$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa File: 026b8b08-d03f-336f-8c9f-25cac406fa0b.roa (raw, json) Hash identifier: naRY5KmtWU5XFsOJ3ar/HBHFdnu2eDTZ2mEntRjRlwQ= Subject key identifier: 1B:C1:DC:63:71:57:46:73:90:9F:2D:52:BC:79:77:D3:AC:2D:C9:37 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C202DDC64124AB771AF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 70.32.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:20:2d:dc:64:12:4a:b7:71:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=19765663-8e69-4f68-865d-f31b66671c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8d:6a:a3:66:54:3f:39:e2:f0:44:05:de:81: e4:2d:14:91:27:a0:de:78:4e:0b:f0:56:a9:da:c5: e1:73:02:94:75:ba:df:66:75:80:36:08:a2:55:ab: 96:c7:1c:20:b5:a1:8a:68:e7:73:3b:16:4f:05:c6: 97:a2:19:e4:c9:2d:f0:e8:2b:57:fe:1e:ed:3c:0f: 3d:7e:4a:ac:56:39:e1:cb:00:49:40:78:40:df:a5: a1:6d:9c:e0:10:8e:07:20:b2:72:fa:d2:90:f7:87: ad:67:9d:4c:72:22:8d:ee:fd:54:b7:c3:a1:b9:fe: eb:97:fd:40:66:5d:4d:e8:45:d4:f0:7a:8d:dc:35: 13:9c:12:57:21:1c:b9:9b:6d:c9:aa:3f:a5:ce:fe: e6:18:0a:15:b7:f6:08:fe:25:4c:d9:33:3c:18:7d: 75:f2:05:d7:6b:25:2e:de:c8:bb:8c:06:44:53:0b: ca:46:95:5a:6e:5f:ae:03:73:31:6a:3e:5c:84:8d: 0d:3a:4c:d2:58:0a:42:d2:5a:8c:ba:a3:db:ae:e5: 1f:42:39:79:a8:69:b9:dc:9f:7f:47:fa:f1:00:7d: 5c:65:35:3b:f2:74:30:17:92:5f:de:f0:11:ce:fd: 15:15:d0:07:ae:76:9e:cf:bb:d7:ae:ab:61:2f:a4: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C1:DC:63:71:57:46:73:90:9F:2D:52:BC:79:77:D3:AC:2D:C9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7f:e6:63:e8:d5:98:f0:a8:83:d5:ac:4d:8b:05:24:b1:96: 6b:38:75:4d:04:a7:e5:b9:20:06:8e:d0:d4:0f:99:03:95:9a: 12:34:ce:bd:17:67:b1:03:37:12:bb:ae:5a:7c:74:b1:9d:35: e3:31:f6:50:ed:18:bb:17:94:3c:a4:1e:b1:8e:97:d3:ab:fb: b8:21:99:35:9e:c1:b9:df:6d:ce:1b:e5:87:bd:8f:9e:77:d9: 4b:4a:b5:58:ca:a8:24:c0:94:ca:36:a4:2f:a1:a0:42:a2:04: f5:26:85:51:90:81:97:a6:94:80:57:a2:31:de:b8:ae:1c:18: 60:00:41:5a:50:e3:df:ad:8a:5a:a0:89:12:01:1e:f9:14:91: 48:18:65:b7:77:3f:4a:6d:4e:cb:9c:01:67:24:c3:fb:31:34: 9b:00:31:48:40:d0:ca:d5:4e:e0:36:7f:da:21:74:4e:16:82: 59:66:e5:68:bf:3c:f9:ec:65:f9:8a:ce:cf:8e:ec:6c:16:ed: 50:4c:bd:3b:51:f7:33:27:35:62:15:a2:e1:fb:b9:33:c1:a4: 17:04:1b:15:2a:4c:c9:ba:a8:09:1a:79:13:2a:0f:22:11:93: 24:cb:04:40:58:97:31:a5:4f:6f:cc:33:ca:3f:9a:fa:38:f3: cb:b6:3f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCAt3GQSSrdxrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTk3NjU2NjMtOGU2OS00ZjY4LTg2NWQtZjMxYjY2NjcxYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI1qo2ZUPzni8EQF3oHkLRSRJ6DeeE4L8Fap 2sXhcwKUdbrfZnWANgiiVauWxxwgtaGKaOdzOxZPBcaXohnkyS3w6CtX/h7tPA89 fkqsVjnhywBJQHhA36WhbZzgEI4HILJy+tKQ94etZ51MciKN7v1Ut8Ohuf7rl/1A Zl1N6EXU8HqN3DUTnBJXIRy5m23Jqj+lzv7mGAoVt/YI/iVM2TM8GH118gXXayUu 3si7jAZEUwvKRpVabl+uA3Mxaj5chI0NOkzSWApC0lqMuqPbruUfQjl5qGm53J9/ R/rxAH1cZTU78nQwF5Jf3vARzv0VFdAHrnaez7vXrqthL6TWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvB3GNxV0ZzkJ8tUrx5d9OsLck3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI2YjhiMDgtZDAzZi0z MzZmLThjOWYtMjVjYWM0MDZmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ/5mPo1ZjwqIPVrE2LBSSxlms4dU0Ep+W5IAaO0NQPmQOVmhI0zr0X Z7EDNxK7rlp8dLGdNeMx9lDtGLsXlDykHrGOl9Or+7ghmTWewbnfbc4b5Ye9j553 2UtKtVjKqCTAlMo2pC+hoEKiBPUmhVGQgZemlIBXojHeuK4cGGAAQVpQ49+tilqg iRIBHvkUkUgYZbd3P0ptTsucAWckw/sxNJsAMUhA0MrVTuA2f9ohdE4Wgllm5Wi/ PPnsZfmKzs+O7GwW7VBMvTtR9zMnNWIVouH7uTPBpBcEGxUqTMm6qAkaeRMqDyIR kyTLBEBYlzGlT2/MM8o/mvo488u2P14= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:26 2025 by rpki-client