$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa File: acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa (raw, json) Hash identifier: H7ZOQMtUOtLI0M6FUWbiOlRDA8IZZ67quvGl2DPtLjM= Subject key identifier: B1:16:DE:E0:84:81:E5:17:6A:97:AC:64:F0:A3:1E:84:E5:66:D9:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584548FEBFA2D153BD0442300700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa Signing time: Thu 21 Mar 2024 21:17:34 +0000 ROA not before: Thu 21 Mar 2024 21:17:34 +0000 ROA not after: Wed 19 Jun 2024 21:17:34 +0000 asID: 15169 IP address blocks: 70.32.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fe:bf:a2:d1:53:bd:04:42:30:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:17:34 2024 GMT Not After : Jun 19 21:17:34 2024 GMT Subject: CN=6620926d-ead9-4a98-8327-e9a68042cfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:79:09:86:8b:7a:5a:8d:1d:18:d5:73:a4: b5:81:60:1a:e5:a1:5c:7c:13:e8:e3:44:f4:b6:ed: 32:73:a3:1f:01:a1:4a:85:2a:ae:26:35:56:8c:df: f4:86:50:30:76:cb:ec:3a:31:e8:8d:f0:96:f8:b3: 9c:5d:57:05:53:2e:07:af:f8:40:cc:4b:66:43:84: da:80:e8:19:9d:df:99:30:b3:ff:fb:0f:21:00:63: f7:b6:bc:bf:f7:60:fd:38:8d:79:51:c9:05:a0:36: 79:60:e1:8a:ce:12:87:1f:c8:6a:43:69:32:31:bc: d5:2c:54:e8:2b:73:5b:5c:7a:3c:33:4c:c1:cf:35: af:14:8f:23:3f:60:7a:11:91:ea:c0:ec:7d:2f:c3: d5:8b:0f:54:a2:5c:63:6c:03:bb:4c:0b:11:aa:8a: 37:39:a4:13:da:9d:bf:d5:90:30:ce:c7:ad:4f:64: c2:c0:b4:44:9b:6b:2f:f6:63:1c:c6:f6:14:25:1c: e1:fe:db:7f:85:61:ce:12:e6:04:8d:79:6b:47:9e: 45:d3:7e:62:a0:a1:36:a9:ec:24:81:54:93:a5:9a: 6a:40:2d:c6:88:39:84:35:ea:46:8a:de:5f:b4:34: f6:90:87:a3:66:29:98:e9:ce:30:42:d9:3b:09:8b: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:16:DE:E0:84:81:E5:17:6A:97:AC:64:F0:A3:1E:84:E5:66:D9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:24:33:ea:45:10:85:b3:9a:d4:6f:23:8c:4f:6e:2c:83:a5: 24:30:69:66:3a:17:1f:7d:9f:ed:b9:95:39:6b:bb:2e:7e:11: 27:2c:a0:2f:73:c2:7d:2a:9b:d7:8e:15:4c:4d:80:f7:fb:47: b1:78:7b:ad:47:5b:0b:5e:cb:fd:ce:a1:85:ea:ef:5d:db:cc: f7:03:6d:0f:f2:a2:7f:2a:19:df:d4:23:95:d5:1c:9a:43:e0: 5d:05:1b:86:01:fc:af:7b:f4:99:5b:13:9b:3a:6b:e6:56:7f: 47:99:a1:0c:91:31:23:77:a0:5e:eb:f6:75:e6:ca:8b:32:38: 57:78:23:cd:bd:cc:b9:de:07:66:21:2c:b1:eb:ec:74:9b:68: cc:cf:1d:2b:01:5d:51:ca:1f:e9:71:b7:6b:da:e8:fc:e3:d3: 74:dc:99:8f:12:02:53:d8:05:b4:61:51:5d:69:60:64:dc:72: bc:19:ba:71:08:60:e5:ed:1b:e8:8e:b4:6b:8c:c6:62:f7:11: 81:9e:0c:df:8d:59:76:cd:6a:2e:aa:74:c0:c8:e0:d3:c6:0d: 01:c1:85:af:f7:9c:43:2b:92:95:65:f3:15:49:6a:4c:8f:4c: b4:ff:7f:f2:46:21:03:e3:70:ed:61:9c:43:f9:14:ef:3a:66: 3d:4a:d4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/r+i0VO9BEIwBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxMTczNFoXDTI0MDYxOTIxMTczNFowLzEtMCsGA1UEAxMk NjYyMDkyNmQtZWFkOS00YTk4LTgzMjctZTlhNjgwNDJjZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Z5CYaLelqNHRjVc6S1gWAa5aFcfBPo40T0 tu0yc6MfAaFKhSquJjVWjN/0hlAwdsvsOjHojfCW+LOcXVcFUy4Hr/hAzEtmQ4Ta gOgZnd+ZMLP/+w8hAGP3try/92D9OI15UckFoDZ5YOGKzhKHH8hqQ2kyMbzVLFTo K3NbXHo8M0zBzzWvFI8jP2B6EZHqwOx9L8PViw9UolxjbAO7TAsRqoo3OaQT2p2/ 1ZAwzsetT2TCwLREm2sv9mMcxvYUJRzh/tt/hWHOEuYEjXlrR55F035ioKE2qewk gVSTpZpqQC3GiDmENepGit5ftDT2kIejZimY6c4wQtk7CYuLrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEW3uCEgeUXapesZPCjHoTlZtlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWNjMWZkYzYtMzBkYi0z YWY0LWI4ZjUtMzI1NTFhMzMwYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQkM+pFEIWzmtRvI4xPbiyDpSQwaWY6Fx99n+25lTlruy5+EScsoC9z wn0qm9eOFUxNgPf7R7F4e61HWwtey/3OoYXq713bzPcDbQ/yon8qGd/UI5XVHJpD 4F0FG4YB/K979JlbE5s6a+ZWf0eZoQyRMSN3oF7r9nXmyosyOFd4I829zLneB2Yh LLHr7HSbaMzPHSsBXVHKH+lxt2va6Pzj03TcmY8SAlPYBbRhUV1pYGTccrwZunEI YOXtG+iOtGuMxmL3EYGeDN+NWXbNai6qdMDI4NPGDQHBha/3nEMrkpVl8xVJakyP TLT/f/JGIQPjcO1hnEP5FO86Zj1K1Lc= -----END CERTIFICATE-----Generated at Fri May 17 21:09:44 2024 by rpki-client on console-ams.rpki-client.org