$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa File: fd51bf42-6a03-3383-9b75-4b273b788025.roa (raw, json) Hash identifier: E3VFVFRpgiLAIJDRYpS2CYyWRKWx0A1/2Fw8XyG2dD0= Subject key identifier: 86:0D:B9:E3:22:57:0B:9D:D5:80:2E:47:8F:B3:D1:21:A8:2D:7B:A0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BBA4E776C12B0480F9D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 2386 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ba:4e:77:6c:12:b0:48:0f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=fe7d2930-baa3-432c-ad67-96bdca381e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:91:55:0c:e4:f8:80:f4:2e:f9:00:aa:71: df:26:84:3d:20:dc:7f:4f:9c:35:53:ae:b4:ed:82: b9:d0:fe:a7:31:44:c4:e7:9a:ff:74:8d:1b:36:90: e9:65:e5:fd:ce:16:5e:e9:a7:9e:9b:d8:4c:1f:c5: 62:3f:fc:0e:db:0b:d6:5f:57:21:28:80:6d:1a:5b: d1:24:12:c2:05:94:3b:39:26:17:73:c8:5c:ae:05: 8c:c4:dc:f6:21:82:ab:09:8a:7e:01:c2:93:b3:65: 60:1a:44:e8:31:a5:af:fe:a9:be:27:59:9d:7d:65: 5d:cf:5e:28:6c:ef:90:0f:05:bd:ef:3f:a3:9a:32: 39:86:92:c8:08:c2:66:1d:8d:d9:27:bf:03:70:24: 9c:31:54:e3:df:2b:43:d3:63:ca:43:a8:b7:ea:36: 26:77:36:f0:2b:b8:53:d7:cb:60:a0:57:3b:05:30: dc:1e:5a:a8:ed:cf:aa:2d:6f:22:96:e1:bb:0b:4e: 76:33:f1:40:86:82:ec:b8:cb:f4:4b:90:2f:ae:9d: 3e:d9:ad:b8:4f:ec:38:ee:b4:9a:66:b2:e9:60:0e: 74:fb:56:aa:3b:9a:75:db:ab:d1:62:2b:be:2d:25: e1:92:b1:51:d4:2d:3e:08:a0:2e:65:52:c5:d0:f3: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0D:B9:E3:22:57:0B:9D:D5:80:2E:47:8F:B3:D1:21:A8:2D:7B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d4:9b:12:93:8e:3d:d3:5d:1c:db:ac:ac:6d:d5:89:3f:73: c1:88:d3:e4:94:84:0d:b7:f4:ef:b7:1b:be:77:69:66:43:79: bc:7a:16:fc:b8:a1:01:58:1a:90:01:90:94:09:40:58:2f:46: 7c:c6:f4:7c:cc:21:e3:1f:dd:36:fc:75:fe:6d:72:6b:2f:1d: f1:eb:4a:b1:44:b1:a1:7b:48:6c:dc:fa:4a:6c:6b:52:25:bc: 39:d5:1c:30:56:96:b2:0a:41:de:13:2d:c5:9c:3a:6e:0e:98: 07:c9:e3:07:a1:09:7c:56:43:4b:85:84:57:9a:f2:16:82:fa: 55:74:4d:5f:af:d2:f3:54:3b:1c:bc:2a:75:28:d7:66:4b:89: f5:0c:4a:f9:16:cb:7c:a4:c9:ae:a7:83:96:42:dd:ec:a6:c3: fe:7b:62:8b:46:b0:fd:38:83:51:24:ff:40:96:ed:ed:a3:c6: d6:42:20:1e:84:be:2e:06:8d:13:a5:e3:a4:cf:4f:fe:f6:3f: f5:81:f1:97:63:9b:b3:e1:0e:39:05:fd:10:ed:8e:d4:80:3c: 52:b7:e7:46:fc:50:e9:7c:0e:c8:df:43:7c:94:fc:4a:3b:70: b8:82:cc:ff:8d:eb:f8:d4:99:04:e2:39:6d:22:42:8c:03:93: de:2b:de:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7pOd2wSsEgPnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmU3ZDI5MzAtYmFhMy00MzJjLWFkNjctOTZiZGNhMzgxZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUiRVQzk+ID0LvkAqnHfJoQ9INx/T5w1U660 7YK50P6nMUTE55r/dI0bNpDpZeX9zhZe6aeem9hMH8ViP/wO2wvWX1chKIBtGlvR JBLCBZQ7OSYXc8hcrgWMxNz2IYKrCYp+AcKTs2VgGkToMaWv/qm+J1mdfWVdz14o bO+QDwW97z+jmjI5hpLICMJmHY3ZJ78DcCScMVTj3ytD02PKQ6i36jYmdzbwK7hT 18tgoFc7BTDcHlqo7c+qLW8iluG7C052M/FAhoLsuMv0S5Avrp0+2a24T+w47rSa ZrLpYA50+1aqO5p126vRYiu+LSXhkrFR1C0+CKAuZVLF0PNuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYNueMiVwud1YAuR4+z0SGoLXugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQ1MWJmNDItNmEwMy0z MzgzLTliNzUtNGIyNzNiNzg4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzUmxKTjj3TXRzbrKxt1Yk/c8GI0+SUhA239O+3G753aWZDebx6Fvy4 oQFYGpABkJQJQFgvRnzG9HzMIeMf3Tb8df5tcmsvHfHrSrFEsaF7SGzc+kpsa1Il vDnVHDBWlrIKQd4TLcWcOm4OmAfJ4wehCXxWQ0uFhFea8haC+lV0TV+v0vNUOxy8 KnUo12ZLifUMSvkWy3ykya6ng5ZC3eymw/57YotGsP04g1Ek/0CW7e2jxtZCIB6E vi4GjROl46TPT/72P/WB8Zdjm7PhDjkF/RDtjtSAPFK350b8UOl8DsjfQ3yU/Eo7 cLiCzP+N6/jUmQTiOW0iQowDk94r3tk= -----END CERTIFICATE-----Generated at Fri Apr 4 10:18:01 2025 by rpki-client