$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa File: 60899ba4-2e02-3634-b503-2d70ad64f496.roa (raw, json) Hash identifier: keXy49AQd0YUF1fyUSgMiYDtezDTMipeGE4dlvYlTxk= Subject key identifier: 0B:EA:39:48:8F:56:99:5D:6D:87:F6:5A:EB:28:53:4E:9A:BA:FE:8E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BC7D78B55C85C8EF28EC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c7:d7:8b:55:c8:5c:8e:f2:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=45806ec9-1f1b-4af4-b19e-54db81cb881e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f0:b5:2d:8a:24:4a:ca:5a:af:ba:6d:ca:d0: b8:45:36:fc:ed:ee:3b:07:dd:a5:a4:3c:cf:25:13: 81:05:b5:a3:a1:c4:ef:ab:01:f1:2e:9f:2c:85:b8: a1:cd:12:c8:dd:2f:78:9e:81:66:7a:0f:74:9c:83: a5:ab:5c:19:75:be:54:0e:45:01:94:e0:1b:6a:a5: 82:82:45:bd:4b:59:fd:4e:b1:7b:b6:0e:0d:8f:0d: ef:c8:bd:13:92:47:ff:ef:93:d8:31:c1:a2:9f:9b: da:d2:bf:0e:56:02:af:35:e2:8a:a5:4d:b2:84:71: 0a:1e:50:d3:3c:42:20:4d:fd:ce:ba:60:b3:c8:16: 74:90:3b:2c:53:0b:bb:47:49:07:1c:e8:d0:ac:48: 6d:35:b9:29:30:ec:f0:0a:ac:eb:d0:7e:5e:73:09: d5:29:86:25:28:e4:91:0f:d0:0c:aa:52:02:9e:4f: 25:90:72:dc:f6:f1:c9:db:be:fe:d0:6a:fe:59:8d: 43:fa:39:87:59:2a:69:e2:bf:56:c6:da:b3:9e:9d: 86:1a:33:fb:26:8c:70:ad:27:3d:49:b2:da:e8:a0: fc:6d:5e:b5:40:1f:34:84:9c:90:37:f9:51:68:4f: 56:4f:07:0e:26:0f:6d:fe:31:03:ad:d2:fb:1b:cc: 91:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EA:39:48:8F:56:99:5D:6D:87:F6:5A:EB:28:53:4E:9A:BA:FE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:4a:36:e9:d2:60:71:ef:8e:1f:2f:f7:43:f5:46:0a:c6:6e: 23:bc:d6:94:28:05:2e:09:ce:a9:84:d6:29:fd:cf:4c:0e:3c: cc:2f:13:3a:41:2f:10:47:c4:47:ed:33:45:c0:6e:90:1a:97: 7b:72:2c:e2:00:18:f2:47:33:fc:18:2e:ad:f5:ef:e1:99:49: 5d:56:ec:16:a5:7e:01:f3:15:f9:62:07:05:04:a0:82:c8:f1: 55:35:18:51:2c:79:eb:94:49:df:b3:ef:ea:17:c8:53:f7:df: d8:f8:5f:c9:7c:91:fe:37:a9:c9:04:c3:3c:3e:a9:b7:d6:86: 2e:88:f6:53:df:1f:ad:91:c2:38:7d:75:91:db:44:f8:d0:c9: b4:38:e5:ea:ca:d6:68:3a:ea:95:41:aa:2d:9b:40:8d:78:7a: d9:d2:1d:70:8e:e5:31:73:a2:83:6a:ab:ea:d7:d9:25:d5:30: 04:dc:23:09:1b:5a:48:e2:1c:ac:56:91:87:e1:c9:94:fe:b1: e3:33:d1:65:a7:80:35:ff:9a:78:5f:e8:80:de:d9:f2:9a:96: ca:c1:39:75:c6:93:fa:ce:d2:6d:28:bb:8e:3a:1b:d4:a2:54: e5:30:48:a7:6e:06:08:2a:96:4e:ab:86:d9:73:6d:d6:b7:ca: 01:19:45:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8fXi1XIXI7yjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NDU4MDZlYzktMWYxYi00YWY0LWIxOWUtNTRkYjgxY2I4ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vC1LYokSspar7ptytC4RTb87e47B92lpDzP JROBBbWjocTvqwHxLp8shbihzRLI3S94noFmeg90nIOlq1wZdb5UDkUBlOAbaqWC gkW9S1n9TrF7tg4Njw3vyL0Tkkf/75PYMcGin5va0r8OVgKvNeKKpU2yhHEKHlDT PEIgTf3OumCzyBZ0kDssUwu7R0kHHOjQrEhtNbkpMOzwCqzr0H5ecwnVKYYlKOSR D9AMqlICnk8lkHLc9vHJ277+0Gr+WY1D+jmHWSpp4r9Wxtqznp2GGjP7JoxwrSc9 SbLa6KD8bV61QB80hJyQN/lRaE9WTwcOJg9t/jEDrdL7G8yRNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvqOUiPVpldbYf2WusoU06auv6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjA4OTliYTQtMmUwMi0z NjM0LWI1MDMtMmQ3MGFkNjRmNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNKNunSYHHvjh8v90P1RgrGbiO81pQoBS4JzqmE1in9z0wOPMwvEzpB LxBHxEftM0XAbpAal3tyLOIAGPJHM/wYLq317+GZSV1W7BalfgHzFfliBwUEoILI 8VU1GFEseeuUSd+z7+oXyFP339j4X8l8kf43qckEwzw+qbfWhi6I9lPfH62Rwjh9 dZHbRPjQybQ45erK1mg66pVBqi2bQI14etnSHXCO5TFzooNqq+rX2SXVMATcIwkb WkjiHKxWkYfhyZT+seMz0WWngDX/mnhf6IDe2fKalsrBOXXGk/rO0m0ou446G9Si VOUwSKduBggqlk6rhtlzbda3ygEZRbQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:22 2025 by rpki-client