$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa File: 3821e3dc-b2a8-348a-8401-999696cbb28c.roa (raw, json) Hash identifier: 4NX4r1v0EwrlI0hdCkdBk0ceQDV7z4WvD/zFaFfY3XA= Subject key identifier: 7C:11:CF:B8:84:DF:6F:A3:C9:34:A2:96:55:F7:8D:07:44:A9:C5:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784DAD0261225EA9E82D080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:da:d0:26:12:25:ea:9e:82:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=caf40bf7-3091-4c6b-aa09-9df236f331c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:9c:5b:a7:8a:0f:a5:5c:41:72:56:f9:ff: 41:dd:6f:b3:6b:d1:f4:a0:28:23:5d:e6:11:9f:27: 9e:85:16:5e:08:87:87:d6:c4:7b:b2:11:54:99:ab: 1f:81:ad:c5:0e:4c:ab:ef:b3:84:b8:4a:44:db:7e: 25:23:2e:e1:ec:cc:ea:40:a0:eb:c0:a8:03:ec:bc: f7:1a:da:d4:7a:09:87:59:27:64:e5:94:70:db:c1: b4:04:16:fa:b4:90:6a:2f:96:d1:f7:28:7d:fe:af: 52:54:96:ef:e1:68:10:ac:5e:bb:21:76:47:5f:c0: f6:ce:37:60:8e:e3:a7:38:ff:08:a4:f9:72:d8:34: fa:a4:55:8e:39:da:ef:dd:dc:38:12:2c:57:06:97: 02:0b:65:a4:08:12:a7:6d:5e:64:63:ad:05:99:c0: 71:9c:e9:21:5c:93:85:29:f9:6d:54:1f:0d:27:e8: 88:fd:0e:89:a0:d0:54:b4:f0:c4:fa:ac:5a:e4:09: 4f:2b:89:1a:43:34:78:9c:b2:c7:d8:ab:be:97:09: 65:c7:26:f4:46:ae:cb:64:80:04:71:78:52:4d:c7: cc:d6:eb:d9:a9:07:46:67:a5:31:aa:36:2e:a2:8b: 93:02:e2:f8:a7:ae:84:db:a8:88:04:8f:cb:e4:f8: 74:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:11:CF:B8:84:DF:6F:A3:C9:34:A2:96:55:F7:8D:07:44:A9:C5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:bd:60:8c:a5:50:47:66:ef:c3:9f:2d:89:8e:1c:94:bf:2b: 3a:d6:91:c2:ed:19:56:2b:92:d1:56:e3:b4:cd:2d:15:ee:54: 0e:4d:4d:8e:c3:e7:07:ad:37:f5:4d:b7:2f:52:9f:2d:52:0f: 35:cd:24:ca:2d:d8:bd:85:50:64:b3:f0:a0:6e:a8:95:ae:16: e3:a5:84:8e:22:02:bb:fa:ff:f6:30:a7:d8:6a:18:8c:bf:54: 01:0c:4c:1a:b0:71:53:39:98:46:23:dd:8c:7e:9a:c0:5b:8f: 4a:11:09:79:a9:75:52:7f:5f:72:44:54:f9:98:f0:4c:ae:81: 22:83:8b:8b:95:76:4a:40:9b:44:af:c1:10:7a:6c:1a:59:6b: 83:80:7a:73:14:68:38:1f:ee:78:99:23:c3:e9:db:eb:8e:63: e8:90:88:b6:9c:f5:02:0a:38:4c:a9:4d:84:e2:4a:9a:3e:fb: db:bc:d9:cf:0d:62:f2:11:1c:36:9c:ba:e6:5e:b6:bc:8c:1d: ac:6d:59:4a:8f:6f:c6:98:de:53:f9:d9:aa:4d:35:81:a4:02: 8a:dd:cd:75:8b:15:b1:8b:cf:ab:a9:84:7c:45:30:f4:00:0e: 43:55:46:16:ea:32:99:02:76:38:6b:82:f2:01:aa:1c:e1:bc: 18:54:68:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNrQJhIl6p6C0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2FmNDBiZjctMzA5MS00YzZiLWFhMDktOWRmMjM2ZjMzMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWOcW6eKD6VcQXJW+f9B3W+za9H0oCgjXeYR nyeehRZeCIeH1sR7shFUmasfga3FDkyr77OEuEpE234lIy7h7MzqQKDrwKgD7Lz3 GtrUegmHWSdk5ZRw28G0BBb6tJBqL5bR9yh9/q9SVJbv4WgQrF67IXZHX8D2zjdg juOnOP8IpPly2DT6pFWOOdrv3dw4EixXBpcCC2WkCBKnbV5kY60FmcBxnOkhXJOF KfltVB8NJ+iI/Q6JoNBUtPDE+qxa5AlPK4kaQzR4nLLH2Ku+lwllxyb0Rq7LZIAE cXhSTcfM1uvZqQdGZ6UxqjYuoouTAuL4p66E26iIBI/L5Ph0MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwRz7iE32+jyTSillX3jQdEqcUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzgyMWUzZGMtYjJhOC0z NDhhLTg0MDEtOTk5Njk2Y2JiMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE29YIylUEdm78OfLYmOHJS/KzrWkcLtGVYrktFW47TNLRXuVA5NTY7D 5wetN/VNty9Sny1SDzXNJMot2L2FUGSz8KBuqJWuFuOlhI4iArv6//Ywp9hqGIy/ VAEMTBqwcVM5mEYj3Yx+msBbj0oRCXmpdVJ/X3JEVPmY8EyugSKDi4uVdkpAm0Sv wRB6bBpZa4OAenMUaDgf7niZI8Pp2+uOY+iQiLac9QIKOEypTYTiSpo++9u82c8N YvIRHDacuuZetryMHaxtWUqPb8aY3lP52apNNYGkAordzXWLFbGLz6uphHxFMPQA DkNVRhbqMpkCdjhrgvIBqhzhvBhUaO0= -----END CERTIFICATE-----Generated at Sun May 4 11:08:13 2025 by rpki-client