$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa File: 76a5dcab-2690-3314-84c7-093cd93650a1.roa (raw, json) Hash identifier: IRJ6obHdAG8aRpyXcvNFcl9EGYMX8BW42/AU8nxMXYs= Subject key identifier: 2E:08:DA:19:9A:27:81:39:FC:2E:FF:E3:D6:F6:89:04:FA:2A:AB:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BFA01EED3C75B19E6FE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fa:01:ee:d3:c7:5b:19:e6:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=87c0a480-b9ed-4fb5-9fea-081770d171a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:bc:9c:09:51:f8:9c:dc:7f:c5:c9:87:bc: 7a:0c:a8:d2:5e:59:73:92:14:63:0a:3e:98:81:cc: 1a:07:b4:34:2d:f0:39:e6:0f:ae:4e:60:23:2c:11: bb:94:4c:b1:6b:76:4e:32:7b:a9:d2:16:ca:4a:9f: 56:f0:fc:89:39:ac:db:3b:ae:65:7f:eb:59:43:07: 53:10:6e:4c:7c:1c:b3:14:d7:0e:c0:e0:51:21:fa: 7c:63:66:d2:0d:55:17:94:df:35:e0:a5:14:6a:ad: e4:0c:e1:b2:92:d1:9d:3e:7b:dc:b4:e3:fc:2a:62: b4:22:3c:38:ca:87:b1:6a:6f:f5:c1:71:f3:75:3e: 20:17:ce:7c:dc:82:32:73:56:ab:56:25:3e:68:a0: 50:3b:0c:2f:4f:b3:5e:30:49:d3:8d:d2:01:f1:ce: 97:a4:83:aa:f5:c3:94:66:86:6c:7e:c1:f2:9e:bb: 99:a5:0a:21:47:07:d8:cd:4d:23:10:f9:31:84:e9: 19:12:70:52:ad:a4:c0:11:50:d5:03:82:23:13:ba: 08:46:90:f5:64:55:4f:c2:0d:51:e6:a5:97:65:eb: 46:fa:20:95:fe:33:fb:8c:6e:bc:7c:72:83:d6:aa: 85:a9:f7:dd:21:4b:8c:a6:f7:37:bf:9e:e5:cd:1f: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:08:DA:19:9A:27:81:39:FC:2E:FF:E3:D6:F6:89:04:FA:2A:AB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bb:2a:58:91:91:78:a3:e7:58:21:f4:5a:49:73:ba:a8:72: e8:7e:c7:c1:68:08:39:74:a4:17:4e:c8:2c:d2:77:5d:fd:1d: 61:eb:4b:87:0f:0c:38:c5:3c:b5:f5:d2:d8:6f:e0:fc:04:56: 15:16:8c:9a:71:3c:2e:c5:9d:52:58:75:3f:2a:7b:c5:f7:26: e0:1c:b1:a8:93:1a:49:90:07:ba:43:22:56:23:b2:9b:b7:da: 66:94:97:5a:8e:d6:e5:bc:04:2e:93:58:cb:86:36:7d:d9:37: 43:49:fd:38:a5:7f:43:0b:ee:1d:48:1a:ac:b8:f8:81:53:b4: 8e:c9:0d:d5:8a:ef:56:b2:66:b8:ed:03:d3:bd:b8:a2:53:62: 49:8f:86:e6:dc:e5:c9:58:67:69:86:4f:90:47:98:25:bc:8e: 43:0a:4e:ac:83:ad:20:08:52:aa:d2:fd:4f:41:cb:ed:c5:49: ae:47:a2:1d:6d:a8:46:5e:fa:7a:f2:bf:70:96:8f:2a:a5:b0: d3:cf:40:3a:9a:ff:9f:b8:90:fb:c4:a1:78:2f:25:f5:07:84: 71:a9:de:e7:4f:c2:5b:fb:8d:bb:67:a4:dc:4c:50:36:71:d1: 41:d8:96:68:0d:ea:a1:49:4d:a8:3e:ce:a1:49:3b:0d:7f:59: f5:54:50:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/oB7tPHWxnm/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODdjMGE0ODAtYjllZC00ZmI1LTlmZWEtMDgxNzcwZDE3MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5S8nAlR+Jzcf8XJh7x6DKjSXllzkhRjCj6Y gcwaB7Q0LfA55g+uTmAjLBG7lEyxa3ZOMnup0hbKSp9W8PyJOazbO65lf+tZQwdT EG5MfByzFNcOwOBRIfp8Y2bSDVUXlN814KUUaq3kDOGyktGdPnvctOP8KmK0Ijw4 yoexam/1wXHzdT4gF8583IIyc1arViU+aKBQOwwvT7NeMEnTjdIB8c6XpIOq9cOU ZoZsfsHynruZpQohRwfYzU0jEPkxhOkZEnBSraTAEVDVA4IjE7oIRpD1ZFVPwg1R 5qWXZetG+iCV/jP7jG68fHKD1qqFqffdIUuMpvc3v57lzR+kYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4I2hmaJ4E5/C7/49b2iQT6Kqt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzZhNWRjYWItMjY5MC0z MzE0LTg0YzctMDkzY2Q5MzY1MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa7KliRkXij51gh9FpJc7qocuh+x8FoCDl0pBdOyCzSd139HWHrS4cP DDjFPLX10thv4PwEVhUWjJpxPC7FnVJYdT8qe8X3JuAcsaiTGkmQB7pDIlYjspu3 2maUl1qO1uW8BC6TWMuGNn3ZN0NJ/Tilf0ML7h1IGqy4+IFTtI7JDdWK71ayZrjt A9O9uKJTYkmPhubc5clYZ2mGT5BHmCW8jkMKTqyDrSAIUqrS/U9By+3FSa5Hoh1t qEZe+nryv3CWjyqlsNPPQDqa/5+4kPvEoXgvJfUHhHGp3udPwlv7jbtnpNxMUDZx 0UHYlmgN6qFJTag+zqFJOw1/WfVUUD0= -----END CERTIFICATE-----Generated at Fri Apr 4 08:50:04 2025 by rpki-client