$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa File: 555e037a-a202-3c23-9d76-142b857e9d3c.roa (raw, json) Hash identifier: b2cdPvJCoBUHNz4jlRcPmD49tp5mEIBGcuMny/Q3FAE= Subject key identifier: 0E:8E:E4:C9:5A:B9:20:4D:5C:8A:F5:DA:5A:5E:73:25:02:47:58:FA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BF0D6A7B8B3CCFE0E7E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f0:d6:a7:b8:b3:cc:fe:0e:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9efb45ec-dd4d-4570-a85f-b7364dea0efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:9a:15:30:0d:e6:18:d5:de:47:c5:39:5c: 12:1b:3e:27:de:0a:a9:b4:4c:fe:f0:2d:6d:a0:2e: ba:52:db:1b:dd:9c:1c:47:29:7b:66:72:3f:66:f0: fd:7e:cd:6e:f5:88:d3:87:b5:ab:fa:85:89:65:88: 30:ff:2c:0f:b2:a5:75:78:2a:94:d4:28:a2:9f:c3: 83:3d:f5:d1:e3:bd:b9:5f:04:00:c5:a4:1a:fd:6d: a6:a2:f9:d7:13:be:c1:86:51:07:ac:25:73:16:33: 8b:c3:e9:27:f7:b4:26:cf:e9:30:13:6c:d5:f5:42: 93:06:d4:1d:d5:35:fe:2c:3c:6e:2b:18:fd:e8:0f: 94:19:a8:a8:0d:63:eb:4d:7b:eb:ed:c3:03:b1:84: 1b:95:39:7c:b1:3c:28:07:c2:39:86:27:9f:53:a5: ab:35:79:a2:13:53:65:aa:54:5a:de:20:89:45:6b: 65:44:9f:b6:8f:1f:da:66:bb:08:fb:40:e0:db:18: 52:85:13:bc:ee:06:5c:a2:11:8a:d9:9d:ec:5e:29: 41:62:52:54:07:9a:09:d1:0d:99:a0:ab:f2:c2:d5: 59:cf:e5:8e:4c:de:39:8d:3c:96:d8:da:70:e3:cd: a2:c5:ac:43:ed:bf:41:4b:03:31:2b:b6:9f:a1:ab: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:E4:C9:5A:B9:20:4D:5C:8A:F5:DA:5A:5E:73:25:02:47:58:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:92:07:39:69:cf:cc:d8:84:c8:46:cc:51:63:21:70:95:3e: ea:30:fe:3b:0f:31:f1:1b:17:15:87:3b:fa:9e:5e:96:db:96: 81:73:ad:8d:27:70:a1:bc:f5:c5:7b:3d:de:1e:16:81:3a:c0: cc:83:f9:87:f3:e6:16:97:a4:12:33:be:f2:49:52:3d:65:4a: 64:a8:80:1f:b7:7e:4d:1d:b7:d4:ba:1d:07:25:bb:ed:9c:c2: 75:13:0a:95:2c:86:57:67:4f:40:07:11:65:12:a3:d1:3b:23: 35:e3:54:9b:60:67:2b:50:ee:44:fc:15:64:fe:34:e1:43:dd: b0:cd:1b:82:2f:ce:bf:c2:c9:69:93:a8:a4:c1:4a:31:1c:b0: a0:3a:74:94:21:11:e1:32:b0:53:3c:96:b5:ab:0f:99:f2:8d: ab:a2:c7:59:6e:4a:49:7b:1e:9b:2c:67:a7:d3:e0:7d:18:88: a3:ee:28:c4:8f:e0:a6:08:ff:ac:3c:17:92:5b:7f:29:f2:c9: 0a:25:13:23:6f:05:34:d2:64:d9:d1:67:81:bd:5a:fc:67:59: 7a:eb:1e:07:c8:57:35:78:a9:e1:43:55:00:0a:53:2f:be:f6: 8e:b5:74:d0:d8:30:92:0b:16:fb:87:11:70:25:0a:06:43:35: 42:6e:b0:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/DWp7izzP4OfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWVmYjQ1ZWMtZGQ0ZC00NTcwLWE4NWYtYjczNjRkZWEwZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEeaFTAN5hjV3kfFOVwSGz4n3gqptEz+8C1t oC66Utsb3ZwcRyl7ZnI/ZvD9fs1u9YjTh7Wr+oWJZYgw/ywPsqV1eCqU1Ciin8OD PfXR4725XwQAxaQa/W2movnXE77BhlEHrCVzFjOLw+kn97Qmz+kwE2zV9UKTBtQd 1TX+LDxuKxj96A+UGaioDWPrTXvr7cMDsYQblTl8sTwoB8I5hiefU6WrNXmiE1Nl qlRa3iCJRWtlRJ+2jx/aZrsI+0Dg2xhShRO87gZcohGK2Z3sXilBYlJUB5oJ0Q2Z oKvywtVZz+WOTN45jTyW2Npw482ixaxD7b9BSwMxK7afoat8owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6O5MlauSBNXIr12lpecyUCR1j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU1ZTAzN2EtYTIwMi0z YzIzLTlkNzYtMTQyYjg1N2U5ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiSBzlpz8zYhMhGzFFjIXCVPuow/jsPMfEbFxWHO/qeXpbbloFzrY0n cKG89cV7Pd4eFoE6wMyD+Yfz5haXpBIzvvJJUj1lSmSogB+3fk0dt9S6HQclu+2c wnUTCpUshldnT0AHEWUSo9E7IzXjVJtgZytQ7kT8FWT+NOFD3bDNG4Ivzr/CyWmT qKTBSjEcsKA6dJQhEeEysFM8lrWrD5nyjauix1luSkl7HpssZ6fT4H0YiKPuKMSP 4KYI/6w8F5JbfynyyQolEyNvBTTSZNnRZ4G9WvxnWXrrHgfIVzV4qeFDVQAKUy++ 9o61dNDYMJILFvuHEXAlCgZDNUJusAg= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:40 2025 by rpki-client