$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa File: dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa (raw, json) Hash identifier: I2owzZ+d61mKp8flJvEIMU66ZylrKP2L2vpJa3NnD0I= Subject key identifier: 3D:AC:5F:B2:89:E2:47:9D:8C:9C:E6:DC:C1:7F:7B:53:4F:B6:9E:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7852F0F174723BBF3C73A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2f:0f:17:47:23:bb:f3:c7:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1611cabb-a473-4235-bd87-6525b3544a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:4b:a7:43:eb:32:c6:d8:75:c2:2f:a6:72: 3a:10:19:95:16:3d:5b:f4:ad:45:28:17:9a:58:8d: 41:45:7e:b5:3e:45:79:e4:51:c4:e0:7f:77:9a:4c: 66:a7:ed:f7:96:97:37:87:c0:e9:cf:0e:5e:1d:7f: c3:b4:9b:a7:2f:1f:a9:c6:33:0d:52:07:43:91:11: 0e:2d:82:3e:24:3c:c0:2e:52:14:8a:50:9b:34:89: c2:3c:18:f3:38:4c:c0:43:1d:fa:d8:54:7d:4e:c0: e5:bd:de:a2:ed:25:e0:df:be:f5:6d:cd:89:81:67: 22:55:20:05:21:48:fb:d4:b3:07:19:3c:24:9f:7f: 55:c5:99:b2:48:32:a5:77:d2:00:c0:97:87:e3:02: 03:22:ec:69:9c:48:56:65:64:da:65:c4:4d:f0:d5: 2f:b9:18:4e:13:d2:8a:c2:e2:f7:4b:90:42:ae:5f: 55:1d:aa:43:cf:da:d9:93:fe:3a:25:0f:c2:8b:0a: 8f:f2:91:97:f7:da:b2:0f:a4:29:1c:c2:7f:4f:7a: c2:1a:23:c8:d6:e7:9d:99:6d:ab:08:6b:1f:be:13: 50:e4:1a:41:34:ca:ef:99:ec:6a:8c:5a:84:de:bc: 0d:35:2f:bb:cf:6b:17:0f:4a:68:51:fe:e3:8f:33: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:5F:B2:89:E2:47:9D:8C:9C:E6:DC:C1:7F:7B:53:4F:B6:9E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3d:e8:af:43:89:74:e3:90:32:c1:44:b8:02:47:7a:f6:6f: bc:d0:2c:dd:4b:48:43:ab:1f:76:f0:92:4b:08:4c:b1:0e:23: 44:33:99:01:b8:ae:4a:6e:cb:f0:65:c7:f2:be:7e:96:f1:d4: 41:b0:bc:0a:ac:ee:4d:f5:28:6b:b2:f4:f7:ec:2b:1c:02:0a: b6:ff:c7:2d:03:97:6f:80:1e:b9:d8:fa:30:dd:3f:48:30:fc: 5d:23:f6:9c:97:9c:e4:8e:63:9e:97:e0:23:36:24:ea:24:01: 20:b1:fc:8e:35:5e:c4:ff:c9:41:73:4c:cf:8d:8a:43:12:b3: aa:3a:0a:8c:be:5e:63:95:4b:f5:f0:9c:c2:74:43:51:49:84: 5c:ac:5b:69:58:e0:d5:84:93:92:d9:90:47:e2:5c:39:50:48: 14:57:d8:81:87:fa:76:9e:5a:1e:9b:02:85:cb:99:e1:5d:a2: a3:09:f3:51:42:75:8d:32:88:85:3e:1b:f6:9e:f6:d6:3e:b5: 49:a3:b2:4e:45:e0:f8:81:9f:b9:91:63:c2:28:ef:6d:4e:a4: 8d:bb:3e:ca:b4:a8:3a:f9:d2:03:d8:35:c7:53:94:80:81:13: 1e:25:1c:63:19:9c:a8:56:27:e4:fc:34:76:eb:f3:dd:1d:c5: cd:5d:0e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS8PF0cju/PHOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTYxMWNhYmItYTQ3My00MjM1LWJkODctNjUyNWIzNTQ0YTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15NLp0PrMsbYdcIvpnI6EBmVFj1b9K1FKBea WI1BRX61PkV55FHE4H93mkxmp+33lpc3h8Dpzw5eHX/DtJunLx+pxjMNUgdDkREO LYI+JDzALlIUilCbNInCPBjzOEzAQx362FR9TsDlvd6i7SXg3771bc2JgWciVSAF IUj71LMHGTwkn39VxZmySDKld9IAwJeH4wIDIuxpnEhWZWTaZcRN8NUvuRhOE9KK wuL3S5BCrl9VHapDz9rZk/46JQ/CiwqP8pGX99qyD6QpHMJ/T3rCGiPI1uedmW2r CGsfvhNQ5BpBNMrvmexqjFqE3rwNNS+7z2sXD0poUf7jjzOCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2sX7KJ4kedjJzm3MF/e1NPtp6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ0ZTU1NTktY2ZmMC0z MzEzLWFmYzgtZmRjZGFmM2Q5ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE96K9DiXTjkDLBRLgCR3r2b7zQLN1LSEOrH3bwkksITLEOI0QzmQG4 rkpuy/Blx/K+fpbx1EGwvAqs7k31KGuy9PfsKxwCCrb/xy0Dl2+AHrnY+jDdP0gw /F0j9pyXnOSOY56X4CM2JOokASCx/I41XsT/yUFzTM+NikMSs6o6Coy+XmOVS/Xw nMJ0Q1FJhFysW2lY4NWEk5LZkEfiXDlQSBRX2IGH+naeWh6bAoXLmeFdoqMJ81FC dY0yiIU+G/ae9tY+tUmjsk5F4PiBn7mRY8Io721OpI27Psq0qDr50gPYNcdTlICB Ex4lHGMZnKhWJ+T8NHbr890dxc1dDr8= -----END CERTIFICATE-----Generated at Sun May 4 10:20:48 2025 by rpki-client