$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ebeef820-32e0-34e8-98d2-02deea166130.roa File: ebeef820-32e0-34e8-98d2-02deea166130.roa (raw, json) Hash identifier: SdESSaFQNpU+bxTybAZ7uwIVWGSEmyfPwZOQWflJDTA= Subject key identifier: E6:6D:77:0F:C0:3B:AB:18:CF:06:87:A9:37:38:E0:9F:8D:13:63:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784D717B1D725148D268000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ebeef820-32e0-34e8-98d2-02deea166130.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d7:17:b1:d7:25:14:8d:26:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9dabe4f6-f51f-4a62-98ad-f5062b67a7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:45:0e:59:27:9b:97:d0:4a:bb:60:24:74: 1c:35:1c:95:89:a2:a2:a6:78:6b:1d:3e:16:6c:29: 63:b0:c2:8d:ab:e4:05:d8:bb:02:de:51:02:6a:7a: 0a:60:d8:99:5e:24:f5:2e:79:05:1e:1b:28:dc:a8: d8:9f:e6:77:92:1a:e5:28:63:ee:c0:c9:a2:8c:81: 6f:5d:ba:89:44:4d:44:bc:d3:77:3d:cb:a6:62:56: ff:bd:cc:f9:90:b0:d3:a8:d8:4d:f3:06:7f:5d:47: 14:53:b2:c3:92:c6:e0:24:66:08:28:31:b8:d8:9b: 55:67:07:26:70:ec:92:f8:71:f6:54:d2:db:18:94: 0f:5c:11:60:1e:47:58:ba:92:fa:bf:5f:23:f9:56: 33:63:2b:de:fb:6d:1b:f9:ad:5b:08:7f:43:2c:f1: a0:37:45:b1:01:be:46:bd:83:8a:bc:97:de:61:5b: 64:c7:53:eb:01:12:46:7c:ca:5b:17:bc:13:58:ef: 7d:a8:45:ea:54:b8:a5:f0:32:70:95:20:53:f4:ad: bd:0c:58:ae:4b:fa:2a:55:05:dc:16:85:3f:39:ce: 07:fc:8c:79:61:e7:5a:52:5c:39:03:1b:9d:60:59: 65:81:3e:55:3e:c2:c9:db:54:27:40:0d:81:e7:e8: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:77:0F:C0:3B:AB:18:CF:06:87:A9:37:38:E0:9F:8D:13:63:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ebeef820-32e0-34e8-98d2-02deea166130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:25:da:bb:6a:98:25:e3:31:c3:ce:89:28:05:a5:ab:d5:8a: c3:b8:e2:e6:29:34:96:0c:a4:e8:71:e6:82:c3:9d:6e:77:fa: dc:a8:5e:9b:81:50:d9:2d:15:7d:f6:8c:7b:08:ba:e4:7e:ea: 02:d5:27:76:ac:4a:43:c4:00:d9:37:aa:1e:95:86:6f:ba:25: d5:c6:8d:d9:e0:1a:f5:28:11:05:9b:cb:99:cb:3a:0e:9c:c2: 85:d2:2b:00:74:e4:90:6c:b9:d1:34:b1:cd:9b:02:13:0c:8e: a6:a0:04:5c:cb:ad:d4:2a:a0:03:4f:e6:3e:b6:56:26:76:15: 0c:ba:9f:b7:a9:2c:67:6b:7d:5e:b4:30:e2:01:2e:96:2d:92: fb:2d:79:08:9a:9a:24:f2:14:9b:a8:b5:9c:82:09:64:b4:65: b4:64:65:75:4b:40:0a:3c:c3:7a:d6:b1:29:6c:ba:d4:cd:de: 0b:21:af:62:78:1f:7e:4a:82:7c:62:e2:27:5e:e6:77:9e:d6: b6:89:e4:58:9b:da:d4:2e:e2:65:06:c4:0e:de:7d:5b:72:9f: 72:45:2d:c9:e7:69:57:92:50:bd:76:a2:42:5e:13:dc:28:84: b0:3b:07:88:b6:25:e4:c3:a6:de:75:98:53:60:ac:09:fc:0f: 2f:f3:6a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNcXsdclFI0mgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWRhYmU0ZjYtZjUxZi00YTYyLTk4YWQtZjUwNjJiNjdhN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdRFDlknm5fQSrtgJHQcNRyViaKipnhrHT4W bCljsMKNq+QF2LsC3lECanoKYNiZXiT1LnkFHhso3KjYn+Z3khrlKGPuwMmijIFv XbqJRE1EvNN3PcumYlb/vcz5kLDTqNhN8wZ/XUcUU7LDksbgJGYIKDG42JtVZwcm cOyS+HH2VNLbGJQPXBFgHkdYupL6v18j+VYzYyve+20b+a1bCH9DLPGgN0WxAb5G vYOKvJfeYVtkx1PrARJGfMpbF7wTWO99qEXqVLil8DJwlSBT9K29DFiuS/oqVQXc FoU/Oc4H/Ix5YedaUlw5AxudYFllgT5VPsLJ21QnQA2B5+hY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZtdw/AO6sYzwaHqTc44J+NE2MJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWJlZWY4MjAtMzJlMC0z NGU4LTk4ZDItMDJkZWVhMTY2MTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsl2rtqmCXjMcPOiSgFpavVisO44uYpNJYMpOhx5oLDnW53+tyoXpuB UNktFX32jHsIuuR+6gLVJ3asSkPEANk3qh6Vhm+6JdXGjdngGvUoEQWby5nLOg6c woXSKwB05JBsudE0sc2bAhMMjqagBFzLrdQqoANP5j62ViZ2FQy6n7epLGdrfV60 MOIBLpYtkvsteQiamiTyFJuotZyCCWS0ZbRkZXVLQAo8w3rWsSlsutTN3gshr2J4 H35Kgnxi4ide5nee1raJ5Fib2tQu4mUGxA7efVtyn3JFLcnnaVeSUL12okJeE9wo hLA7B4i2JeTDpt51mFNgrAn8Dy/zank= -----END CERTIFICATE-----Generated at Sun May 4 11:13:17 2025 by rpki-client