$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa File: d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa (raw, json) Hash identifier: rLLYirf4VOl8tpXy+65xBVBEaY2GhVJToOHUmMw0glc= Subject key identifier: DC:FB:BD:34:A8:4F:04:63:A1:CA:73:FA:82:07:48:0C:DB:6D:4A:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BC351A7583975A9F5D280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 2386 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c3:51:a7:58:39:75:a9:f5:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=6e5cac81-a16f-4218-b98b-62820f68ef67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:a2:16:f5:32:10:cf:a5:18:9e:d3:aa:8f: 56:11:1a:83:98:e8:42:28:96:fa:35:d4:ae:91:a2: 09:a8:53:d1:f1:a6:39:37:68:c8:84:86:cf:3b:6c: 7f:6c:a8:fd:cc:d8:6b:ff:8f:4b:59:38:ff:11:62: 3e:a7:02:38:3f:78:20:8a:be:c1:d9:9e:29:c5:24: c6:6a:0e:2f:ea:5f:2b:ba:96:bb:36:09:44:cc:be: 3c:51:92:60:f3:ec:92:35:b7:c4:2a:e6:af:08:ca: b8:51:c2:47:83:5f:bb:55:6c:ca:a1:4f:0c:dc:70: c5:6c:66:35:59:87:59:57:b3:70:a8:d9:e4:13:3c: b7:a8:58:34:83:b6:af:80:2e:48:13:c6:1f:54:c8: ff:f9:5b:6c:8a:d9:e8:a4:24:2b:33:05:c8:ef:6f: e4:bf:2c:12:79:cd:cc:93:e2:cf:66:c1:8c:e9:74: 9c:1e:f6:83:66:ce:23:cb:ff:50:1e:3d:31:e0:2c: bd:d0:29:9f:28:f2:81:b2:dd:0c:96:60:f3:6b:b2: 5b:4e:cd:41:21:cc:7c:1d:f0:7c:2b:e2:89:2a:17: 13:8f:fe:e1:33:2c:99:ed:7b:6d:d5:e8:d2:7c:f6: b3:46:8d:f4:ac:a3:d7:aa:8d:c2:99:ad:3a:c8:f0: 8b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FB:BD:34:A8:4F:04:63:A1:CA:73:FA:82:07:48:0C:DB:6D:4A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:10:d3:e5:53:1a:54:84:fd:91:d7:63:3f:2d:ac:93:90:87: ec:2a:bb:ed:78:07:b6:f9:0f:df:cd:83:43:f2:37:7f:ff:d8: 14:52:38:5f:3c:82:ba:0e:57:3f:18:e0:5b:df:fa:af:55:72: 5b:b6:86:e7:c8:3a:23:41:ed:10:0f:67:f5:99:78:c1:de:69: 04:88:74:4c:3c:fb:7d:e1:a0:05:23:fc:77:95:7a:2b:ba:5e: 5d:24:6a:46:fb:9a:c2:db:78:fd:6e:54:09:d8:85:42:24:a9: 9f:0f:2a:27:2d:37:0c:23:34:1c:49:1e:9a:6e:a3:99:ca:ca: 72:67:2f:4a:5a:2e:0a:c8:50:0c:51:56:d6:47:77:17:0d:0b: 90:69:90:90:3e:eb:85:de:5a:e5:10:41:2d:55:2b:6b:77:6b: f7:98:3b:99:99:20:70:41:9f:77:d3:47:42:7b:de:fd:08:39: 95:c7:59:6f:72:7c:49:ca:0b:ad:20:ea:d2:c2:34:13:d3:1d: 34:13:f9:6f:25:de:4f:8c:77:da:74:e4:d1:d4:43:ef:5b:37: aa:f4:99:61:c8:88:99:9e:2e:45:ca:c6:a9:e1:b0:25:e3:e2: 8b:01:c0:d2:3a:d0:b8:38:d9:19:8c:e3:59:61:59:8a:81:c1: 06:db:8e:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8NRp1g5dan10oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NmU1Y2FjODEtYTE2Zi00MjE4LWI5OGItNjI4MjBmNjhlZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYKiFvUyEM+lGJ7Tqo9WERqDmOhCKJb6NdSu kaIJqFPR8aY5N2jIhIbPO2x/bKj9zNhr/49LWTj/EWI+pwI4P3ggir7B2Z4pxSTG ag4v6l8rupa7NglEzL48UZJg8+ySNbfEKuavCMq4UcJHg1+7VWzKoU8M3HDFbGY1 WYdZV7NwqNnkEzy3qFg0g7avgC5IE8YfVMj/+VtsitnopCQrMwXI72/kvywSec3M k+LPZsGM6XScHvaDZs4jy/9QHj0x4Cy90CmfKPKBst0MlmDza7JbTs1BIcx8HfB8 K+KJKhcTj/7hMyyZ7Xtt1ejSfPazRo30rKPXqo3Cma06yPCLEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz7vTSoTwRjocpz+oIHSAzbbUpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlhNmFkYjQtNjlhNS0z YTQyLWI0YWEtM2I3MDU4YTczYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoQ0+VTGlSE/ZHXYz8trJOQh+wqu+14B7b5D9/Ng0PyN3//2BRSOF88 groOVz8Y4Fvf+q9Vclu2hufIOiNB7RAPZ/WZeMHeaQSIdEw8+33hoAUj/HeVeiu6 Xl0kakb7msLbeP1uVAnYhUIkqZ8PKictNwwjNBxJHppuo5nKynJnL0paLgrIUAxR VtZHdxcNC5BpkJA+64XeWuUQQS1VK2t3a/eYO5mZIHBBn3fTR0J73v0IOZXHWW9y fEnKC60g6tLCNBPTHTQT+W8l3k+Md9p05NHUQ+9bN6r0mWHIiJmeLkXKxqnhsCXj 4osBwNI60Lg42RmM41lhWYqBwQbbjk8= -----END CERTIFICATE-----Generated at Fri Apr 4 09:57:50 2025 by rpki-client