$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa File: 706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa (raw, json) Hash identifier: FWLjvKlMGJGiRMWm2JPvMA4x+mMjl1uUhFMAM6Fg9IY= Subject key identifier: 3E:01:91:B7:89:AD:DB:74:24:4C:4B:22:3E:3F:DB:00:7E:64:04:DC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784F34452E82133E41E1A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f3:44:52:e8:21:33:e4:1e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=352b4ca9-e2e4-4140-8726-59ff820e2e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:80:c2:65:e9:41:84:86:25:f6:bc:5c:73:02: b6:e4:2b:36:76:38:37:a4:c5:ac:2f:c7:0a:88:1f: 4c:08:81:9f:fd:af:61:63:01:e3:c0:29:4a:90:2b: 19:c0:bd:be:3a:76:3b:3e:a9:e8:56:5d:38:1c:8f: 32:07:87:66:75:83:0b:ea:3f:bc:f6:e2:5c:99:ab: 68:9a:2e:e9:fd:ec:bc:d0:a3:93:ca:9c:51:e2:60: df:d7:c6:14:1c:bc:13:ac:15:db:29:4c:4c:d4:36: 47:61:c8:bc:28:56:24:3c:78:4d:d9:a1:25:0e:ed: cd:63:68:6f:59:28:9a:6e:4d:b9:b5:d9:18:a4:8f: 28:0b:37:b9:f3:50:b6:d3:fc:8f:74:6f:df:02:e2: 1b:5e:43:fb:6b:93:a4:2d:ef:cd:d2:7d:48:00:e9: 8b:b8:95:81:e1:1a:30:3c:a1:fa:62:39:77:c7:e3: 07:20:66:ab:84:9b:15:c2:8a:b5:30:72:3e:33:30: 63:dc:59:34:be:f8:d1:13:36:62:d7:34:bf:a2:90: c4:8c:8a:9a:1d:fd:1f:91:1a:a4:72:7d:90:e2:03: 89:4f:8e:54:4e:2e:d9:be:6d:72:91:ee:08:7f:8c: 7c:c8:a0:f8:f6:47:bb:d6:a4:4e:9a:44:35:16:e2: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:01:91:B7:89:AD:DB:74:24:4C:4B:22:3E:3F:DB:00:7E:64:04:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f4:22:4b:18:92:4f:0a:b5:6b:e7:f8:2e:62:f7:70:12:34: a6:ef:b1:9a:c3:e7:d4:db:2b:ec:8e:a7:6b:ec:6f:39:b3:5a: b3:15:cb:c7:d5:ac:6d:1a:95:a6:62:24:29:6c:34:bc:7b:03: 07:8f:9b:50:c1:cb:08:06:88:51:01:de:1d:f3:5b:88:b5:79: 46:8a:88:80:96:d2:f1:bb:63:1b:d9:df:84:7e:29:92:48:ca: ea:a3:69:be:5d:84:c2:ef:1c:3f:cd:98:db:67:cb:0d:63:fe: b2:e0:b8:ec:68:4a:74:c0:15:e9:88:85:fe:1e:0b:da:7d:0d: 7e:94:39:34:78:16:22:03:8b:d3:59:e8:00:a1:34:80:78:af: 60:c7:c8:0e:1a:12:f3:5a:6d:6e:d1:f2:d4:82:e6:95:aa:4d: eb:5f:2f:16:d4:3a:4f:58:a0:ba:1b:3a:c0:8b:5b:1a:fd:25: 3d:b6:ef:47:e7:3a:49:8d:bf:9f:ee:57:49:db:a8:20:0c:fc: b0:a8:e4:53:62:50:ba:c5:d7:cf:96:51:8d:5c:2f:49:fe:f2: 06:9e:ed:8c:7f:21:25:e6:10:5b:c5:2f:d8:29:56:ea:22:89: 96:ba:76:7e:29:a7:e9:cd:c0:c6:a9:12:2c:b3:cf:12:a0:04: e1:fb:b5:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPNEUughM+QeGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzUyYjRjYTktZTJlNC00MTQwLTg3MjYtNTlmZjgyMGUyZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4DCZelBhIYl9rxccwK25Cs2djg3pMWsL8cK iB9MCIGf/a9hYwHjwClKkCsZwL2+OnY7PqnoVl04HI8yB4dmdYML6j+89uJcmato mi7p/ey80KOTypxR4mDf18YUHLwTrBXbKUxM1DZHYci8KFYkPHhN2aElDu3NY2hv WSiabk25tdkYpI8oCze581C20/yPdG/fAuIbXkP7a5OkLe/N0n1IAOmLuJWB4Row PKH6Yjl3x+MHIGarhJsVwoq1MHI+MzBj3Fk0vvjREzZi1zS/opDEjIqaHf0fkRqk cn2Q4gOJT45UTi7Zvm1yke4If4x8yKD49ke71qROmkQ1FuLN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4BkbeJrdt0JExLIj4/2wB+ZATcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA2YTBiY2MtZDA2YS0z NzdlLThlMGEtZjhiNzBiN2M5YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD0IksYkk8KtWvn+C5i93ASNKbvsZrD59TbK+yOp2vsbzmzWrMVy8fV rG0alaZiJClsNLx7AwePm1DBywgGiFEB3h3zW4i1eUaKiICW0vG7YxvZ34R+KZJI yuqjab5dhMLvHD/NmNtnyw1j/rLguOxoSnTAFemIhf4eC9p9DX6UOTR4FiIDi9NZ 6AChNIB4r2DHyA4aEvNabW7R8tSC5pWqTetfLxbUOk9YoLobOsCLWxr9JT2270fn OkmNv5/uV0nbqCAM/LCo5FNiULrF18+WUY1cL0n+8gae7Yx/ISXmEFvFL9gpVuoi iZa6dn4pp+nNwMapEiyzzxKgBOH7teA= -----END CERTIFICATE-----Generated at Sun May 4 16:25:18 2025 by rpki-client