$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a157555f-a68c-3d7e-8dc4-b378418835a7.roa File: a157555f-a68c-3d7e-8dc4-b378418835a7.roa (raw, json) Hash identifier: iy7d0weqUJhvs5TNnY1N4a5n7HDWlgRfU4I++RP3Zfc= Subject key identifier: C1:8C:D2:4D:E8:91:94:48:76:03:5C:BD:34:3E:96:4F:D1:11:F1:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858455F07C0C4EAFDDA7365F0CF60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a157555f-a68c-3d7e-8dc4-b378418835a7.roa Signing time: Fri 29 Mar 2024 18:43:29 +0000 ROA not before: Fri 29 Mar 2024 18:43:29 +0000 ROA not after: Thu 27 Jun 2024 18:43:29 +0000 asID: 396982 IP address blocks: 70.32.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:07:c0:c4:ea:fd:da:73:65:f0:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 29 18:43:29 2024 GMT Not After : Jun 27 18:43:29 2024 GMT Subject: CN=0a142788-169c-4fd8-8f79-6189115e43b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:50:9e:6c:dd:c6:ef:c8:f7:1c:b8:b4:d7: 83:c0:77:25:dd:57:45:be:e9:0e:c0:b9:bf:03:10: 42:ef:a1:0e:b1:cf:03:5b:09:84:01:7b:8f:75:c9: eb:47:25:ca:b8:e8:67:cf:a3:78:38:f5:a9:1b:7e: 6b:14:63:5e:5d:4a:65:b2:11:fb:2e:e6:0e:99:6f: 79:17:31:49:6c:6a:34:df:40:93:e4:44:da:ff:41: a9:53:3c:75:ea:aa:87:35:ba:1b:11:db:46:c8:8e: 30:56:d2:ee:e6:e9:b1:c6:f4:88:64:50:54:a7:e1: e3:1e:70:ab:68:ae:e2:bb:e3:58:44:ce:4a:ce:bb: e8:45:47:92:36:4c:4a:9e:7a:ae:b8:2d:22:d6:71: 83:a9:9e:39:8f:46:0d:8e:cd:c3:ec:79:ac:eb:c5: af:ca:d0:69:df:3a:ff:73:c5:b1:21:75:2c:94:4f: 1d:58:64:77:13:98:3f:19:58:61:27:e1:b8:68:6f: a1:b9:25:c2:82:e7:7b:7d:0b:d5:fb:51:f6:b5:ff: 83:46:a9:66:af:fb:bf:f5:de:c9:4a:08:ee:fa:91: ac:76:1b:a1:ed:a0:65:5a:83:c4:37:a2:ed:04:23: d4:30:01:44:34:0b:be:e6:47:e2:80:e1:b2:11:13: 22:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:D2:4D:E8:91:94:48:76:03:5C:BD:34:3E:96:4F:D1:11:F1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a157555f-a68c-3d7e-8dc4-b378418835a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:21:90:b7:9e:a6:51:05:98:81:31:da:0c:38:b5:99:51:5d: 91:09:1f:b2:d0:38:10:4c:c6:06:5f:66:74:20:47:1f:41:97: 3c:c9:f0:7a:b7:fb:a7:d6:f8:c6:11:15:ac:b7:7d:62:41:fe: c1:53:30:b6:d1:b1:dc:3f:c5:6c:86:38:f1:3f:4a:bf:58:e1: 3c:bc:ab:e2:5c:01:74:75:b2:79:be:5e:d8:e4:ec:5c:e1:40: 4c:ec:54:1d:78:d9:7e:e8:89:3d:44:20:dc:7f:8f:24:48:98: 75:6f:ad:a2:8c:2c:37:97:4a:96:b6:70:d0:59:5c:fb:b4:ff: bb:a6:47:0f:eb:99:d1:63:9c:82:41:5f:37:0c:ad:b2:78:26: cb:09:d2:fb:f9:a9:bf:66:6e:be:86:23:0b:fa:3b:a8:a5:d2: 09:7a:05:d9:30:7f:9f:fa:98:4e:b1:21:a9:3a:c8:b3:18:97: 52:a6:fd:d5:a6:b9:59:57:72:0c:53:c0:23:df:91:57:70:f6: 2b:6b:fc:32:1c:62:b1:b9:ef:1b:b2:05:2d:2d:bf:20:6f:5c: df:f3:75:f1:12:fc:b8:38:55:15:f9:57:05:5a:7e:ad:83:4b: 64:67:97:1a:05:fa:3d:f1:0e:95:c9:13:4f:1a:63:54:a4:4e: 36:86:59:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfB8DE6v3ac2Xwz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyOTE4NDMyOVoXDTI0MDYyNzE4NDMyOVowLzEtMCsGA1UEAxMk MGExNDI3ODgtMTY5Yy00ZmQ4LThmNzktNjE4OTExNWU0M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J9Qnmzdxu/I9xy4tNeDwHcl3VdFvukOwLm/ AxBC76EOsc8DWwmEAXuPdcnrRyXKuOhnz6N4OPWpG35rFGNeXUplshH7LuYOmW95 FzFJbGo030CT5ETa/0GpUzx16qqHNbobEdtGyI4wVtLu5umxxvSIZFBUp+HjHnCr aK7iu+NYRM5KzrvoRUeSNkxKnnquuC0i1nGDqZ45j0YNjs3D7Hms68WvytBp3zr/ c8WxIXUslE8dWGR3E5g/GVhhJ+G4aG+huSXCgud7fQvV+1H2tf+DRqlmr/u/9d7J Sgju+pGsdhuh7aBlWoPEN6LtBCPUMAFENAu+5kfigOGyERMiYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGM0k3okZRIdgNcvTQ+lk/REfEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTE1NzU1NWYtYTY4Yy0z ZDdlLThkYzQtYjM3ODQxODgzNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwhkLeeplEFmIEx2gw4tZlRXZEJH7LQOBBMxgZfZnQgRx9BlzzJ8Hq3 +6fW+MYRFay3fWJB/sFTMLbRsdw/xWyGOPE/Sr9Y4Ty8q+JcAXR1snm+Xtjk7Fzh QEzsVB142X7oiT1EINx/jyRImHVvraKMLDeXSpa2cNBZXPu0/7umRw/rmdFjnIJB XzcMrbJ4JssJ0vv5qb9mbr6GIwv6O6il0gl6Bdkwf5/6mE6xIak6yLMYl1Km/dWm uVlXcgxTwCPfkVdw9itr/DIcYrG57xuyBS0tvyBvXN/zdfES/Lg4VRX5VwVafq2D S2RnlxoF+j3xDpXJE08aY1SkTjaGWVc= -----END CERTIFICATE-----Generated at Sun May 5 22:50:31 2024 by rpki-client on console-fra.rpki-client.org