:ba:5c:e1:2d:32:ca:23:0b:01:58:22: d1:d7:af:d9:2a:73:81:75:48:17:4d:f1:cf:42:f2: b2:65:18:d1:d6:97:f3:73:ec:3f:a5:b6:b9:02:0a: 76:f0:a6:df:96:95:84:72:13:99:d9:7f:ee:40:c6: 10:0c:a6:c7:84:89:e4:48:95:61:d8:80:e4:4f:00: f3:22:2a:d1:03:f0:9e:1e:4a:b8:10:90:1b:a8:34: 01:92:06:95:4e:08:bd:e4:3d:82:9d:2c:59:ec:e3: 71:53:d8:37:30:e2:e3:fa:c5:43:68:6e:91:5a:26: 2e:43:96:3f:55:58:bf:7d:99:7d:1d:ae:91:9e:86: 86:cc:80:70:5b:7c:a0:00:dc:86:9c:80:7e:80:96: f6:79:cc:f6:9c:15:ba:cc:35:47:e9:d2:30:3a:5e: 6e:a2:e7:81:f0:79:6e:ea:26:91:d3:6c:9a:9c:0d: 6a:84:e7:8c:60:44:16:3e:cc:09:36:c0:96:39:ea: 38:ac:c7:3e:d7:0f:d8:13:1d:1e:8f:a2:fc:e2:91: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:23:B6:84:05:7B:8B:BF:D5:09:68:A2:68:D4:B1:96:72:E7:29:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:12:d4:6a:5d:86:f0:03:9c:49:27:fc:e1:16:22:37:de:9c: f7:9d:b9:30:5c:ab:cd:94:59:7c:2a:e0:7c:12:6e:da:e5:dc: ac:6e:9f:51:50:69:a5:18:4a:31:70:6c:1c:4f:ab:8c:6e:a0: ad:ea:9a:6a:fa:f4:4e:10:73:7a:68:42:6e:f9:53:99:db:43: 6d:ab:94:76:9a:dd:d2:4f:38:c1:af:8d:ce:fd:79:b3:db:09: 51:16:b5:db:71:79:90:87:ba:a5:33:7d:e2:40:44:b1:90:3b: bd:b2:26:ff:0f:56:c5:82:96:e6:da:97:4c:f9:b4:6f:56:bf: d1:63:db:6a:45:86:ba:a4:31:22:73:ce:07:22:e8:dd:73:31: 37:c8:f8:d8:2b:5f:dd:33:40:6a:af:ce:00:18:09:7d:08:cd: 99:ea:77:47:1c:da:c1:4f:e0:c0:be:32:b0:84:ae:5f:1e:c8: fc:ee:63:d1:9a:a2:63:fe:6e:c8:f2:3f:2a:8d:6a:87:42:a0: 80:12:3d:17:c0:a1:08:76:4f:96:dd:cb:ac:e5:d9:9c:84:85: 35:0a:bb:f4:08:93:44:14:92:cf:10:0f:64:a6:88:5a:89:8a: b9:cd:cb:80:62:9e:44:ad:9f:f5:6d:73:22:8d:5a:46:3a:b6: c7:67:5b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOr/90dRKvLEyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDk4MDVjMTctYTljZi00NjIzLTk5ZDEtYTJkOGY5ZjU4ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKFx8+/f+L4FRGkg74AgYcb20B9N2Ry8QZ/P jSLW4v+SRNNkG+qu9ZK6C+8vgGnXulzhLTLKIwsBWCLR16/ZKnOBdUgXTfHPQvKy ZRjR1pfzc+w/pba5Agp28KbflpWEchOZ2X/uQMYQDKbHhInkSJVh2IDkTwDzIirR A/CeHkq4EJAbqDQBkgaVTgi95D2CnSxZ7ONxU9g3MOLj+sVDaG6RWiYuQ5Y/VVi/ fZl9Ha6RnoaGzIBwW3ygANyGnIB+gJb2ecz2nBW6zDVH6dIwOl5uoueB8Hlu6iaR 02yanA1qhOeMYEQWPswJNsCWOeo4rMc+1w/YEx0ej6L84pFWuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMjtoQFe4u/1QloomjUsZZy5ynLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDg5ZGU4NTQtM2JkMC0z ZGFhLTg0MjctY2U0NTc4MDQ2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAS1GpdhvADnEkn/OEWIjfenPeduTBcq82UWXwq4HwSbtrl3Kxun1FQ aaUYSjFwbBxPq4xuoK3qmmr69E4Qc3poQm75U5nbQ22rlHaa3dJPOMGvjc79ebPb CVEWtdtxeZCHuqUzfeJARLGQO72yJv8PVsWClubal0z5tG9Wv9Fj22pFhrqkMSJz zgci6N1zMTfI+NgrX90zQGqvzgAYCX0IzZnqd0cc2sFP4MC+MrCErl8eyPzuY9Ga omP+bsjyPyqNaodCoIASPRfAoQh2T5bdy6zl2ZyEhTUKu/QIk0QUks8QD2SmiFqJ irnNy4BinkStn/VtcyKNWkY6tsdnWx0= -----END CERTIFICATE-----Generated at Sun May 4 11:52:37 2025 by rpki-client