$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa File: 694ba017-8f45-370a-b378-b1d875587774.roa (raw, json) Hash identifier: 4PZ64rduDOoFkrdmSvEGpUnitt1BkGYxMOuLM8xorQA= Subject key identifier: DA:A1:A3:0D:4F:06:A2:CB:EE:80:90:5A:F5:F7:B0:CA:9D:C2:4E:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851EBFDA4BA92BFBCDC980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1e:bf:da:4b:a9:2b:fb:cd:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a970dd55-29a8-46f2-b29d-6d14878c1af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:6b:f6:39:92:ac:12:80:64:f7:c6:21:20: c3:4b:dc:e3:05:dd:1f:ba:9f:74:1f:c0:fe:2c:44: 2b:a6:87:1d:77:15:7d:34:76:0d:b9:a5:ae:e0:3f: 93:13:d1:2b:54:4a:f5:38:46:57:83:a5:b3:35:8b: 95:49:af:26:79:a1:e8:a2:cc:0c:4d:06:db:64:af: 8f:c2:4a:39:ff:35:66:52:fd:44:99:9a:40:7f:20: 41:a0:cf:20:82:92:91:de:73:7e:8c:dc:b3:0a:77: 00:2e:d5:25:2a:c8:48:5e:af:02:ac:80:17:01:b6: 89:06:b8:bf:98:5c:8b:bc:c2:36:4c:09:57:3b:42: 18:c9:04:c8:fd:25:59:e3:a8:89:bd:04:95:28:11: 84:81:ea:07:8e:e5:85:b3:b0:c2:fe:42:54:5f:e5: 38:37:af:01:96:65:fb:08:b3:93:ce:23:c8:1a:1d: 71:39:1f:1d:7c:2c:c8:f3:84:af:d4:10:2b:0f:db: 1e:ac:9a:4b:c4:5e:5d:ae:0b:88:3c:21:f8:7e:3c: 31:49:59:44:56:f7:e6:2a:58:29:6e:40:17:10:ab: 7e:20:4b:67:7f:5c:c5:93:0c:07:e6:49:75:9f:f3: d5:34:24:39:af:0f:9f:90:9b:1f:57:62:e7:08:d0: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A1:A3:0D:4F:06:A2:CB:EE:80:90:5A:F5:F7:B0:CA:9D:C2:4E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8a:6b:7a:16:da:d8:fe:10:12:d3:49:98:cd:9b:6a:e4:45: eb:b6:0f:33:69:54:2c:84:7a:09:de:58:19:a6:1e:b4:33:74: a2:ef:af:95:be:f5:84:ba:cb:67:ca:6e:d1:cd:0b:43:a0:49: fa:c3:a2:e7:92:65:bc:77:83:25:bf:a2:47:76:48:26:84:a3: cd:f5:1b:cb:ea:89:11:0b:98:94:dd:12:28:54:22:bd:37:ab: 08:df:0b:70:14:8c:52:d1:2b:9c:85:eb:c1:04:d1:d6:33:d2: 37:18:d0:3a:31:4f:83:03:ea:21:fb:12:05:2d:d0:5f:f5:2b: 9b:c7:8a:63:be:37:ee:0d:eb:04:f8:b7:e4:33:0f:bb:83:d3: e7:58:6a:fe:c0:5e:11:e1:46:33:f7:69:f3:1f:a6:9e:7f:53: 02:0a:c6:f4:b7:f4:47:0d:29:70:65:42:c9:76:68:88:9c:c0: 71:85:e7:0c:21:e8:be:0e:32:5f:49:39:e9:68:0c:61:27:5f: ab:6c:01:97:a7:06:b2:9f:25:20:14:41:5f:c9:54:2b:44:7e: 64:df:8d:ca:fb:53:f4:57:ef:e7:43:2b:2e:9a:77:20:62:a8: d0:03:21:d8:3b:73:10:aa:5c:74:78:b0:9a:41:ef:cf:5c:3a: 4d:c5:9d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR6/2kupK/vNyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTk3MGRkNTUtMjlhOC00NmYyLWIyOWQtNmQxNDg3OGMxYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzhr9jmSrBKAZPfGISDDS9zjBd0fup90H8D+ LEQrpocddxV9NHYNuaWu4D+TE9ErVEr1OEZXg6WzNYuVSa8meaHooswMTQbbZK+P wko5/zVmUv1EmZpAfyBBoM8ggpKR3nN+jNyzCncALtUlKshIXq8CrIAXAbaJBri/ mFyLvMI2TAlXO0IYyQTI/SVZ46iJvQSVKBGEgeoHjuWFs7DC/kJUX+U4N68BlmX7 CLOTziPIGh1xOR8dfCzI84Sv1BArD9serJpLxF5drguIPCH4fjwxSVlEVvfmKlgp bkAXEKt+IEtnf1zFkwwH5kl1n/PVNCQ5rw+fkJsfV2LnCNCSbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqhow1PBqLL7oCQWvX3sMqdwk5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjk0YmEwMTctOGY0NS0z NzBhLWIzNzgtYjFkODc1NTg3Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmKa3oW2tj+EBLTSZjNm2rkReu2DzNpVCyEegneWBmmHrQzdKLvr5W+ 9YS6y2fKbtHNC0OgSfrDoueSZbx3gyW/okd2SCaEo831G8vqiRELmJTdEihUIr03 qwjfC3AUjFLRK5yF68EE0dYz0jcY0DoxT4MD6iH7EgUt0F/1K5vHimO+N+4N6wT4 t+QzD7uD0+dYav7AXhHhRjP3afMfpp5/UwIKxvS39EcNKXBlQsl2aIicwHGF5wwh 6L4OMl9JOeloDGEnX6tsAZenBrKfJSAUQV/JVCtEfmTfjcr7U/RX7+dDKy6adyBi qNADIdg7cxCqXHR4sJpB789cOk3FnXQ= -----END CERTIFICATE-----Generated at Sun May 4 11:27:43 2025 by rpki-client