$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa File: 1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa (raw, json) Hash identifier: LjgDNeYW/zW6pfgL37ob9ExkY3m3dSLGNa9TuWya0tA= Subject key identifier: 69:84:B7:EE:F1:D6:56:82:2A:ED:E9:19:CE:27:01:ED:22:5A:72:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BBF27561F28DC8988D500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bf:27:56:1f:28:dc:89:88:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=650bd3d5-9df2-4f82-9239-2a3f860ec5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:48:18:98:09:6e:d4:59:91:02:62:29:79: 90:3c:85:d2:82:9d:84:7c:a1:a8:e1:ea:1a:40:da: 39:2f:dc:77:33:a1:b1:43:89:1d:13:8b:e0:dc:dd: ff:f4:15:d8:1b:56:8f:73:0b:df:06:77:c5:8a:0a: 5c:fe:4a:3f:4f:5a:7f:4d:37:7d:a6:38:69:4b:f2: 86:e2:92:fb:3e:07:07:a8:e4:45:60:3b:32:1a:c0: 9c:ff:a6:24:c0:04:1d:bd:45:ec:bd:93:53:2f:aa: cb:e7:6c:e8:92:f7:86:73:41:6d:97:6a:d9:18:13: 77:05:c1:cb:51:01:d4:a8:38:c1:78:07:b7:71:77: 6c:86:46:47:ba:ac:ad:55:70:10:3a:d9:9d:ff:cc: e6:6c:bc:4c:50:cf:f2:e8:d7:95:5c:ea:40:67:24: 5f:d6:dd:c1:36:79:0a:41:90:b4:79:df:89:b1:68: 0a:a6:e2:a8:25:d3:22:fa:92:63:42:f3:5e:0e:9e: d0:67:42:09:ab:48:e7:7e:3e:ca:c9:eb:ba:01:f3: 45:bb:9d:19:12:e3:fd:48:b9:b6:cc:4a:69:03:a8: e4:ce:f3:e8:43:e2:c3:6d:3b:d6:cf:86:2b:1c:04: e0:30:fd:34:28:32:6b:8c:7b:8b:8c:8c:c2:69:22: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:84:B7:EE:F1:D6:56:82:2A:ED:E9:19:CE:27:01:ED:22:5A:72:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6f:d3:57:3f:73:2d:0f:40:f8:6b:0b:0b:a3:8f:bf:34:97: e7:9f:31:f4:5a:4e:f0:b7:dc:a5:0d:69:ea:d9:cd:a2:63:f2: e9:cb:a7:7d:5d:b8:13:12:59:e1:dd:ff:73:20:79:60:8f:c6: 63:fd:cf:98:a9:e2:f3:dc:73:cd:60:83:ef:b7:ab:c8:2e:1e: 6e:a0:22:ec:51:76:db:14:f8:3e:f3:58:73:ac:36:17:20:52: ca:fa:59:4b:be:99:43:98:a4:20:43:cc:8d:0f:55:86:d8:8a: cf:b2:ec:8b:e3:9c:a9:d8:7b:d9:26:51:e8:0b:67:bd:4b:77: 1c:ca:21:88:f2:f1:c5:51:4c:7e:ad:e5:61:a5:d3:7b:f2:c9: 00:89:b9:a3:f9:b9:91:d1:07:3d:a0:69:47:a5:f5:bf:ef:45: 5d:ef:89:39:b0:b7:d9:70:10:7a:ad:7f:44:4c:45:b8:e5:d6: 6b:0e:15:3a:c9:c2:d5:eb:a8:ea:f7:70:78:e3:f8:92:e6:bc: 60:a8:75:2f:35:a2:6f:41:61:5a:ed:2c:60:e3:db:e4:ea:59: cb:b6:9f:2e:6d:cb:f8:ac:60:0b:68:24:8b:28:9a:4a:b0:53: c0:e0:33:db:f4:49:53:09:da:2d:37:20:07:02:7b:fc:2f:96: ba:d3:e6:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS78nVh8o3ImI1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjUwYmQzZDUtOWRmMi00ZjgyLTkyMzktMmEzZjg2MGVjNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05FIGJgJbtRZkQJiKXmQPIXSgp2EfKGo4eoa QNo5L9x3M6GxQ4kdE4vg3N3/9BXYG1aPcwvfBnfFigpc/ko/T1p/TTd9pjhpS/KG 4pL7PgcHqORFYDsyGsCc/6YkwAQdvUXsvZNTL6rL52zokveGc0Ftl2rZGBN3BcHL UQHUqDjBeAe3cXdshkZHuqytVXAQOtmd/8zmbLxMUM/y6NeVXOpAZyRf1t3BNnkK QZC0ed+JsWgKpuKoJdMi+pJjQvNeDp7QZ0IJq0jnfj7Kyeu6AfNFu50ZEuP9SLm2 zEppA6jkzvPoQ+LDbTvWz4YrHATgMP00KDJrjHuLjIzCaSKUiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmEt+7x1laCKu3pGc4nAe0iWnLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTEwOGM1NWEtZDJjMC0z Y2YyLWE2NmItODY3NGE3MGU0Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhv01c/cy0PQPhrCwujj780l+efMfRaTvC33KUNaerZzaJj8unLp31d uBMSWeHd/3MgeWCPxmP9z5ip4vPcc81gg++3q8guHm6gIuxRdtsU+D7zWHOsNhcg Usr6WUu+mUOYpCBDzI0PVYbYis+y7IvjnKnYe9kmUegLZ71LdxzKIYjy8cVRTH6t 5WGl03vyyQCJuaP5uZHRBz2gaUel9b/vRV3viTmwt9lwEHqtf0RMRbjl1msOFTrJ wtXrqOr3cHjj+JLmvGCodS81om9BYVrtLGDj2+TqWcu2ny5ty/isYAtoJIsomkqw U8DgM9v0SVMJ2i03IAcCe/wvlrrT5ho= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:21 2025 by rpki-client