$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa File: 7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa (raw, json) Hash identifier: EPJfTSI36FTFeUQr4U0FBrrDkGzLyFbWLmzmtvC3RcQ= Subject key identifier: B4:E6:DC:EB:D3:CD:F5:18:A4:15:B2:BE:3D:AE:27:A5:BE:84:14:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7850465EE91F3D890109200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:04:65:ee:91:f3:d8:90:10:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a526fc3c-1da9-433d-b105-da60e4558f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:d2:4c:ee:3b:2b:8d:d9:25:4b:f9:e9:91: a9:f8:4e:8e:75:5c:6f:92:1f:4f:5c:ee:29:72:a0: 25:01:3c:3e:df:59:9e:51:d2:bf:3f:24:cd:cc:43: d4:fe:5b:9c:bd:f6:2e:18:fb:25:fe:f1:a6:f6:e9: 1d:20:cc:47:d8:21:c6:74:79:23:33:4a:c9:37:fd: 72:ea:8e:ae:53:6a:98:7b:ee:65:58:9c:b8:5b:ea: bc:c2:6d:81:3d:2e:da:9f:3d:1c:d9:46:44:c4:aa: f2:45:c9:a1:0b:de:7c:17:01:f6:52:80:ed:08:a6: be:82:c9:6b:63:39:9a:be:33:e8:13:c0:23:0b:d8: 74:73:56:c7:5b:6f:0e:ff:39:41:11:c8:07:67:4c: 3c:cd:14:33:ec:7f:d1:f1:b4:a8:89:d1:b7:d1:c1: 86:1a:3f:b4:49:d7:06:6e:3f:0d:ab:cb:bc:09:2e: bd:19:67:25:48:43:d2:88:c5:23:f2:b3:42:72:ad: 02:f3:51:14:1a:95:24:e8:15:47:c8:99:99:97:27: 42:d6:22:46:2e:ee:f2:9a:46:26:19:05:53:31:c3: 50:78:39:67:48:b6:47:fa:c5:be:19:95:c5:51:7e: 6c:47:3f:b2:95:3b:be:44:59:22:0d:4b:6a:66:8f: 54:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:DC:EB:D3:CD:F5:18:A4:15:B2:BE:3D:AE:27:A5:BE:84:14:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:61:70:06:fc:1f:01:83:a7:87:19:4d:63:7e:82:1b:1d:8f: a8:e0:1b:a5:14:66:72:a1:b3:ac:59:13:64:fa:f1:34:34:76: df:57:82:98:27:e9:91:11:8d:85:d2:7c:ee:56:fc:ea:a8:df: 1f:3f:da:7e:5d:be:1c:08:0a:85:ad:12:7a:f3:72:f2:39:d9: 23:3f:59:cd:f8:e6:c5:74:45:73:b0:27:e2:97:91:a8:7a:0f: e2:33:98:0a:aa:ab:33:c5:01:78:52:3c:a2:a7:46:af:56:88: f5:aa:0f:0c:ca:93:12:5d:f3:76:36:03:e8:17:79:5e:f9:2b: 38:32:6c:bb:66:9f:00:22:fc:3f:0c:6d:24:9d:46:9b:f6:c3: 74:29:59:b2:d5:05:5e:d7:be:d2:19:d1:47:f0:80:0c:ab:a9: ee:28:70:b0:31:a3:17:26:83:2f:d6:b1:39:d7:bb:e6:40:8a: 2f:3b:d4:e6:f2:8a:f3:30:5c:51:39:d0:bf:28:19:50:4d:44: db:a5:6f:4f:68:bc:d6:4d:c3:62:8c:fe:52:51:d1:7b:a9:81: 3c:8b:f1:5b:f5:88:10:25:a2:fe:3e:68:53:8a:d2:ce:b2:63: 9b:d3:9a:03:bc:9d:3f:ba:09:b0:5a:d9:c1:49:d1:84:8c:ed: 3e:48:33:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQRl7pHz2JAQkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTUyNmZjM2MtMWRhOS00MzNkLWIxMDUtZGE2MGU0NTU4ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOzSTO47K43ZJUv56ZGp+E6OdVxvkh9PXO4p cqAlATw+31meUdK/PyTNzEPU/lucvfYuGPsl/vGm9ukdIMxH2CHGdHkjM0rJN/1y 6o6uU2qYe+5lWJy4W+q8wm2BPS7anz0c2UZExKryRcmhC958FwH2UoDtCKa+gslr YzmavjPoE8AjC9h0c1bHW28O/zlBEcgHZ0w8zRQz7H/R8bSoidG30cGGGj+0SdcG bj8Nq8u8CS69GWclSEPSiMUj8rNCcq0C81EUGpUk6BVHyJmZlydC1iJGLu7ymkYm GQVTMcNQeDlnSLZH+sW+GZXFUX5sRz+ylTu+RFkiDUtqZo9UvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTm3OvTzfUYpBWyvj2uJ6W+hBQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2Y1NTVhZDEtMDUxYi0z ZTEwLWIzZWMtNzg1ZTZlMzI2ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJhcAb8HwGDp4cZTWN+ghsdj6jgG6UUZnKhs6xZE2T68TQ0dt9Xgpgn 6ZERjYXSfO5W/Oqo3x8/2n5dvhwICoWtEnrzcvI52SM/Wc345sV0RXOwJ+KXkah6 D+IzmAqqqzPFAXhSPKKnRq9WiPWqDwzKkxJd83Y2A+gXeV75KzgybLtmnwAi/D8M bSSdRpv2w3QpWbLVBV7XvtIZ0UfwgAyrqe4ocLAxoxcmgy/WsTnXu+ZAii871Oby ivMwXFE50L8oGVBNRNulb09ovNZNw2KM/lJR0XupgTyL8Vv1iBAlov4+aFOK0s6y Y5vTmgO8nT+6CbBa2cFJ0YSM7T5IM14= -----END CERTIFICATE-----Generated at Sun May 4 11:08:10 2025 by rpki-client