$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa File: 33822243-69e4-3d54-98ee-ca1bf1ad9525.roa (raw, json) Hash identifier: 7ozUUTg/gssN9QBnRLUUdewEbbghtmIcHpKKbo/H7Lk= Subject key identifier: 5B:A7:81:94:56:5E:8B:8B:F9:32:AA:1D:DB:BC:65:2D:77:EF:30:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BBA3FD541B577585F8E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 19484 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ba:3f:d5:41:b5:77:58:5f:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=bf7e2a6b-6b8d-408b-8a73-a0cac33839d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:08:a3:cf:5b:ca:3f:4e:64:ab:56:65:e3: 97:fe:f2:83:74:87:48:e3:eb:d1:a0:db:f7:37:ab: 96:a1:14:99:ec:f8:46:b3:05:1b:1f:46:16:7a:86: 48:7e:85:6c:b5:8c:0f:f5:b9:62:80:b0:ce:16:91: a9:22:da:2a:e6:67:c0:e4:90:9f:6f:b0:57:2e:49: 32:aa:49:d9:ac:90:cf:a5:19:3d:7e:b9:24:62:39: 04:9c:6b:33:30:d6:15:c6:15:4a:97:18:61:33:5e: 8f:36:e1:60:99:d1:a8:aa:3b:2b:59:80:b6:40:ad: f1:af:21:56:56:ad:ce:1b:d0:a0:02:d2:50:2f:4c: 0f:2c:b8:6e:75:86:bf:c2:50:96:0c:43:4e:65:15: d6:a4:99:79:fc:5b:ea:e7:11:23:da:79:84:27:27: 32:9a:b8:c6:34:2a:4e:cb:9a:86:b0:7e:c5:0f:7b: 0f:98:db:69:79:d3:c5:c9:3a:4a:30:c1:3b:a0:7e: 97:22:82:4b:09:76:43:7c:5c:78:e6:b9:45:65:18: 4e:fe:7c:2d:3a:ad:3f:08:90:57:37:1e:03:c7:bd: 0d:54:0a:74:5b:0a:0d:8e:c0:48:37:c1:34:35:b2: e9:e6:df:74:76:1f:6f:59:51:11:52:c0:15:b1:b9: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A7:81:94:56:5E:8B:8B:F9:32:AA:1D:DB:BC:65:2D:77:EF:30:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:88:41:67:61:1c:a0:ae:66:45:d1:7d:14:e7:e6:58:14:6e: 19:f6:7c:c5:3d:e5:05:a7:18:33:0f:74:b4:b3:79:06:57:ee: 36:a6:3f:bc:c2:f0:82:dd:f1:db:1d:17:cb:2a:25:f6:f9:24: 95:28:a2:9b:3c:f1:f4:b6:8e:a7:c0:5d:37:bb:3a:ca:5d:10: 99:99:f7:a0:47:64:4c:ce:69:d4:d4:72:ec:7b:c3:98:49:d6: 65:08:3b:55:99:d9:55:81:9d:3f:85:83:23:32:37:16:75:f0: 23:3f:86:6e:7b:a8:f4:99:e7:c0:dc:98:5f:f0:90:a2:15:f2: e9:c9:5f:ff:1d:31:2d:4d:36:af:96:9a:27:a0:bb:5e:aa:7d: 7a:07:96:c1:66:7f:09:08:0a:9b:a4:d7:89:c5:87:81:90:17: 2f:ef:d1:1f:d1:e1:ee:3b:72:3c:a4:20:96:ea:ec:b5:37:3f: 33:39:f3:5a:ab:cc:21:13:ea:53:b5:8a:72:41:9e:54:46:52: 2e:1b:e1:14:07:de:64:91:ac:0a:f8:9e:7a:09:31:7f:91:42: 98:3f:2e:d9:33:52:4a:c6:70:09:7f:65:96:20:88:07:9b:75: cf:07:01:b9:6a:08:16:6d:ac:35:e6:cc:5a:3d:09:b6:31:02: 34:cc:35:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7o/1UG1d1hfjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YmY3ZTJhNmItNmI4ZC00MDhiLThhNzMtYTBjYWMzMzgzOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n0Io89byj9OZKtWZeOX/vKDdIdI4+vRoNv3 N6uWoRSZ7PhGswUbH0YWeoZIfoVstYwP9bligLDOFpGpItoq5mfA5JCfb7BXLkky qknZrJDPpRk9frkkYjkEnGszMNYVxhVKlxhhM16PNuFgmdGoqjsrWYC2QK3xryFW Vq3OG9CgAtJQL0wPLLhudYa/wlCWDENOZRXWpJl5/Fvq5xEj2nmEJycymrjGNCpO y5qGsH7FD3sPmNtpedPFyTpKMME7oH6XIoJLCXZDfFx45rlFZRhO/nwtOq0/CJBX Nx4Dx70NVAp0WwoNjsBIN8E0NbLp5t90dh9vWVERUsAVsbmtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFungZRWXouL+TKqHdu8ZS137zBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzM4MjIyNDMtNjllNC0z ZDU0LTk4ZWUtY2ExYmYxYWQ5NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCIQWdhHKCuZkXRfRTn5lgUbhn2fMU95QWnGDMPdLSzeQZX7jamP7zC 8ILd8dsdF8sqJfb5JJUoops88fS2jqfAXTe7OspdEJmZ96BHZEzOadTUcux7w5hJ 1mUIO1WZ2VWBnT+FgyMyNxZ18CM/hm57qPSZ58DcmF/wkKIV8unJX/8dMS1NNq+W miegu16qfXoHlsFmfwkICpuk14nFh4GQFy/v0R/R4e47cjykIJbq7LU3PzM581qr zCET6lO1inJBnlRGUi4b4RQH3mSRrAr4nnoJMX+RQpg/LtkzUkrGcAl/ZZYgiAeb dc8HAblqCBZtrDXmzFo9CbYxAjTMNec= -----END CERTIFICATE-----Generated at Fri Apr 4 10:19:02 2025 by rpki-client