$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa File: fa6d7785-b363-37e6-834e-f8ca6302050e.roa (raw, json) Hash identifier: 7IEsoAQfYho40h5LvcufYfp1cErm4g7G7Ulp2H13+pw= Subject key identifier: D3:47:D7:80:CF:7C:61:F2:8A:24:B1:E4:1A:C1:01:AB:CA:F9:D8:B9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845490D3A8453E6C4FC749F4D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa Signing time: Thu 21 Mar 2024 21:46:44 +0000 ROA not before: Thu 21 Mar 2024 21:46:44 +0000 ROA not after: Wed 19 Jun 2024 21:46:44 +0000 asID: 15169 IP address blocks: 70.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0d:3a:84:53:e6:c4:fc:74:9f:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:46:44 2024 GMT Not After : Jun 19 21:46:44 2024 GMT Subject: CN=dcfc52f8-4697-4c86-93e2-9b6aa971a9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:95:9f:f6:92:4b:1c:df:a5:67:e7:36:65: 1c:f3:e1:d2:b3:ac:5e:b3:40:39:1b:92:e8:0a:d7: 7e:e1:83:9c:a5:bc:c4:12:d8:74:0e:98:8e:6b:97: f4:50:c8:b0:18:ae:b1:45:53:a3:ce:80:0c:b0:5a: 35:1d:65:96:61:2b:58:2e:dd:57:42:7f:cd:0f:86: b4:1d:1b:04:fa:81:00:9e:c3:77:8c:43:9c:bc:c7: fb:bb:7a:16:f1:7c:e7:3c:29:e0:35:4e:e9:c2:ad: 4b:d8:08:a3:bc:4a:6f:cf:6d:d7:f7:7d:55:ab:00: d8:10:ec:a0:ad:06:c5:74:c6:0f:a2:bd:1b:df:fd: d6:15:58:1d:3e:a2:21:a0:ed:56:16:6a:1a:b0:0a: a3:45:52:bd:02:45:19:6c:cf:69:dd:05:8c:e7:85: 91:44:e0:ea:08:99:86:a8:2b:7b:24:5f:10:ee:69: cf:57:cb:3a:38:98:0f:37:f1:48:67:21:ea:b3:a8: ab:9a:53:08:7c:40:17:d5:97:67:72:2a:ab:46:db: 69:23:35:df:c2:59:96:51:5b:50:14:5a:6c:e6:be: 65:92:51:41:39:34:c0:bf:73:d0:27:b7:5f:ad:59: 8d:4e:c9:00:fa:7a:a9:96:7b:f5:33:c6:5f:75:30: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:47:D7:80:CF:7C:61:F2:8A:24:B1:E4:1A:C1:01:AB:CA:F9:D8:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:23:84:37:e5:00:77:4a:a1:f5:ea:e1:41:fd:b6:63:c1:71: da:05:ae:eb:83:9e:2f:c9:b7:22:5c:da:66:c4:73:ad:7a:1b: 6d:5e:04:c3:5a:07:8d:2c:d0:72:b4:d4:d4:4a:ef:dd:31:13: 93:12:40:2f:89:3d:07:e9:09:c0:32:2a:46:1e:cc:4f:2c:5f: 94:60:1c:c0:3c:b0:a1:c4:59:96:5e:59:dc:31:85:d7:50:9a: f6:6d:4b:7c:1a:1b:f9:fa:5a:e5:39:14:c0:58:e4:12:a5:d5: e4:36:b4:e6:20:75:65:0a:d9:f0:b5:0b:f4:10:3f:7d:ac:f9: ad:aa:7b:da:86:49:4a:cc:f0:79:75:53:37:ad:9c:9d:c6:a5: ae:d7:47:66:40:0b:27:7a:4b:5a:ea:af:91:75:29:c2:47:76: fa:da:96:72:1a:3c:03:f3:26:21:7e:ce:65:bc:19:79:e4:3e: fe:c6:42:12:13:b4:21:39:42:eb:dc:96:d2:de:4b:58:5e:c1: fb:41:e3:9d:0b:1a:ff:3f:fd:e6:c5:c6:5a:12:4d:75:89:29: f4:df:47:5e:f9:86:76:80:77:b5:44:12:62:98:8d:8c:ec:97: 84:49:b3:76:51:ab:40:18:09:42:55:11:d9:b6:32:64:1e:9a: 57:1f:89:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDTqEU+bE/HSfTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxNDY0NFoXDTI0MDYxOTIxNDY0NFowLzEtMCsGA1UEAxMk ZGNmYzUyZjgtNDY5Ny00Yzg2LTkzZTItOWI2YWE5NzFhOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWiVn/aSSxzfpWfnNmUc8+HSs6xes0A5G5Lo Ctd+4YOcpbzEEth0DpiOa5f0UMiwGK6xRVOjzoAMsFo1HWWWYStYLt1XQn/ND4a0 HRsE+oEAnsN3jEOcvMf7u3oW8XznPCngNU7pwq1L2AijvEpvz23X931VqwDYEOyg rQbFdMYPor0b3/3WFVgdPqIhoO1WFmoasAqjRVK9AkUZbM9p3QWM54WRRODqCJmG qCt7JF8Q7mnPV8s6OJgPN/FIZyHqs6irmlMIfEAX1ZdnciqrRttpIzXfwlmWUVtQ FFps5r5lklFBOTTAv3PQJ7dfrVmNTskA+nqplnv1M8ZfdTCHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNH14DPfGHyiiSx5BrBAavK+di5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE2ZDc3ODUtYjM2My0z N2U2LTgzNGUtZjhjYTYzMDIwNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQjhDflAHdKofXq4UH9tmPBcdoFruuDni/JtyJc2mbEc616G21eBMNa B40s0HK01NRK790xE5MSQC+JPQfpCcAyKkYezE8sX5RgHMA8sKHEWZZeWdwxhddQ mvZtS3waG/n6WuU5FMBY5BKl1eQ2tOYgdWUK2fC1C/QQP32s+a2qe9qGSUrM8Hl1 UzetnJ3Gpa7XR2ZACyd6S1rqr5F1KcJHdvralnIaPAPzJiF+zmW8GXnkPv7GQhIT tCE5QuvcltLeS1hewftB450LGv8//ebFxloSTXWJKfTfR175hnaAd7VEEmKYjYzs l4RJs3ZRq0AYCUJVEdm2MmQemlcfiSE= -----END CERTIFICATE-----Generated at Fri May 17 22:52:24 2024 by rpki-client on console-ams.rpki-client.org