$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa File: 7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa (raw, json) Hash identifier: 1s6LME2KhoYPxokVk+pXrLNi4IkTQ0EmpqyM0JQhFlE= Subject key identifier: FB:28:EF:26:B5:35:03:8D:0D:9C:15:C3:C5:B2:6A:FF:0A:D4:56:AF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BE6D5C222B42D2D6E3680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e6:d5:c2:22:b4:2d:2d:6e:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1d5c5060-2c42-4310-9e52-536cdf82975e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:89:bf:fa:36:e1:5c:a9:a0:32:66:ee:cb: b6:d9:ed:eb:79:96:84:9b:80:5d:45:68:05:42:06: 0e:b5:51:e3:7b:34:4c:00:d7:97:1f:d3:e8:7e:3c: 78:14:3a:25:e9:ba:ba:c7:90:23:c6:92:57:49:64: 06:6e:12:2e:09:ea:4d:60:78:c4:b9:b2:7d:7e:c1: 95:bc:88:97:60:e0:8c:05:8d:71:75:34:06:e7:2b: 46:e8:a3:d8:bd:bc:49:3f:20:e9:67:fc:3d:2f:50: 86:8c:77:e8:6d:64:85:aa:48:ea:dd:fd:c1:6d:c5: 3c:07:02:e9:a3:54:15:ca:b9:12:a1:32:7e:5d:63: 00:4d:c6:7d:a4:8e:6d:00:9d:7d:6a:6f:29:6c:1b: 7d:bb:06:08:eb:1b:dd:14:2e:a5:e9:73:78:5d:4c: f8:c1:31:83:06:97:d5:8e:20:eb:22:07:2c:68:0d: ce:78:dc:d3:30:f0:7c:31:09:8a:2d:8e:b7:be:cc: fe:7b:78:84:11:71:71:8d:a1:16:f1:9b:18:72:ae: a7:33:77:cf:7e:8c:6b:24:67:65:ab:8b:a8:68:c9: 5d:7a:3d:a3:5a:34:70:59:2f:1d:6d:ea:42:b8:b4: f9:80:2f:b4:d9:54:d4:a7:80:49:78:f6:26:c1:8b: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:28:EF:26:B5:35:03:8D:0D:9C:15:C3:C5:B2:6A:FF:0A:D4:56:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:96:98:d7:6b:be:df:c3:7f:8d:50:34:95:ac:4d:2c:cb:ee: 09:c8:ee:15:37:b2:77:80:81:c6:78:62:f7:4b:7a:59:03:0b: 9a:7a:11:0a:90:f6:10:7f:dc:d0:1d:e4:23:dc:a5:dd:fa:e7: d2:83:6f:57:75:3a:36:de:76:b2:77:2e:13:27:41:e4:57:b1: 50:64:13:18:1d:c0:fb:ed:cc:1f:99:fb:a3:99:76:87:5f:80: 43:92:22:76:33:28:4d:fe:0e:94:fc:02:87:90:c8:17:68:11: 21:28:e2:c3:62:5f:fb:4c:16:b9:1a:48:f3:4e:c3:13:ae:3b: 70:eb:17:31:e2:22:b2:b1:a6:c6:16:61:db:3d:5f:9d:5d:af: 89:37:e2:13:c3:4d:15:90:77:34:3c:d6:61:23:1b:b1:9b:4c: 41:e0:13:74:f8:ef:81:69:d8:11:29:3c:c6:89:2e:b4:74:f3: 21:c2:50:ef:37:78:b5:3b:c1:e4:a2:59:6d:65:19:2a:74:0d: 28:4e:12:e2:b5:bb:3a:e9:50:56:f7:41:c6:26:fd:83:95:d7: 31:81:3a:e6:67:62:37:44:c1:95:e6:23:27:ee:2c:59:17:ec: 3c:89:f6:d0:f1:64:7c:7d:0f:7e:38:a9:ad:e0:83:86:c7:29: d7:51:01:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+bVwiK0LS1uNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWQ1YzUwNjAtMmM0Mi00MzEwLTllNTItNTM2Y2RmODI5NzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw62Jv/o24VypoDJm7su22e3reZaEm4BdRWgF QgYOtVHjezRMANeXH9Pofjx4FDol6bq6x5AjxpJXSWQGbhIuCepNYHjEubJ9fsGV vIiXYOCMBY1xdTQG5ytG6KPYvbxJPyDpZ/w9L1CGjHfobWSFqkjq3f3BbcU8BwLp o1QVyrkSoTJ+XWMATcZ9pI5tAJ19am8pbBt9uwYI6xvdFC6l6XN4XUz4wTGDBpfV jiDrIgcsaA3OeNzTMPB8MQmKLY63vsz+e3iEEXFxjaEW8ZsYcq6nM3fPfoxrJGdl q4uoaMldej2jWjRwWS8dbepCuLT5gC+02VTUp4BJePYmwYsLnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPso7ya1NQONDZwVw8Wyav8K1FavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2Y1NTVhZDEtMDUxYi0z ZTEwLWIzZWMtNzg1ZTZlMzI2ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGWmNdrvt/Df41QNJWsTSzL7gnI7hU3sneAgcZ4YvdLelkDC5p6EQqQ 9hB/3NAd5CPcpd3659KDb1d1OjbedrJ3LhMnQeRXsVBkExgdwPvtzB+Z+6OZdodf gEOSInYzKE3+DpT8AoeQyBdoESEo4sNiX/tMFrkaSPNOwxOuO3DrFzHiIrKxpsYW Yds9X51dr4k34hPDTRWQdzQ81mEjG7GbTEHgE3T474Fp2BEpPMaJLrR08yHCUO83 eLU7weSiWW1lGSp0DShOEuK1uzrpUFb3QcYm/YOV1zGBOuZnYjdEwZXmIyfuLFkX 7DyJ9tDxZHx9D344qa3gg4bHKddRARQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:59 2025 by rpki-client