$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json) Hash identifier: Adf1C8IGDSqnl9+5geKNOqEWEblOwL8OUYVlz+5AGAU= Subject key identifier: AE:09:67:FE:41:96:00:E1:A9:A3:47:C2:6D:79:B5:73:2C:49:0C:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F4DAEA141952DA4623A200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 70.32.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:da:ea:14:19:52:da:46:23:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=bb37ab65-0633-4e5e-87b1-01175f2d2b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ae:69:a1:8e:f9:61:92:dc:6f:0d:55:cb:f0: 20:13:fc:32:66:a8:5b:5d:5d:b9:55:e0:80:81:71: 72:22:68:45:6e:5c:23:ae:15:23:ee:1f:7a:6b:98: 13:91:68:05:5e:3c:d5:6f:66:68:a3:29:40:2a:13: 6b:6e:fa:6b:28:4f:ce:2d:c1:6a:d1:cc:ed:05:36: fe:77:90:d1:21:53:18:42:00:b2:eb:ad:b1:61:92: 04:da:f8:9d:ed:14:86:1c:41:58:8f:be:90:dd:e6: dd:e7:09:b0:8e:58:e3:94:5f:62:f5:e0:32:1d:d4: 55:8f:a6:6a:03:7d:be:3d:8a:e4:62:db:30:27:e1: d8:88:43:35:23:77:61:c9:8f:57:bd:09:c5:30:51: be:c3:11:aa:6f:2b:b7:5e:82:67:14:25:40:09:b0: 30:ec:00:3c:41:c4:04:07:f1:e1:ce:65:ee:6c:16: 31:5b:e9:da:75:e5:12:29:ab:b1:e1:5e:1e:3b:f1: c2:15:6b:d7:28:c1:00:3c:ee:9b:25:82:8b:08:5a: 81:e5:2a:b2:c3:ce:d7:95:e6:8e:54:e8:1c:35:f7: 2b:40:e2:98:a5:a8:3c:c6:12:a2:3a:8d:24:4a:31: 13:18:ba:1e:7b:ff:86:38:1a:c3:78:7f:cf:b8:e1: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:09:67:FE:41:96:00:E1:A9:A3:47:C2:6D:79:B5:73:2C:49:0C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4b:34:8c:ee:f4:77:05:be:1c:84:cc:36:da:08:0e:dd:01: eb:0f:f1:ab:f8:d4:4e:23:48:c6:34:fe:4b:c0:d9:b9:b5:b9: c8:2d:94:4d:f5:ba:11:bf:7e:42:8d:b0:ca:40:f5:f1:55:8f: 4b:95:0b:9c:d4:0b:12:87:e5:11:98:45:8f:84:9f:f8:e9:b7: bc:b8:dc:97:94:7e:8f:dd:ea:ef:38:2f:29:f4:72:2e:80:80: f9:a6:4f:7f:86:cc:d3:9b:ec:7a:1c:b5:89:92:e0:35:05:16: a3:7a:7a:95:2d:99:25:0f:75:d7:10:7a:bc:26:a2:52:bb:4b: d9:a1:71:a5:36:e2:51:82:a0:34:0d:51:fe:77:12:56:20:07: ae:26:35:03:aa:c4:df:9c:6a:86:2d:18:33:1e:35:70:83:a0: e2:aa:ea:da:c9:7e:51:12:f2:12:cb:02:ed:24:b7:01:0d:84: 3b:56:35:59:65:e7:34:db:f2:66:61:f0:ae:6d:53:b0:d1:51: 2d:4f:9c:68:b2:68:f0:60:9c:5f:5a:28:f3:61:3c:31:80:2a: 98:47:3b:0f:23:29:49:77:2d:dc:01:01:40:a3:03:8f:81:0a: bc:b3:be:5f:1c:fa:dc:87:16:5b:24:49:a7:58:3c:81:02:6e: 39:4c:c7:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9NrqFBlS2kYjogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YmIzN2FiNjUtMDYzMy00ZTVlLTg3YjEtMDExNzVmMmQyYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq5poY75YZLcbw1Vy/AgE/wyZqhbXV25VeCA gXFyImhFblwjrhUj7h96a5gTkWgFXjzVb2ZooylAKhNrbvprKE/OLcFq0cztBTb+ d5DRIVMYQgCy662xYZIE2vid7RSGHEFYj76Q3ebd5wmwjljjlF9i9eAyHdRVj6Zq A32+PYrkYtswJ+HYiEM1I3dhyY9XvQnFMFG+wxGqbyu3XoJnFCVACbAw7AA8QcQE B/HhzmXubBYxW+nadeUSKaux4V4eO/HCFWvXKMEAPO6bJYKLCFqB5Sqyw87XleaO VOgcNfcrQOKYpag8xhKiOo0kSjETGLoee/+GOBrDeH/PuOEAfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4JZ/5BlgDhqaNHwm15tXMsSQyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FmMzI1NDItYzlmNS0z MTExLTkyYWYtODBlOTRhOTMxYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZLNIzu9HcFvhyEzDbaCA7dAesP8av41E4jSMY0/kvA2bm1ucgtlE31 uhG/fkKNsMpA9fFVj0uVC5zUCxKH5RGYRY+En/jpt7y43JeUfo/d6u84Lyn0ci6A gPmmT3+GzNOb7HoctYmS4DUFFqN6epUtmSUPddcQerwmolK7S9mhcaU24lGCoDQN Uf53ElYgB64mNQOqxN+caoYtGDMeNXCDoOKq6trJflES8hLLAu0ktwENhDtWNVll 5zTb8mZh8K5tU7DRUS1PnGiyaPBgnF9aKPNhPDGAKphHOw8jKUl3LdwBAUCjA4+B Cryzvl8c+tyHFlskSadYPIECbjlMx4s= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:15 2024 by rpki-client on console-fra.rpki-client.org