$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa File: 706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa (raw, json) Hash identifier: G1wv9S65sin9I60D3RnMRaejbNvhDc90r/OHuQJBjJ0= Subject key identifier: 5D:7A:3D:0B:44:D2:BD:11:1A:1E:C2:F3:C2:06:A8:B8:CE:0C:90:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BD5DDE1DA6151F0634D40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 395973 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d5:dd:e1:da:61:51:f0:63:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a25de0a2-a6e6-4203-a016-d11b7c1f1306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:c6:14:2f:9e:5e:a1:01:f0:c5:2a:2b:ed: 84:f1:8e:72:88:28:bc:68:25:74:7e:f1:93:8a:c2: 0e:fe:76:87:d3:f1:ac:b4:92:a0:7d:10:8f:81:39: 43:e0:e1:c8:74:7c:35:2e:5a:8b:ca:10:43:41:bf: 21:9c:34:c4:3d:97:7e:8d:a1:5d:3c:67:8e:41:90: b1:0d:5a:9e:bd:f2:15:43:91:17:97:df:ab:36:b8: b9:7e:a8:8f:fb:3c:6f:f0:b5:38:b5:44:8b:2a:a9: f8:7d:e4:81:95:ba:ed:bc:69:a1:28:a2:ed:59:3e: 38:99:83:44:0d:e2:09:98:f2:75:51:9f:31:1f:0f: d5:29:e3:a4:82:80:5e:5b:40:06:4d:8b:f0:b6:dd: 25:d6:28:4c:74:4d:f7:9e:96:5a:ee:c7:69:42:9e: d8:37:8a:cc:4b:be:85:05:f3:b1:24:45:0f:06:a3: cb:c4:26:d9:4e:6a:9b:a7:59:2b:9d:52:98:41:35: c8:75:e7:a3:e6:16:59:6f:9f:a6:13:c0:23:57:10: 61:56:8c:96:ee:9a:fa:e3:39:db:48:86:94:5f:e7: db:3b:7b:cd:ea:19:89:ad:b9:58:94:02:d0:0f:0a: 56:71:b8:d8:14:c0:0c:fa:81:f1:d5:91:5f:d5:1d: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7A:3D:0B:44:D2:BD:11:1A:1E:C2:F3:C2:06:A8:B8:CE:0C:90:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/706a0bcc-d06a-377e-8e0a-f8b70b7c9b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:38:34:3d:92:15:60:cc:1b:4d:5e:da:4a:85:ed:46:10:cf: d5:51:8d:27:46:a3:3c:cf:6e:8f:57:4d:d0:43:3d:00:3b:02: 5e:01:17:0c:53:63:f8:62:57:c6:47:53:a7:2b:57:cc:80:3b: d6:3b:f5:f8:c2:2c:ea:a0:64:5c:25:f4:a4:75:70:26:c2:06: 56:d1:77:07:62:4c:42:05:1c:07:20:49:eb:e3:34:e3:66:c7: 9a:7b:ac:1a:d2:4f:d6:e9:c2:ac:29:a6:fc:08:b9:68:b8:0b: 13:8a:d1:82:ea:5c:37:bb:b6:46:11:62:15:0c:41:e4:e9:a8: 09:49:59:b1:4a:b6:28:0f:5e:01:b8:35:d0:31:92:24:9f:82: 74:d5:0f:7b:73:cb:61:0c:d8:e1:cf:45:81:84:3c:d1:cc:40: 53:d8:e8:21:42:2b:99:b8:74:0f:4c:97:27:aa:fe:80:f3:09: f7:4e:b8:e9:63:35:0d:9a:ef:97:3a:5b:8e:04:33:ff:8e:ea: aa:b4:33:ff:75:8e:2a:90:f0:d1:73:12:b3:b5:50:72:2f:35: 70:58:bb:d9:70:d9:8c:5d:7b:3f:93:5c:aa:56:ef:c4:d1:0e: 0f:00:43:af:4c:91:c7:15:95:06:32:4d:12:6c:bb:90:8d:1e: 77:9c:a3:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9Xd4dphUfBjTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTI1ZGUwYTItYTZlNi00MjAzLWEwMTYtZDExYjdjMWYxMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnbGFC+eXqEB8MUqK+2E8Y5yiCi8aCV0fvGT isIO/naH0/GstJKgfRCPgTlD4OHIdHw1LlqLyhBDQb8hnDTEPZd+jaFdPGeOQZCx DVqevfIVQ5EXl9+rNri5fqiP+zxv8LU4tUSLKqn4feSBlbrtvGmhKKLtWT44mYNE DeIJmPJ1UZ8xHw/VKeOkgoBeW0AGTYvwtt0l1ihMdE33npZa7sdpQp7YN4rMS76F BfOxJEUPBqPLxCbZTmqbp1krnVKYQTXIdeej5hZZb5+mE8AjVxBhVoyW7pr64znb SIaUX+fbO3vN6hmJrblYlALQDwpWcbjYFMAM+oHx1ZFf1R0RFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF16PQtE0r0RGh7C88IGqLjODJC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA2YTBiY2MtZDA2YS0z NzdlLThlMGEtZjhiNzBiN2M5YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC04ND2SFWDMG01e2kqF7UYQz9VRjSdGozzPbo9XTdBDPQA7Al4BFwxT Y/hiV8ZHU6crV8yAO9Y79fjCLOqgZFwl9KR1cCbCBlbRdwdiTEIFHAcgSevjNONm x5p7rBrST9bpwqwppvwIuWi4CxOK0YLqXDe7tkYRYhUMQeTpqAlJWbFKtigPXgG4 NdAxkiSfgnTVD3tzy2EM2OHPRYGEPNHMQFPY6CFCK5m4dA9Mlyeq/oDzCfdOuOlj NQ2a75c6W44EM/+O6qq0M/91jiqQ8NFzErO1UHIvNXBYu9lw2Yxdez+TXKpW78TR Dg8AQ69MkccVlQYyTRJsu5CNHneco8Y= -----END CERTIFICATE-----Generated at Fri Apr 4 09:54:50 2025 by rpki-client