$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa File: 8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa (raw, json) Hash identifier: 0oahWvVfbYpa5hg5qqseBFV7ELZZXX4GEPtubSJ/PVE= Subject key identifier: C1:F8:DA:5D:7A:E4:FD:6E:C7:C6:87:54:9B:51:CD:8B:07:C8:69:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C1907290FC6E507952D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:19:07:29:0f:c6:e5:07:95:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ac58cd58-bfbf-475b-aa72-5364d962fa2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:a8:69:40:d6:76:aa:c6:15:17:e4:dd:22: b3:e3:e2:49:02:97:e8:58:ec:d7:83:e9:da:54:52: 7b:25:f5:97:d9:94:18:bd:38:04:2c:11:08:b7:c1: 3e:be:81:44:31:0d:ab:8d:fb:7c:f4:2a:f2:6b:27: 83:2b:11:74:be:32:7e:07:98:33:ad:99:66:cb:08: 36:fb:58:7c:ea:9c:be:cc:aa:2c:5d:43:6a:b0:0e: 72:c5:3d:0f:44:3a:a2:7d:1e:80:0a:e1:3d:1b:42: c9:21:e7:8c:6d:4f:2d:20:65:5f:d7:af:55:00:60: 4f:0a:95:76:7f:01:6a:b9:cf:3e:d8:4d:0b:62:c3: 29:47:fc:f0:b4:02:38:e7:0d:87:ed:c5:82:6e:41: 7d:a4:ef:98:59:0d:f8:83:8d:c1:61:d1:5b:70:99: b5:bc:00:fc:28:43:0a:5f:bd:5f:23:7b:5c:9e:9e: eb:dd:72:fa:a5:62:f7:4e:9a:88:51:20:33:6b:8a: 55:f2:2f:68:0e:c0:ea:da:27:63:6d:66:7e:f7:d4: fa:68:d4:c7:a1:27:76:5a:25:06:f8:42:e2:f7:26: 0d:7b:f7:92:52:80:d2:cb:ec:84:16:44:86:5e:95: 79:9b:68:f9:b4:df:18:b4:35:00:25:86:c3:d1:b3: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F8:DA:5D:7A:E4:FD:6E:C7:C6:87:54:9B:51:CD:8B:07:C8:69:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e7:d4:69:fa:c2:fc:14:4c:18:35:4b:97:d4:34:09:7e:08: 5e:6f:d8:3a:66:38:23:a9:ee:f6:20:77:ef:91:ab:05:73:20: f3:2c:d0:1d:a0:df:61:dc:42:eb:93:9d:5c:a2:1a:3e:ad:72: b4:80:35:68:84:b1:db:06:8b:2d:4b:18:cb:ce:22:d4:84:84: c1:33:e9:b9:f6:2e:a2:7f:ad:e5:a9:a9:51:a3:08:83:33:45: 11:78:cf:01:9e:b1:ac:51:30:a3:1d:28:62:9a:96:c4:35:1e: bb:2f:6b:b3:45:24:e2:db:7a:f2:03:95:4c:5b:b0:9e:06:7b: c8:58:80:25:48:72:e7:d5:d5:de:d4:57:a9:df:4c:0b:5c:af: 4c:93:1e:0e:0f:9c:b6:f6:b5:28:91:66:0d:c4:51:5c:40:55: 8a:c4:fa:0d:22:ab:62:b5:56:52:c5:35:fa:df:83:9e:74:aa: 4c:d5:d6:d4:12:05:f6:bf:d2:f6:80:b8:6a:94:d2:48:e5:74: 50:c2:fc:18:3b:e9:18:15:f2:1c:25:1b:6b:42:30:60:cd:da: 01:71:f9:13:4e:01:34:7f:f3:eb:28:bb:a1:73:cc:cf:05:7a: b4:fa:bd:19:fe:ec:2b:c6:6f:22:2c:5b:ba:c4:af:ed:dc:9a: fb:d7:27:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBkHKQ/G5QeVLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWM1OGNkNTgtYmZiZi00NzViLWFhNzItNTM2NGQ5NjJmYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3+oaUDWdqrGFRfk3SKz4+JJApfoWOzXg+na VFJ7JfWX2ZQYvTgELBEIt8E+voFEMQ2rjft89CryayeDKxF0vjJ+B5gzrZlmywg2 +1h86py+zKosXUNqsA5yxT0PRDqifR6ACuE9G0LJIeeMbU8tIGVf169VAGBPCpV2 fwFquc8+2E0LYsMpR/zwtAI45w2H7cWCbkF9pO+YWQ34g43BYdFbcJm1vAD8KEMK X71fI3tcnp7r3XL6pWL3TpqIUSAza4pV8i9oDsDq2idjbWZ+99T6aNTHoSd2WiUG +ELi9yYNe/eSUoDSy+yEFkSGXpV5m2j5tN8YtDUAJYbD0bN98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH42l165P1ux8aHVJtRzYsHyGnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE5ZjMxODEtOGU2MC0z MzA3LTlkYTItZDliYjZmYjIyYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjn1Gn6wvwUTBg1S5fUNAl+CF5v2DpmOCOp7vYgd++RqwVzIPMs0B2g 32HcQuuTnVyiGj6tcrSANWiEsdsGiy1LGMvOItSEhMEz6bn2LqJ/reWpqVGjCIMz RRF4zwGesaxRMKMdKGKalsQ1Hrsva7NFJOLbevIDlUxbsJ4Ge8hYgCVIcufV1d7U V6nfTAtcr0yTHg4PnLb2tSiRZg3EUVxAVYrE+g0iq2K1VlLFNfrfg550qkzV1tQS Bfa/0vaAuGqU0kjldFDC/Bg76RgV8hwlG2tCMGDN2gFx+RNOATR/8+sou6FzzM8F erT6vRn+7CvGbyIsW7rEr+3cmvvXJ5Q= -----END CERTIFICATE-----Generated at Fri Apr 4 08:30:30 2025 by rpki-client