$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa File: 2917b113-9e5f-3763-84e3-6da8775eeb3e.roa (raw, json) Hash identifier: buYOIjYJLNgRTzIapYTqz3f4K++p7ilzW0sV2JoayDo= Subject key identifier: 61:2B:6E:98:36:39:04:8A:98:17:80:C5:9C:7F:76:3F:6B:79:61:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BD5D0E01890E7EBB795C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d5:d0:e0:18:90:e7:eb:b7:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c7152d2c-3ebe-4702-8413-8f9218929ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:04:76:5e:a4:db:07:f6:56:ae:7a:85:e7: d7:3f:ca:e8:d1:bc:cc:cd:b1:f0:55:d7:00:8f:67: 70:44:3e:97:7b:99:de:e5:ef:80:f9:b2:f8:12:21: 7f:2f:cd:d6:02:40:43:1d:ad:46:15:ce:72:1e:c1: 0a:89:3e:da:82:23:48:27:d4:0f:46:e4:7c:9d:63: a6:b1:16:38:c6:f3:79:36:85:5f:38:b7:20:63:10: 13:84:71:a5:79:2a:3a:13:43:72:01:91:53:4d:c3: 47:11:52:3c:70:ec:d2:5c:e6:9d:18:bb:37:86:a1: f6:9e:fb:b3:7f:50:dc:d7:9c:ee:86:7c:f3:c1:64: 3e:d1:ce:c8:e8:5c:39:5d:20:93:7a:b6:19:f5:e9: 69:23:5a:8b:7d:f2:27:1e:c2:d8:2f:09:4f:b0:31: 0b:fa:e5:14:89:62:fa:05:6f:e6:5d:c5:f1:00:ab: 6d:10:eb:77:16:5f:2c:b4:ff:63:74:35:fb:b9:66: 8e:8b:57:c4:18:20:c8:ef:ff:c3:30:d9:d4:08:28: 8f:76:79:b6:0d:1e:0f:3b:53:b2:54:a4:53:f1:16: 4f:18:ac:6b:35:c4:9e:31:bb:3a:41:bd:c0:79:46: da:95:ff:f8:e0:c3:38:47:e3:cb:aa:9c:9a:d7:ee: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2B:6E:98:36:39:04:8A:98:17:80:C5:9C:7F:76:3F:6B:79:61:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1b:f8:91:5f:8d:16:67:52:60:3e:c1:f8:66:c2:cc:21:7b: f0:1f:1e:43:cb:51:11:0e:62:a4:4a:86:d3:58:45:5d:16:9c: aa:3c:18:65:ec:70:9c:bc:46:f9:44:b5:c3:e8:c8:eb:63:35: 2d:ad:16:5e:fa:fc:f6:dc:2c:aa:84:7f:4d:fc:2d:6c:48:74: 5f:99:40:b9:f3:76:04:b8:63:f5:ae:6d:5a:10:53:87:5b:49: 4b:11:11:75:81:d3:9e:6e:17:21:e4:3b:64:89:a4:ef:2c:6b: 45:39:ad:8c:ca:b7:a2:f0:62:47:6e:f8:d1:26:b6:5a:6e:b4: 05:81:e2:2a:6d:0a:72:4d:a6:48:75:75:de:7a:17:63:b4:9b: 68:2f:40:95:08:f3:a7:cb:e6:70:16:a7:f7:70:ac:3b:5b:c9: d9:9a:b8:68:df:ae:f8:77:17:52:93:45:dd:83:3f:bd:73:0b: 9e:80:ae:82:b8:34:72:cc:a2:a1:af:a6:44:67:f4:9f:8e:8e: bf:5f:b2:fc:27:cd:27:06:ce:e8:ed:61:e4:f9:03:cb:4b:3b: 18:81:b4:d2:2c:f0:4c:94:9b:39:9a:7b:b0:c9:68:34:f0:a8: 56:a4:00:06:99:7f:e6:81:26:0d:03:83:5c:77:f4:b7:4d:ac: 23:1e:e5:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9XQ4BiQ5+u3lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzcxNTJkMmMtM2ViZS00NzAyLTg0MTMtOGY5MjE4OTI5ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXgEdl6k2wf2Vq56hefXP8ro0bzMzbHwVdcA j2dwRD6Xe5ne5e+A+bL4EiF/L83WAkBDHa1GFc5yHsEKiT7agiNIJ9QPRuR8nWOm sRY4xvN5NoVfOLcgYxAThHGleSo6E0NyAZFTTcNHEVI8cOzSXOadGLs3hqH2nvuz f1Dc15zuhnzzwWQ+0c7I6Fw5XSCTerYZ9elpI1qLffInHsLYLwlPsDEL+uUUiWL6 BW/mXcXxAKttEOt3Fl8stP9jdDX7uWaOi1fEGCDI7//DMNnUCCiPdnm2DR4PO1Oy VKRT8RZPGKxrNcSeMbs6Qb3AeUbalf/44MM4R+PLqpya1+7gSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGErbpg2OQSKmBeAxZx/dj9reWGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkxN2IxMTMtOWU1Zi0z NzYzLTg0ZTMtNmRhODc3NWVlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgb+JFfjRZnUmA+wfhmwswhe/AfHkPLUREOYqRKhtNYRV0WnKo8GGXs cJy8RvlEtcPoyOtjNS2tFl76/PbcLKqEf038LWxIdF+ZQLnzdgS4Y/WubVoQU4db SUsREXWB055uFyHkO2SJpO8sa0U5rYzKt6LwYkdu+NEmtlputAWB4iptCnJNpkh1 dd56F2O0m2gvQJUI86fL5nAWp/dwrDtbydmauGjfrvh3F1KTRd2DP71zC56AroK4 NHLMoqGvpkRn9J+Ojr9fsvwnzScGzujtYeT5A8tLOxiBtNIs8EyUmzmae7DJaDTw qFakAAaZf+aBJg0Dg1x39LdNrCMe5Tk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:57 2025 by rpki-client