$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa File: 76a5dcab-2690-3314-84c7-093cd93650a1.roa (raw, json) Hash identifier: 7eT6aFIAvJKBUOOHU+KeAXNDcI3AwkNu23tdfta6xBw= Subject key identifier: 06:63:CA:26:F4:C6:12:7A:90:9C:FD:BD:99:B9:35:EA:C4:63:2D:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851745A86D64A306B6C200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:17:45:a8:6d:64:a3:06:b6:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ad4d2a9b-9c19-4e7d-999f-a6cf754f4b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:f8:37:bd:9c:54:47:be:cd:4c:2b:57:85: a8:da:73:d4:01:8f:ca:31:db:fb:47:59:22:25:27: 67:03:95:10:77:9e:e1:ae:e5:15:35:09:6a:17:71: 6e:66:93:e2:85:ed:8b:41:82:36:28:42:86:1b:ab: 4e:83:e4:fb:0e:27:f5:fb:ca:be:d0:08:47:ed:b7: 13:fa:7a:d3:d3:74:46:61:81:0d:62:ab:6c:4b:8e: a1:29:df:c1:46:82:72:f6:07:5a:11:a0:46:46:31: f6:ea:fd:a5:7d:63:7e:fd:9a:25:21:94:0d:dd:57: 3d:49:01:d5:38:cc:a0:5f:f6:c9:65:94:53:11:1e: d0:eb:9c:b9:3a:33:57:b1:5f:c8:05:30:df:32:75: 1e:79:5f:29:d2:66:43:81:f8:8e:00:4a:a1:80:55: ff:82:09:4f:53:e8:ba:a1:c5:79:bb:05:3e:ef:a2: a6:87:39:be:69:3b:b5:c7:46:35:b5:8e:fa:33:ae: 03:db:c7:5a:90:8e:6d:67:5d:42:24:0e:8f:04:ea: 42:ec:08:c6:bf:84:f4:ac:32:d2:cb:64:42:9d:06: 9a:83:80:5c:5b:f5:9e:fb:fd:6f:6d:03:19:a6:35: 57:bb:12:8c:7e:73:c4:86:9e:72:f8:07:da:b2:53: 6b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:63:CA:26:F4:C6:12:7A:90:9C:FD:BD:99:B9:35:EA:C4:63:2D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:46:aa:32:e7:51:c8:a7:06:58:b4:23:e9:74:5b:f3:65:b9: 38:7e:24:eb:ac:8c:c2:04:6c:b2:56:2b:04:ad:df:23:eb:a2: d5:0a:cf:5b:5d:5a:66:56:1d:7f:41:28:67:ee:71:bd:d4:38: 12:05:c2:cc:22:bb:09:79:9f:bd:ac:85:dc:56:a5:44:3b:f2: 8a:bd:91:1d:cc:66:97:38:28:37:ad:f2:7b:d0:f8:da:c4:3c: 36:2e:cf:48:a5:40:32:b3:39:fc:33:5e:bb:19:7f:96:82:a1: 9a:5f:ef:00:ff:a5:d5:0b:1c:70:42:ff:fa:75:2d:9d:ee:c0: e2:a7:0e:f2:ab:4a:22:8b:fb:04:67:27:2d:c7:e6:8a:0b:4c: a1:91:4c:f3:49:13:6b:78:46:cf:60:68:db:29:c4:70:4b:00: c1:54:2d:ff:bb:5f:a5:23:49:0c:76:ce:3a:94:81:61:ee:17: 3d:df:72:e7:c3:e3:ac:b4:51:d4:9f:27:91:4f:bd:1d:a9:cb: 29:27:31:b1:f9:bf:d3:47:e8:d6:c8:f3:fb:d1:6d:10:7c:17: 73:65:56:20:c3:e4:46:21:9f:f5:e1:07:26:41:33:36:63:9c: 8b:1b:d1:dc:e4:53:50:d1:52:b9:26:6e:43:23:69:1f:b0:78: c9:4a:91:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRdFqG1kowa2wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWQ0ZDJhOWItOWMxOS00ZTdkLTk5OWYtYTZjZjc1NGY0YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu534N72cVEe+zUwrV4Wo2nPUAY/KMdv7R1ki JSdnA5UQd57hruUVNQlqF3FuZpPihe2LQYI2KEKGG6tOg+T7Dif1+8q+0AhH7bcT +nrT03RGYYENYqtsS46hKd/BRoJy9gdaEaBGRjH26v2lfWN+/ZolIZQN3Vc9SQHV OMygX/bJZZRTER7Q65y5OjNXsV/IBTDfMnUeeV8p0mZDgfiOAEqhgFX/gglPU+i6 ocV5uwU+76Kmhzm+aTu1x0Y1tY76M64D28dakI5tZ11CJA6PBOpC7AjGv4T0rDLS y2RCnQaag4BcW/We+/1vbQMZpjVXuxKMfnPEhp5y+AfaslNrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZjyib0xhJ6kJz9vZm5NerEYy2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzZhNWRjYWItMjY5MC0z MzE0LTg0YzctMDkzY2Q5MzY1MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVGqjLnUcinBli0I+l0W/NluTh+JOusjMIEbLJWKwSt3yProtUKz1td WmZWHX9BKGfucb3UOBIFwswiuwl5n72shdxWpUQ78oq9kR3MZpc4KDet8nvQ+NrE PDYuz0ilQDKzOfwzXrsZf5aCoZpf7wD/pdULHHBC//p1LZ3uwOKnDvKrSiKL+wRn Jy3H5ooLTKGRTPNJE2t4Rs9gaNspxHBLAMFULf+7X6UjSQx2zjqUgWHuFz3fcufD 46y0UdSfJ5FPvR2pyyknMbH5v9NH6NbI8/vRbRB8F3NlViDD5EYhn/XhByZBMzZj nIsb0dzkU1DRUrkmbkMjaR+weMlKkXo= -----END CERTIFICATE-----Generated at Sun May 4 11:30:38 2025 by rpki-client