$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa File: 34bcf9a3-a232-3124-a010-fbd2231925d1.roa (raw, json) Hash identifier: xXJDNP0Wms/vid7gNTFiVLVgq2qdbc+OAHXdvFWlcm4= Subject key identifier: 1C:F0:2A:35:70:01:DE:E8:B6:50:33:E7:1A:68:7D:5D:49:6F:65:9A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BF78C8B5934970F186640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f7:8c:8b:59:34:97:0f:18:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=95d3d5df-1e82-4037-aa0c-f6aa4c5a39d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:be:3a:d6:6e:31:6b:b9:4b:b1:88:9b:8a: 3f:4d:b3:7b:a9:bd:46:18:bf:38:b3:56:1f:7d:e1: e7:36:11:48:29:05:fe:68:6d:77:bf:5b:d6:1f:da: 42:f5:e4:ea:af:b4:b7:bf:a7:f6:f4:80:e0:a2:87: 22:62:e4:a4:57:f1:28:c1:21:34:68:ba:56:d4:42: 52:07:f0:17:4a:ad:07:b6:2b:47:43:a8:ae:c0:ea: 81:56:a3:2f:14:94:10:0d:c3:29:14:58:84:d3:9b: 04:83:6f:72:b3:87:bd:dd:fe:aa:33:e0:d3:d3:53: 21:fc:ac:94:d0:ed:bf:10:ca:6f:3f:95:04:18:1e: d9:e1:26:4a:2c:f9:03:a8:05:48:df:17:48:61:47: 8b:6e:42:9e:11:8c:3e:04:61:b5:21:1e:c4:07:67: 8c:b2:88:91:c5:08:0d:9a:d2:11:cd:0d:f2:4f:ef: a3:9d:c3:6f:e9:a0:f9:bb:91:aa:59:4b:db:c7:1e: 19:38:5d:fa:98:9a:c1:b8:aa:fd:6c:9d:64:af:49: 17:b0:30:d5:db:17:41:dc:44:57:bd:22:1d:8f:ad: ec:8f:58:c8:0f:b3:a1:a6:71:a1:af:e0:68:8b:e7: 01:95:a8:c0:f7:88:0e:2e:c8:71:e0:b9:77:c8:16: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F0:2A:35:70:01:DE:E8:B6:50:33:E7:1A:68:7D:5D:49:6F:65:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:e4:0d:af:94:91:bd:2f:c1:f3:5e:be:b4:74:cb:0a:8b:67: a7:20:b9:f7:c2:cc:2a:8b:35:c0:65:e0:9b:71:da:4d:3f:2d: c4:e5:ee:04:8d:95:af:0c:cd:cd:8e:16:a3:df:c0:62:ac:12: 67:fe:e5:87:6d:a7:08:15:95:91:b1:5b:09:c7:b6:a2:08:4a: ca:1c:0e:e1:64:01:3b:3c:9d:fb:34:74:83:25:3b:8b:c9:5b: 43:bc:e3:e6:11:b5:d9:48:90:ff:79:b6:43:37:63:45:82:23: c2:55:b4:eb:82:64:41:e0:dc:40:7f:20:8c:a0:a5:d2:55:2a: 49:7a:82:8f:72:67:74:8e:f9:d0:c8:28:d3:e1:a7:0c:c4:f1: 69:54:1d:dd:d1:2f:18:26:1b:4c:13:3c:b3:c0:08:df:9f:5e: b1:71:8a:f6:06:a3:db:0e:0e:8d:af:e0:2d:22:cb:2a:51:85: 4b:cd:3c:1f:cb:df:16:6f:93:6a:85:29:c1:77:b6:36:f1:54: 0c:35:15:a9:46:ee:6d:d1:4f:25:7a:18:27:26:54:2d:0f:91: fd:69:e5:5b:6c:ed:ef:8f:83:dd:d9:93:c3:ec:22:4d:50:73: f7:d0:50:1d:3a:ba:97:cb:1b:37:91:e3:30:75:18:f3:30:13: ba:d7:d9:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/eMi1k0lw8YZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTVkM2Q1ZGYtMWU4Mi00MDM3LWFhMGMtZjZhYTRjNWEzOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9C+OtZuMWu5S7GIm4o/TbN7qb1GGL84s1Yf feHnNhFIKQX+aG13v1vWH9pC9eTqr7S3v6f29IDgoociYuSkV/EowSE0aLpW1EJS B/AXSq0HtitHQ6iuwOqBVqMvFJQQDcMpFFiE05sEg29ys4e93f6qM+DT01Mh/KyU 0O2/EMpvP5UEGB7Z4SZKLPkDqAVI3xdIYUeLbkKeEYw+BGG1IR7EB2eMsoiRxQgN mtIRzQ3yT++jncNv6aD5u5GqWUvbxx4ZOF36mJrBuKr9bJ1kr0kXsDDV2xdB3ERX vSIdj63sj1jID7OhpnGhr+Boi+cBlajA94gOLshx4Ll3yBZ8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzwKjVwAd7otlAz5xpofV1Jb2WaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzRiY2Y5YTMtYTIzMi0z MTI0LWEwMTAtZmJkMjIzMTkyNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3kDa+Ukb0vwfNevrR0ywqLZ6cguffCzCqLNcBl4Jtx2k0/LcTl7gSN la8Mzc2OFqPfwGKsEmf+5YdtpwgVlZGxWwnHtqIISsocDuFkATs8nfs0dIMlO4vJ W0O84+YRtdlIkP95tkM3Y0WCI8JVtOuCZEHg3EB/IIygpdJVKkl6go9yZ3SO+dDI KNPhpwzE8WlUHd3RLxgmG0wTPLPACN+fXrFxivYGo9sODo2v4C0iyypRhUvNPB/L 3xZvk2qFKcF3tjbxVAw1FalG7m3RTyV6GCcmVC0Pkf1p5Vts7e+Pg93Zk8PsIk1Q c/fQUB06upfLGzeR4zB1GPMwE7rX2dk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:27 2025 by rpki-client