$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e11929-fdd9-378d-af31-383f73149602.roa File: 41e11929-fdd9-378d-af31-383f73149602.roa (raw, json) Hash identifier: DlaM0tS4wWPtPBEq1HYZnW+pAv2oDWQhBP/3QIVv10s= Subject key identifier: F1:49:62:FD:B7:49:89:66:74:D5:F9:01:AD:03:FF:7E:33:80:7D:CD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C0204B935FF6BC6223280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e11929-fdd9-378d-af31-383f73149602.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:02:04:b9:35:ff:6b:c6:22:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9d11998e-d514-4433-9a98-4c5a9b430592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:50:45:e5:1c:eb:fa:be:45:d0:21:e1:bb: c8:26:a8:14:f1:4b:1c:06:09:7e:30:57:85:d6:e6: f7:0c:17:59:d9:d2:22:a8:49:a9:76:55:18:44:55: 06:35:04:8a:55:da:e4:88:f7:41:44:3d:20:d4:ba: 01:fa:04:f2:64:55:44:dd:2a:29:68:31:3f:8b:8e: 16:bd:4f:57:4a:bd:5b:52:f0:97:91:48:11:bc:20: 39:5a:ba:ba:74:22:bc:94:3a:c2:8b:30:05:f3:f2: fc:4a:b7:8f:a0:2a:6c:12:a0:f6:98:27:e7:38:52: d1:1f:f2:6f:71:fd:70:ba:39:75:84:11:da:62:e9: 67:e9:80:bc:76:b0:af:60:9c:f4:a6:37:90:33:7a: 51:34:fc:9f:d7:c4:0a:f5:2c:f2:5c:03:54:4f:f6: 97:99:06:22:08:ec:a0:8c:de:68:75:74:b1:3e:67: bb:e0:4e:8f:c8:ec:96:03:57:89:f6:fe:d1:4c:54: 01:5f:e0:54:94:39:92:4b:c1:1d:a5:f2:4c:62:1e: 6a:61:80:28:5c:04:f7:84:9c:e0:15:16:fc:8d:ce: 26:be:f4:af:ca:39:f9:c4:9f:df:49:12:85:7f:84: f1:3d:3b:a0:ab:14:e7:dc:f7:d8:67:01:b2:0e:6d: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:49:62:FD:B7:49:89:66:74:D5:F9:01:AD:03:FF:7E:33:80:7D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e11929-fdd9-378d-af31-383f73149602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b5:cb:48:fd:f9:82:19:cc:cc:8b:0b:a9:18:a0:12:98:4c: 29:bf:88:b7:d3:15:e7:7c:55:f3:75:de:7d:bd:15:86:28:e3: 32:28:c4:e3:6b:b3:01:c3:96:40:25:be:a5:f1:5f:2c:03:db: 47:ac:10:96:3b:ef:94:8c:e0:5f:8d:64:89:08:c5:22:95:e5: ab:1e:59:8a:5d:ff:ab:4c:4d:32:36:f0:46:20:8d:09:46:71: 08:ed:57:09:ee:23:06:bc:9a:b9:89:46:4c:e8:cf:5e:0b:2a: 70:2d:1d:ac:33:32:29:25:53:49:d3:a3:32:32:8d:60:53:e4: 48:1c:f7:6b:ee:fc:3c:7f:50:6b:b1:1e:2f:b4:7f:55:0e:33: b0:5e:8d:7c:c4:0c:ad:2f:32:04:32:89:23:48:1f:e5:b4:56: 97:72:31:94:91:a6:df:1c:70:ef:52:13:99:36:b6:9b:8c:9c: 47:4c:39:64:d4:5b:b2:78:e3:5f:27:d0:0d:10:a3:9b:d5:c6: bb:dc:92:51:a5:55:19:61:91:69:65:65:db:3c:57:f5:d8:22: ce:5d:9a:6f:2f:3d:75:7a:99:46:20:e6:8d:eb:63:a7:be:ed: d2:d1:d1:af:c2:72:ac:2e:b2:0c:07:a4:7a:ad:46:ba:3f:16: 5c:44:99:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAIEuTX/a8YiMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWQxMTk5OGUtZDUxNC00NDMzLTlhOTgtNGM1YTliNDMwNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyJQReUc6/q+RdAh4bvIJqgU8UscBgl+MFeF 1ub3DBdZ2dIiqEmpdlUYRFUGNQSKVdrkiPdBRD0g1LoB+gTyZFVE3SopaDE/i44W vU9XSr1bUvCXkUgRvCA5Wrq6dCK8lDrCizAF8/L8SrePoCpsEqD2mCfnOFLRH/Jv cf1wujl1hBHaYuln6YC8drCvYJz0pjeQM3pRNPyf18QK9SzyXANUT/aXmQYiCOyg jN5odXSxPme74E6PyOyWA1eJ9v7RTFQBX+BUlDmSS8EdpfJMYh5qYYAoXAT3hJzg FRb8jc4mvvSvyjn5xJ/fSRKFf4TxPTugqxTn3PfYZwGyDm3BxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFJYv23SYlmdNX5Aa0D/34zgH3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFlMTE5MjktZmRkOS0z NzhkLWFmMzEtMzgzZjczMTQ5NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG1y0j9+YIZzMyLC6kYoBKYTCm/iLfTFed8VfN13n29FYYo4zIoxONr swHDlkAlvqXxXywD20esEJY775SM4F+NZIkIxSKV5aseWYpd/6tMTTI28EYgjQlG cQjtVwnuIwa8mrmJRkzoz14LKnAtHawzMiklU0nTozIyjWBT5Egc92vu/Dx/UGux Hi+0f1UOM7BejXzEDK0vMgQyiSNIH+W0VpdyMZSRpt8ccO9SE5k2tpuMnEdMOWTU W7J4418n0A0Qo5vVxrvcklGlVRlhkWllZds8V/XYIs5dmm8vPXV6mUYg5o3rY6e+ 7dLR0a/CcqwusgwHpHqtRro/FlxEmWk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:06 2025 by rpki-client