$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa File: 0ef2e685-962e-3c72-8903-9722df652b4a.roa (raw, json) Hash identifier: Mj4f6RGWQnekZHnXb+Sl/Bql0QCu8yAu+XAUO9M1P1Q= Subject key identifier: 7D:36:F8:B1:BC:CD:31:52:9F:AA:DA:26:0C:98:2C:F0:D4:B5:5A:36 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285848CB16539D340791D6D2995E40 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 55293 IP address blocks: 70.32.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:53:9d:34:07:91:d6:d2:99:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=0b7ec689-000b-4648-8344-68708b375560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:0c:f5:dd:f3:d6:5d:89:1f:b0:cf:0c:37: 27:4d:27:d5:24:35:1e:b7:aa:31:6d:c0:f5:e8:14: 1f:b3:ca:67:7f:f5:ed:57:54:fa:95:0f:ef:aa:33: e3:1e:f5:94:22:d5:5b:7c:c3:e9:25:01:50:0c:65: 3b:52:a0:66:c1:ea:d3:40:74:5d:86:85:ae:a3:fc: c4:bb:3f:f2:05:67:cf:5f:06:e9:57:cd:1f:24:e4: c3:47:a0:23:15:81:58:8d:76:b9:8f:bf:c3:be:94: 2e:2f:7c:09:1b:b1:3b:2b:d6:40:c7:2d:d0:86:65: 1b:48:99:5f:99:03:f6:2f:f1:87:f0:8d:03:9e:cb: d5:67:84:8d:74:a3:bf:1f:0e:50:dc:20:65:b4:05: fc:e3:97:5c:bb:93:e2:4d:67:c3:e7:18:45:3e:6a: d4:18:3f:ac:d2:2c:c1:61:f7:0b:6a:5b:7b:3e:9b: 09:64:e4:61:8c:ea:88:d3:5f:fd:ab:7a:55:ef:e9: b8:3c:5e:8f:1b:5a:60:e0:7e:5b:82:8d:30:13:54: 50:d1:f7:44:5c:84:5b:3b:fd:68:6e:14:de:9d:4e: 7d:a2:b1:16:59:76:4f:87:a7:54:92:b2:c7:75:da: 64:84:9d:3e:07:25:9e:6b:7b:2e:ec:4b:bd:af:bb: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:36:F8:B1:BC:CD:31:52:9F:AA:DA:26:0C:98:2C:F0:D4:B5:5A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 70.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:95:86:31:ed:8b:19:21:a5:f6:b8:2f:66:73:34:a1:f6:61: 04:5f:d4:91:76:5a:f5:30:b2:67:04:0b:66:d9:d6:af:6a:d2: f6:6c:21:49:f8:40:69:e4:d0:ab:b8:ef:d2:a6:07:d9:5d:b8: 07:5a:1c:50:a8:df:11:25:97:e9:e9:bc:34:4c:15:0e:8f:13: 5d:a1:c2:12:9a:19:47:ce:09:8e:c1:e4:bd:93:9e:0b:59:e7: fd:d5:3d:35:e8:24:07:f5:76:23:6a:8f:8a:e9:19:de:a4:4d: 98:16:1f:95:1a:1a:96:50:52:8a:b0:9b:cb:f0:28:d6:5c:c9: 6b:ab:9e:d5:08:00:de:d2:60:58:11:bf:1e:90:44:fd:f5:ca: 8b:af:1c:48:36:89:b1:9e:f5:1d:36:27:8b:15:1f:c2:be:20: 97:da:1d:a8:ec:25:b3:ef:6b:8e:8b:75:1e:ac:30:a3:cc:66: 58:99:9c:87:cc:32:04:19:fb:48:61:ed:ad:a2:c9:25:50:56: 9c:6a:c6:8b:d5:76:f8:90:53:aa:3e:65:d2:73:c0:e8:bd:67: 76:06:fa:93:7c:fe:7f:7b:9b:32:37:a5:49:cd:5f:a0:67:7f: 73:d9:90:dc:5f:a2:88:a8:47:3d:ec:50:da:58:84:bf:f9:31: 90:2e:81:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlOdNAeR1tKZXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MGI3ZWM2ODktMDAwYi00NjQ4LTgzNDQtNjg3MDhiMzc1NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HwM9d3z1l2JH7DPDDcnTSfVJDUet6oxbcD1 6BQfs8pnf/XtV1T6lQ/vqjPjHvWUItVbfMPpJQFQDGU7UqBmwerTQHRdhoWuo/zE uz/yBWfPXwbpV80fJOTDR6AjFYFYjXa5j7/DvpQuL3wJG7E7K9ZAxy3QhmUbSJlf mQP2L/GH8I0DnsvVZ4SNdKO/Hw5Q3CBltAX845dcu5PiTWfD5xhFPmrUGD+s0izB YfcLalt7PpsJZORhjOqI01/9q3pV7+m4PF6PG1pg4H5bgo0wE1RQ0fdEXIRbO/1o bhTenU59orEWWXZPh6dUkrLHddpkhJ0+ByWea3su7Eu9r7vSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH02+LG8zTFSn6raJgyYLPDUtVo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvMGVmMmU2ODUtOTYyZS0z YzcyLTg5MDMtOTcyMmRmNjUyYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOVhjHtixkhpfa4L2ZzNKH2YQRf1JF2WvUwsmcEC2bZ1q9q0vZsIUn4 QGnk0Ku479KmB9lduAdaHFCo3xEll+npvDRMFQ6PE12hwhKaGUfOCY7B5L2TngtZ 5/3VPTXoJAf1diNqj4rpGd6kTZgWH5UaGpZQUoqwm8vwKNZcyWurntUIAN7SYFgR vx6QRP31youvHEg2ibGe9R02J4sVH8K+IJfaHajsJbPva46LdR6sMKPMZliZnIfM MgQZ+0hh7a2iySVQVpxqxovVdviQU6o+ZdJzwOi9Z3YG+pN8/n97mzI3pUnNX6Bn f3PZkNxfooioRz3sUNpYhL/5MZAugdw= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:58 2025 by rpki-client