$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa File: e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa (raw, json) Hash identifier: DAtvFxXS5oswgozQwv2UdlyVO/AnD1I9UFtdmO0vIuI= Subject key identifier: 53:31:16:70:69:35:D3:8A:2D:33:CD:3A:7D:AB:94:61:45:31:E0:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784C6323B4CC139357E10E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c6:32:3b:4c:c1:39:35:7e:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=56000423-706c-49f3-a0f9-1bfc0f948b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:fd:63:70:01:c0:80:ff:d2:18:a0:52:03: 89:1e:2f:e3:a6:d4:ec:fc:82:29:47:ef:e9:ab:b4: ed:27:f1:77:60:46:33:1a:91:dc:06:4a:4a:1d:fe: ab:57:ca:21:97:e1:1a:fb:fa:b3:1e:5e:76:36:16: 1e:ba:88:9e:06:ef:d2:56:05:0e:1c:97:3e:fe:9b: 8c:71:3f:32:28:ac:c5:75:ee:cd:83:a1:61:97:30: 68:39:02:a6:e2:16:36:1e:f1:5e:83:d2:e2:cb:9e: bd:2f:cf:1e:dd:3b:cb:9e:57:73:40:b2:a9:35:8a: e6:e2:5c:10:6a:41:20:35:67:97:33:e7:35:ce:33: cb:94:3c:4b:66:35:74:d1:ae:e0:9e:81:58:bf:ac: 9c:59:00:29:41:a4:17:71:3c:15:7e:6d:91:da:b9: c7:fa:b3:ff:f7:41:f0:ab:a8:fc:d2:2b:2f:da:af: bb:85:6c:6d:93:9c:56:d5:f2:6c:09:b4:d2:97:f5: 89:16:de:0c:29:51:02:24:1f:c8:3b:8b:5f:18:16: 5b:cd:5c:32:9c:24:23:b3:8e:49:40:67:a0:32:17: 74:05:54:e9:7b:12:6e:27:37:4a:63:7b:2a:e1:c6: 4a:68:b4:99:5f:f3:ce:7e:02:f8:7b:4d:53:3b:62: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:31:16:70:69:35:D3:8A:2D:33:CD:3A:7D:AB:94:61:45:31:E0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:45:49:06:c7:5d:a5:d0:c2:d9:ad:c9:93:d8:70:4f:20:0e: ed:0e:b8:fc:1c:e8:53:ed:c5:6e:6c:ee:cb:df:51:3b:7f:0f: 26:47:11:e4:1c:18:09:a0:a4:bf:e8:63:66:5e:52:bf:9a:03: f3:2a:7c:1a:72:30:88:18:77:28:c9:4a:d7:c1:8a:44:01:32: ed:e9:68:15:22:56:67:1c:9c:ce:48:f5:74:f1:11:a3:5c:f7: 95:88:29:68:b5:f6:33:37:ad:57:ac:84:66:b0:6f:cd:39:42: 16:a8:d3:3e:90:9c:75:84:8f:73:95:5f:2f:f9:69:74:46:65: 47:c8:aa:4f:03:f7:0d:8d:e0:28:d4:ca:79:93:e6:36:5e:d7: d8:c5:4d:49:73:73:1a:5b:6a:c7:fe:6a:ca:c1:2b:e6:00:4a: fb:d3:29:9c:9e:3b:5d:82:3e:9f:59:3f:ee:07:5f:b5:f3:ed: 5c:bb:92:b3:c9:40:46:e6:18:75:54:c6:bd:0a:1f:41:45:13: e5:db:5b:bf:88:b2:34:4f:67:d9:5e:ac:0d:f9:2a:4d:3e:e5: fd:97:da:0f:05:5e:b4:d0:68:90:a2:a8:0a:1d:5c:81:8e:b5: 21:27:5b:67:ec:b7:c8:05:9f:12:ec:6b:f5:89:82:e3:b0:b1: 0b:de:10:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMYyO0zBOTV+EOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTYwMDA0MjMtNzA2Yy00OWYzLWEwZjktMWJmYzBmOTQ4YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3n9Y3ABwID/0higUgOJHi/jptTs/IIpR+/p q7TtJ/F3YEYzGpHcBkpKHf6rV8ohl+Ea+/qzHl52NhYeuoieBu/SVgUOHJc+/puM cT8yKKzFde7Ng6FhlzBoOQKm4hY2HvFeg9Liy569L88e3TvLnldzQLKpNYrm4lwQ akEgNWeXM+c1zjPLlDxLZjV00a7gnoFYv6ycWQApQaQXcTwVfm2R2rnH+rP/90Hw q6j80isv2q+7hWxtk5xW1fJsCbTSl/WJFt4MKVECJB/IO4tfGBZbzVwynCQjs45J QGegMhd0BVTpexJuJzdKY3sq4cZKaLSZX/POfgL4e01TO2K3MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMxFnBpNdOKLTPNOn2rlGFFMeCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTc2YWMzYTQtOGNlZC0z MzRjLWIyOWUtNmI3OTNiNWYyNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANFSQbHXaXQwtmtyZPYcE8gDu0OuPwc6FPtxW5s7svfUTt/DyZHEeQc GAmgpL/oY2ZeUr+aA/MqfBpyMIgYdyjJStfBikQBMu3paBUiVmccnM5I9XTxEaNc 95WIKWi19jM3rVeshGawb805Qhao0z6QnHWEj3OVXy/5aXRGZUfIqk8D9w2N4CjU ynmT5jZe19jFTUlzcxpbasf+asrBK+YASvvTKZyeO12CPp9ZP+4HX7Xz7Vy7krPJ QEbmGHVUxr0KH0FFE+XbW7+IsjRPZ9lerA35Kk0+5f2X2g8FXrTQaJCiqAodXIGO tSEnW2fst8gFnxLsa/WJguOwsQveEMM= -----END CERTIFICATE-----Generated at Sun May 4 12:16:21 2025 by rpki-client