$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa File: 56a1775b-c9a6-31aa-9040-b34009d9f364.roa (raw, json) Hash identifier: glCjpSvBZlSO+rBlfRtFhLzhTvd3ADwd5E4k95mpBP0= Subject key identifier: F2:CF:54:7D:49:BD:57:64:0D:CB:4B:5E:CB:4B:0E:E4:63:14:F5:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BDC5BF853F98FC2AEDF40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:dc:5b:f8:53:f9:8f:c2:ae:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=d7b806e7-82b7-459d-91a8-b0f9598d1425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:0c:e9:c8:c6:1c:bc:96:62:c0:7f:c9:6d: 4b:f7:af:3c:d5:31:0b:17:b5:a8:cb:53:c6:76:98: 8a:b2:55:0d:f2:55:a1:0d:27:bf:93:6c:75:5f:89: 3f:28:7d:1a:37:c6:3b:2c:3b:46:aa:dc:dd:04:ca: 79:34:f1:e6:73:02:29:2b:32:b6:23:37:c8:e1:73: 01:16:31:70:b4:08:8d:86:35:94:75:c3:e1:e8:6d: 4d:5f:08:62:ac:4c:e2:37:98:46:60:43:94:d3:5b: 66:9d:14:54:5c:31:91:fe:7e:c8:44:99:78:77:65: 7e:a4:50:f4:e0:69:fb:35:07:7c:26:fd:9f:28:41: 59:97:06:9d:03:2b:a1:c8:fc:1d:65:75:bf:69:96: f2:8f:85:93:82:68:97:bc:7c:aa:89:ad:16:de:d1: 80:41:fe:02:b0:33:3f:bc:ca:30:99:e0:a6:31:c1: 95:18:f3:f4:72:a0:19:a1:06:e9:dd:1d:af:aa:fd: 2c:a4:82:c0:8b:14:3c:71:04:74:1c:06:d8:c0:51: d8:2e:7b:ed:cb:09:9b:b5:81:f4:d9:a3:d4:90:1e: 0c:2a:f4:0c:26:80:ee:ce:2f:c0:7c:57:84:5d:c4: 19:fc:fd:bf:dc:81:7e:1e:5d:a9:2b:11:6b:58:f5: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:54:7D:49:BD:57:64:0D:CB:4B:5E:CB:4B:0E:E4:63:14:F5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:da:48:97:b4:f1:af:fb:72:51:04:6e:bd:66:70:f1:37:93: 54:b8:8e:36:04:5d:48:d6:4a:47:5e:1c:86:51:4e:5e:60:f6: 25:c3:9c:86:30:af:5c:36:9a:b3:31:18:d3:79:16:9c:13:8a: 36:6e:56:fd:93:83:07:05:0b:19:71:1b:d5:4f:a2:d9:f8:be: 94:0f:16:8d:44:59:b6:9c:b1:08:aa:4e:7f:f8:14:d0:76:b3: f6:f0:e2:b9:d6:cd:f6:a8:1e:53:03:80:ee:ab:f3:50:22:70: 2d:e3:27:59:42:56:0e:12:f4:ac:b5:b6:8a:57:9b:43:3f:a6: 0a:1a:c9:5f:bf:ca:ef:3f:17:52:a6:8c:28:47:c0:c3:40:c8: 91:35:10:3b:dc:e2:c9:a5:e8:f2:b9:e1:e2:07:f7:d8:5e:03: 5a:90:f9:1c:bd:a0:45:8c:e6:cc:f5:dc:13:6f:54:99:58:5a: f4:60:3e:be:e2:5e:47:9d:47:f9:b0:5b:9a:b6:51:66:4a:36: a8:19:e2:26:78:1b:62:bf:4e:e6:71:88:05:b7:60:8e:cd:52: 41:d2:d2:ac:ae:da:b7:bb:9a:da:17:30:32:6f:af:fa:c2:7d: 7d:5b:d0:03:1b:84:5f:f0:bd:ab:02:33:2a:96:51:2a:f5:9b: dc:5d:b6:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9xb+FP5j8Ku30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZDdiODA2ZTctODJiNy00NTlkLTkxYTgtYjBmOTU5OGQxNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8AM6cjGHLyWYsB/yW1L96881TELF7Woy1PG dpiKslUN8lWhDSe/k2x1X4k/KH0aN8Y7LDtGqtzdBMp5NPHmcwIpKzK2IzfI4XMB FjFwtAiNhjWUdcPh6G1NXwhirEziN5hGYEOU01tmnRRUXDGR/n7IRJl4d2V+pFD0 4Gn7NQd8Jv2fKEFZlwadAyuhyPwdZXW/aZbyj4WTgmiXvHyqia0W3tGAQf4CsDM/ vMowmeCmMcGVGPP0cqAZoQbp3R2vqv0spILAixQ8cQR0HAbYwFHYLnvtywmbtYH0 2aPUkB4MKvQMJoDuzi/AfFeEXcQZ/P2/3IF+Hl2pKxFrWPXOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLPVH1JvVdkDctLXstLDuRjFPVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTZhMTc3NWItYzlhNi0z MWFhLTkwNDAtYjM0MDA5ZDlmMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDaSJe08a/7clEEbr1mcPE3k1S4jjYEXUjWSkdeHIZRTl5g9iXDnIYw r1w2mrMxGNN5FpwTijZuVv2TgwcFCxlxG9VPotn4vpQPFo1EWbacsQiqTn/4FNB2 s/bw4rnWzfaoHlMDgO6r81AicC3jJ1lCVg4S9Ky1topXm0M/pgoayV+/yu8/F1Km jChHwMNAyJE1EDvc4sml6PK54eIH99heA1qQ+Ry9oEWM5sz13BNvVJlYWvRgPr7i XkedR/mwW5q2UWZKNqgZ4iZ4G2K/TuZxiAW3YI7NUkHS0qyu2re7mtoXMDJvr/rC fX1b0AMbhF/wvasCMyqWUSr1m9xdtpQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:54 2025 by rpki-client