$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa File: 0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa (raw, json) Hash identifier: dnzaWPORfVwDzkxQbgv9uRGYi2RGRgLcY17XjlcMo0g= Subject key identifier: 42:AC:9A:76:54:4C:FE:86:E0:93:60:F7:50:85:F7:DF:AF:7D:66:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584548FDFCD295908E5D05670A60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa Signing time: Thu 21 Mar 2024 21:16:02 +0000 ROA not before: Thu 21 Mar 2024 21:16:02 +0000 ROA not after: Wed 19 Jun 2024 21:16:02 +0000 asID: 15169 IP address blocks: 70.32.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fd:fc:d2:95:90:8e:5d:05:67:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:16:02 2024 GMT Not After : Jun 19 21:16:02 2024 GMT Subject: CN=010c723f-7725-4b76-9086-5d99e54ea47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:57:d1:b4:80:03:12:ab:39:c3:4d:d7:92: c4:e8:5f:93:bd:33:f4:f1:40:42:94:a7:a0:fa:d1: 3c:5d:4f:fa:0b:27:1b:4d:2a:f2:4a:81:73:d8:57: 84:e1:a0:c2:b0:cc:03:ae:88:16:4e:51:46:fa:ab: 28:e4:9a:0d:8f:9f:1a:d1:26:8e:73:0d:5f:2a:27: 33:94:51:75:ba:ca:92:d3:a4:df:9e:f7:58:cc:e3: 4a:d1:72:f1:5f:09:b1:a2:e1:3a:81:5e:dc:e4:82: 4f:ef:1e:d0:90:2d:32:5c:49:df:7c:05:6f:a1:a1: 8e:b6:8c:e4:af:a6:92:00:b1:3c:ff:d8:3c:24:b6: 36:89:8f:79:32:7c:df:30:b4:30:c3:31:5f:25:68: a1:b5:b0:e4:3c:8f:a5:cc:26:a3:9f:00:63:31:a0: 4a:70:fc:08:9e:61:90:cc:fa:2b:f9:36:3f:59:63: 25:fc:3d:05:ca:38:b2:23:e0:40:9d:ba:dd:4e:90: 5f:90:29:b1:d7:6b:2e:94:90:10:10:24:0c:6e:19: 35:0c:52:e0:57:92:6f:07:45:69:af:46:ab:70:3c: 28:f8:e2:0f:25:83:bb:e6:4e:29:64:72:38:a9:fa: 6b:07:85:1e:6d:ce:4b:d3:82:60:66:bf:20:3b:3c: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:9A:76:54:4C:FE:86:E0:93:60:F7:50:85:F7:DF:AF:7D:66:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a0:dc:a4:67:31:9c:8d:07:9d:c5:02:19:fb:54:b6:ed:60: ad:1b:19:61:aa:e4:5c:fa:d1:1e:0a:f0:b6:9d:e2:88:c8:f1: c6:01:2d:f0:59:f8:ee:3c:df:95:fc:f3:49:66:d7:27:40:7c: 4b:9d:2d:e0:61:aa:79:4e:8d:fb:07:58:b3:4c:d4:6a:6e:5c: 1d:1b:4f:03:16:ce:fb:6b:8c:e8:64:92:67:e2:70:32:6a:5e: 39:8f:95:9c:8e:00:59:23:ad:fb:6b:ec:17:1c:ba:37:76:c9: 76:96:7e:c5:9c:84:06:00:b2:21:96:13:b1:e1:65:14:60:86: d6:32:4f:bc:c6:c7:6b:3d:ff:e2:dc:b0:c7:3e:8a:a2:01:9a: 8d:0e:ca:73:89:a4:fe:0e:c6:92:f9:5d:81:2e:94:d8:18:a0: 61:90:2b:6c:88:76:85:db:7b:18:17:19:f5:ae:fd:56:f0:a8: 63:40:a2:b9:00:63:bd:88:c6:d4:1a:de:5e:90:dc:fc:9c:d0: c1:a4:14:77:12:26:1c:8a:05:86:3f:53:62:99:e7:77:c0:ca: 6b:84:9e:de:47:3f:0e:f0:0d:51:f6:5b:e3:89:fd:e2:54:be: 24:76:ff:d2:78:db:c0:2b:5e:60:ae:61:65:65:37:ad:e3:19: 36:99:b7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/fzSlZCOXQVnCmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxMTYwMloXDTI0MDYxOTIxMTYwMlowLzEtMCsGA1UEAxMk MDEwYzcyM2YtNzcyNS00Yjc2LTkwODYtNWQ5OWU1NGVhNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqFX0bSAAxKrOcNN15LE6F+TvTP08UBClKeg +tE8XU/6CycbTSrySoFz2FeE4aDCsMwDrogWTlFG+qso5JoNj58a0SaOcw1fKicz lFF1usqS06TfnvdYzONK0XLxXwmxouE6gV7c5IJP7x7QkC0yXEnffAVvoaGOtozk r6aSALE8/9g8JLY2iY95MnzfMLQwwzFfJWihtbDkPI+lzCajnwBjMaBKcPwInmGQ zPor+TY/WWMl/D0FyjiyI+BAnbrdTpBfkCmx12sulJAQECQMbhk1DFLgV5JvB0Vp r0arcDwo+OIPJYO75k4pZHI4qfprB4Uebc5L04JgZr8gOzwmTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKsmnZUTP6G4JNg91CF99+vfWYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY4NGJkNmYtNWQ2NS0z NGQyLTk4ZGQtMGIxZGQ2ZGIyODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqg3KRnMZyNB53FAhn7VLbtYK0bGWGq5Fz60R4K8Lad4ojI8cYBLfBZ +O4835X880lm1ydAfEudLeBhqnlOjfsHWLNM1GpuXB0bTwMWzvtrjOhkkmficDJq XjmPlZyOAFkjrftr7Bccujd2yXaWfsWchAYAsiGWE7HhZRRghtYyT7zGx2s9/+Lc sMc+iqIBmo0OynOJpP4OxpL5XYEulNgYoGGQK2yIdoXbexgXGfWu/VbwqGNAorkA Y72IxtQa3l6Q3Pyc0MGkFHcSJhyKBYY/U2KZ53fAymuEnt5HPw7wDVH2W+OJ/eJU viR2/9J428ArXmCuYWVlN63jGTaZt+k= -----END CERTIFICATE-----Generated at Fri May 17 20:58:15 2024 by rpki-client on console-fra.rpki-client.org