$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81f00e00-0284-3747-b154-af260a8fcf87.roa File: 81f00e00-0284-3747-b154-af260a8fcf87.roa (raw, json) Hash identifier: wr7hJOcnjRae8G8/m2YU+TZYd2y73Es9L3R/rTcf8a8= Subject key identifier: 42:C5:22:1B:DB:AE:3E:F8:56:87:4F:16:DB:C0:D3:D0:94:C1:5D:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BDF50395F775AAA996400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81f00e00-0284-3747-b154-af260a8fcf87.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:df:50:39:5f:77:5a:aa:99:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=895c78cc-6397-4d4a-8127-f5a444f95267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:95:24:33:ed:47:9a:24:61:bd:4e:53:03: 88:92:33:de:1f:0e:ec:e1:76:d1:f2:4e:68:d2:fc: 32:70:77:e1:52:ee:04:91:b3:1f:66:d5:ee:6a:5b: 93:76:5a:1c:03:6d:93:97:36:6f:c3:d3:a0:09:be: 60:6a:ac:9f:3c:af:69:fe:96:87:5e:f7:0d:18:bd: ef:96:89:37:30:02:df:8c:a2:a7:5f:25:de:82:35: 65:d6:34:41:a5:22:dd:8d:b8:8d:27:35:0a:6d:95: 96:41:0b:68:7e:ce:cf:cc:74:a1:9f:20:f6:2a:17: bf:1b:75:a5:aa:61:bd:40:0c:49:2a:21:7a:8b:53: df:9f:4f:7f:6c:c8:fc:1e:92:96:a2:b2:8a:fe:01: 68:90:fb:e4:df:04:0c:be:53:55:18:a9:58:9a:11: 1e:72:95:29:3d:03:0a:7f:cf:33:d0:1f:b5:f9:08: 2a:09:c9:df:3e:9b:4f:b3:62:36:4b:ed:3f:11:1d: 5a:e4:8a:06:32:74:69:5a:75:fa:f3:a4:fd:b7:06: 91:7b:05:cd:34:52:42:35:b3:1b:3f:a9:13:64:59: ea:e0:c0:2c:0a:62:80:67:37:a7:b4:7c:af:e2:8f: 34:7b:01:60:8d:76:76:9d:b6:c3:71:43:fe:a7:f1: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C5:22:1B:DB:AE:3E:F8:56:87:4F:16:DB:C0:D3:D0:94:C1:5D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81f00e00-0284-3747-b154-af260a8fcf87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b8:0a:eb:80:3a:e6:a4:7e:88:4a:df:ce:d6:61:9e:f3:bf: 25:7f:49:e8:fc:77:45:32:f5:25:94:22:42:2c:6d:39:11:cb: 85:0d:c8:02:c0:51:4f:5c:7e:65:0d:71:58:94:33:f6:f1:13: 9f:40:30:8b:b9:3f:de:94:10:1b:12:6f:35:5c:2a:bc:ea:02: fc:dc:41:cf:06:c3:34:72:bc:d8:cf:bb:9e:c7:fc:21:60:ac: 5d:3c:cc:e2:73:b3:65:90:cb:6b:2a:ab:2b:4d:5e:1b:6f:34: 63:9f:2b:6d:ef:8c:b5:ef:30:4c:2f:4e:11:84:33:1b:d3:02: 58:cb:f4:dc:9e:33:ef:69:f5:bd:f4:22:ed:24:60:e3:62:bf: b1:0b:79:12:1c:7c:6c:e3:88:8c:fa:2f:9b:1c:46:a0:84:f5: cb:5e:63:f2:fe:89:56:e0:4b:30:87:50:d9:97:fc:70:a7:cf: 36:a2:53:b3:b0:8b:92:4b:95:8f:ad:44:5a:e1:25:9d:df:ac: 87:42:08:ad:29:64:9e:39:ae:f9:4b:ae:0d:6d:f1:56:bc:9b: 38:1e:48:3f:9c:d0:c7:ef:50:a6:ec:30:a2:00:54:3d:92:ed: 0f:af:c3:34:dc:70:9c:78:e6:8c:e1:d2:d7:d5:bf:6a:30:38: b1:9e:e5:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS99QOV93WqqZZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODk1Yzc4Y2MtNjM5Ny00ZDRhLTgxMjctZjVhNDQ0Zjk1MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ2VJDPtR5okYb1OUwOIkjPeHw7s4XbR8k5o 0vwycHfhUu4EkbMfZtXualuTdlocA22TlzZvw9OgCb5gaqyfPK9p/paHXvcNGL3v lok3MALfjKKnXyXegjVl1jRBpSLdjbiNJzUKbZWWQQtofs7PzHShnyD2Khe/G3Wl qmG9QAxJKiF6i1Pfn09/bMj8HpKWorKK/gFokPvk3wQMvlNVGKlYmhEecpUpPQMK f88z0B+1+QgqCcnfPptPs2I2S+0/ER1a5IoGMnRpWnX686T9twaRewXNNFJCNbMb P6kTZFnq4MAsCmKAZzentHyv4o80ewFgjXZ2nbbDcUP+p/FeRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELFIhvbrj74VodPFtvA09CUwV3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFmMDBlMDAtMDI4NC0z NzQ3LWIxNTQtYWYyNjBhOGZjZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+4CuuAOuakfohK387WYZ7zvyV/Sej8d0Uy9SWUIkIsbTkRy4UNyALA UU9cfmUNcViUM/bxE59AMIu5P96UEBsSbzVcKrzqAvzcQc8GwzRyvNjPu57H/CFg rF08zOJzs2WQy2sqqytNXhtvNGOfK23vjLXvMEwvThGEMxvTAljL9NyeM+9p9b30 Iu0kYONiv7ELeRIcfGzjiIz6L5scRqCE9cteY/L+iVbgSzCHUNmX/HCnzzaiU7Ow i5JLlY+tRFrhJZ3frIdCCK0pZJ45rvlLrg1t8Va8mzgeSD+c0MfvUKbsMKIAVD2S 7Q+vwzTccJx45ozh0tfVv2owOLGe5bs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:24 2025 by rpki-client