$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json) Hash identifier: XM1/nxHMym3OmdkYmJXEyWUu/PRh0Jxv5abfKHHx7jo= Subject key identifier: 2A:05:E5:8D:38:FA:1B:56:C3:60:D4:2D:66:61:C1:F2:25:9E:48:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BB12556921934AAA4B300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b1:25:56:92:19:34:aa:a4:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1f895eca-4be1-43d8-b235-de5e93e6d2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:35:e3:6b:f9:4a:10:8a:02:b2:ad:c3:87: ec:4d:6d:8f:00:0e:f1:b7:39:7d:55:df:4e:1c:5f: 82:74:82:96:b8:3e:fd:21:f7:e1:2f:14:20:ef:c2: 50:43:1a:a5:e6:c3:3f:90:23:d9:93:1e:3a:0c:62: 8b:c0:0e:a1:15:78:3e:0f:78:b8:54:71:e1:5f:bb: d7:51:6b:6e:45:97:44:86:13:d1:d9:1f:3f:4e:09: 81:9c:8c:6e:f9:1a:60:a0:aa:99:37:ab:80:33:a0: 71:f7:16:6b:7b:c0:81:eb:35:db:1f:1c:23:22:94: f2:ec:c1:d9:1c:1d:72:aa:0a:f7:19:d2:5f:2e:7c: 77:3e:bc:47:a9:8c:b8:8b:4e:90:88:78:22:ab:3f: 3f:1f:4e:63:1d:42:c8:42:75:bf:59:ab:c7:91:1b: d0:69:36:89:14:b1:96:97:76:c7:d6:ad:90:be:c5: 85:d9:a0:49:92:a3:f5:d7:56:4e:47:69:c0:39:59: b8:43:33:8d:e3:51:9b:73:aa:aa:fa:04:9b:e3:a2: 8e:0a:d8:51:e4:8c:23:22:6e:2c:7a:25:17:56:c6: a7:f4:7a:77:5c:8a:23:c2:a7:3e:2c:c0:4a:86:73: d9:53:d9:46:5f:f8:21:1f:50:e4:97:72:a9:2b:06: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:05:E5:8D:38:FA:1B:56:C3:60:D4:2D:66:61:C1:F2:25:9E:48:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:73:0b:e8:df:2d:f6:35:e4:55:49:67:08:4d:75:df:b7:8e: 5d:23:bb:e2:ab:fe:72:23:e6:51:d2:dc:9e:d6:0e:15:d1:b7: 5b:3e:b2:ae:04:66:4c:a2:8b:c0:93:67:47:d8:95:14:da:3e: e4:0e:26:a7:1f:9e:52:c8:c0:78:d8:80:44:8b:75:58:73:28: f6:11:01:fc:78:20:d7:5d:99:47:f0:b2:5d:50:d2:5c:48:37: d7:01:3b:34:cb:56:e8:71:82:b6:d3:37:fa:3a:05:49:df:2a: 8e:78:d4:27:3a:52:58:be:b4:1d:7c:41:7a:2e:33:2b:59:38: 9f:ad:21:d6:82:8d:8e:99:17:70:43:09:c1:e7:62:78:80:8a: 36:3a:02:5a:f5:f1:f0:1b:d1:ff:cd:26:e2:f6:10:10:23:a8: c0:e1:73:af:72:f9:82:0a:bb:1b:ad:ca:ab:31:9b:ca:b0:13: a3:39:32:c3:af:43:c5:bd:a7:49:2a:a7:01:6f:00:1f:04:8a: 4d:ba:e9:55:73:c6:e9:d4:cc:50:9d:a1:93:c3:c3:df:64:0d: ff:59:68:1c:73:5f:6d:c8:6e:42:b5:4c:09:fd:b2:bb:ae:26: 19:b7:9e:2e:72:1d:a8:2f:a5:cc:d4:10:85:2e:22:8d:02:32: e5:64:58:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7ElVpIZNKqkswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWY4OTVlY2EtNGJlMS00M2Q4LWIyMzUtZGU1ZTkzZTZkMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/I142v5ShCKArKtw4fsTW2PAA7xtzl9Vd9O HF+CdIKWuD79IffhLxQg78JQQxql5sM/kCPZkx46DGKLwA6hFXg+D3i4VHHhX7vX UWtuRZdEhhPR2R8/TgmBnIxu+RpgoKqZN6uAM6Bx9xZre8CB6zXbHxwjIpTy7MHZ HB1yqgr3GdJfLnx3PrxHqYy4i06QiHgiqz8/H05jHULIQnW/WavHkRvQaTaJFLGW l3bH1q2QvsWF2aBJkqP111ZOR2nAOVm4QzON41Gbc6qq+gSb46KOCthR5IwjIm4s eiUXVsan9Hp3XIojwqc+LMBKhnPZU9lGX/ghH1Dkl3KpKwayDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoF5Y04+htWw2DULWZhwfIlnkjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FmMzI1NDItYzlmNS0z MTExLTkyYWYtODBlOTRhOTMxYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJzC+jfLfY15FVJZwhNdd+3jl0ju+Kr/nIj5lHS3J7WDhXRt1s+sq4E Zkyii8CTZ0fYlRTaPuQOJqcfnlLIwHjYgESLdVhzKPYRAfx4INddmUfwsl1Q0lxI N9cBOzTLVuhxgrbTN/o6BUnfKo541Cc6Uli+tB18QXouMytZOJ+tIdaCjY6ZF3BD CcHnYniAijY6Alr18fAb0f/NJuL2EBAjqMDhc69y+YIKuxutyqsxm8qwE6M5MsOv Q8W9p0kqpwFvAB8Eik266VVzxunUzFCdoZPDw99kDf9ZaBxzX23IbkK1TAn9sruu Jhm3ni5yHagvpczUEIUuIo0CMuVkWOg= -----END CERTIFICATE-----Generated at Fri Apr 4 08:50:03 2025 by rpki-client