$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa File: 026b8b08-d03f-336f-8c9f-25cac406fa0b.roa (raw, json) Hash identifier: qNlO82M+M3BM19ptfglQMJw5G8MrFCBZGB5BUZFEzMc= Subject key identifier: E9:F6:D4:9E:D6:08:42:9A:E0:F5:69:42:26:22:3B:2A:7D:78:A6:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845490F0AB17341314438AF8700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa Signing time: Thu 21 Mar 2024 21:50:23 +0000 ROA not before: Thu 21 Mar 2024 21:50:23 +0000 ROA not after: Wed 19 Jun 2024 21:50:23 +0000 asID: 396982 IP address blocks: 70.32.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0f:0a:b1:73:41:31:44:38:af:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:50:23 2024 GMT Not After : Jun 19 21:50:23 2024 GMT Subject: CN=02f09ca8-12e0-4314-823e-f7b2d75bd74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a3:2c:fd:44:f4:51:41:1b:bd:c2:10:f7:35: f5:3f:8a:a8:9d:83:2c:e0:d3:f2:a4:57:6c:07:d1: 22:9c:26:f9:6a:9c:73:1d:b3:7f:78:0f:c6:89:5c: 83:ad:f9:0d:04:11:24:61:df:4a:f6:df:60:e0:9e: 27:55:7e:73:0f:8c:80:89:9e:2b:19:8e:23:34:ff: 6d:c3:90:3c:59:19:da:db:47:78:e1:1a:c5:53:b3: fe:da:07:ea:33:82:14:86:46:ac:e5:d7:a8:be:1d: 8e:c3:43:18:5f:a0:d2:14:02:2d:4d:1f:ce:88:d2: 35:b4:1d:39:98:63:bc:18:af:92:6b:10:4b:6c:66: c2:51:cb:70:b6:79:8a:98:be:f2:3f:ae:95:5c:df: a1:50:fd:f7:2f:d0:c9:9e:58:3f:50:2c:34:91:27: c8:9b:82:7d:18:59:6d:96:3b:de:8b:db:9a:de:ac: 66:3b:d5:2d:81:53:ab:fe:99:cf:e5:18:59:c2:64: 06:d7:53:a1:0d:58:e7:13:76:d0:44:21:f6:f0:78: 71:00:fb:7a:13:df:18:64:d1:0b:a3:93:2e:72:f7: 3b:b5:d3:89:87:ed:1d:8e:6f:74:9d:af:72:ff:45: 27:1c:8f:9d:ab:9f:79:93:9e:f7:49:0f:63:a4:95: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F6:D4:9E:D6:08:42:9A:E0:F5:69:42:26:22:3B:2A:7D:78:A6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fd:ec:de:51:ca:54:cf:e9:83:b4:75:0a:f6:27:59:f2:cc: 9d:0a:96:d2:3e:5a:85:68:fb:07:2b:55:e3:01:22:b2:50:c1: 6f:3e:80:78:17:bd:c6:c0:e1:48:84:d2:9f:0a:18:72:81:fe: 52:ce:2d:90:aa:6b:9b:30:14:ba:91:53:f8:cc:f2:ef:9b:5e: 4a:06:81:31:c7:69:6f:59:4a:37:cd:c2:f9:6b:9c:2f:6a:64: a0:8f:0a:79:df:6f:58:f1:11:ef:88:bd:b7:24:f0:5e:53:1b: 8a:e5:50:8d:e6:8c:92:e3:59:d8:81:c9:f1:d7:61:6a:94:44: c9:9c:1e:75:a4:ad:0e:5b:ea:22:3d:0a:7e:67:a7:69:f1:4f: 2f:6e:ba:89:e2:2c:9d:f9:80:7f:bf:30:cc:f5:62:3b:bc:c2: 51:d0:f6:d1:39:84:77:77:66:5f:c2:cf:c4:f3:eb:36:fe:99: 44:83:b7:28:fc:02:2b:11:c9:5c:46:83:93:99:4e:0d:df:3f: 4c:d3:55:4e:58:53:09:f5:90:1a:f2:fb:25:af:ab:38:ed:39: 2a:08:57:1e:42:29:6f:a5:1f:03:82:65:66:5c:a4:df:02:ec: 68:8f:da:59:e7:8e:ed:51:46:5b:a7:ad:fa:c8:0f:31:24:25: 74:23:e8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDwqxc0ExRDivhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxNTAyM1oXDTI0MDYxOTIxNTAyM1owLzEtMCsGA1UEAxMk MDJmMDljYTgtMTJlMC00MzE0LTgyM2UtZjdiMmQ3NWJkNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqMs/UT0UUEbvcIQ9zX1P4qonYMs4NPypFds B9EinCb5apxzHbN/eA/GiVyDrfkNBBEkYd9K9t9g4J4nVX5zD4yAiZ4rGY4jNP9t w5A8WRna20d44RrFU7P+2gfqM4IUhkas5deovh2Ow0MYX6DSFAItTR/OiNI1tB05 mGO8GK+SaxBLbGbCUctwtnmKmL7yP66VXN+hUP33L9DJnlg/UCw0kSfIm4J9GFlt ljvei9ua3qxmO9UtgVOr/pnP5RhZwmQG11OhDVjnE3bQRCH28HhxAPt6E98YZNEL o5Mucvc7tdOJh+0djm90na9y/0UnHI+dq595k573SQ9jpJX13wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn21J7WCEKa4PVpQiYiOyp9eKY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI2YjhiMDgtZDAzZi0z MzZmLThjOWYtMjVjYWM0MDZmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf97N5RylTP6YO0dQr2J1nyzJ0KltI+WoVo+wcrVeMBIrJQwW8+gHgX vcbA4UiE0p8KGHKB/lLOLZCqa5swFLqRU/jM8u+bXkoGgTHHaW9ZSjfNwvlrnC9q ZKCPCnnfb1jxEe+Ivbck8F5TG4rlUI3mjJLjWdiByfHXYWqURMmcHnWkrQ5b6iI9 Cn5np2nxTy9uuoniLJ35gH+/MMz1Yju8wlHQ9tE5hHd3Zl/Cz8Tz6zb+mUSDtyj8 AisRyVxGg5OZTg3fP0zTVU5YUwn1kBry+yWvqzjtOSoIVx5CKW+lHwOCZWZcpN8C 7GiP2lnnju1RRlunrfrIDzEkJXQj6D0= -----END CERTIFICATE-----Generated at Mon May 6 02:01:43 2024 by rpki-client on console-fra.rpki-client.org