$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90a012f1-2317-3463-9993-e6f465af0112.roa File: 90a012f1-2317-3463-9993-e6f465af0112.roa (raw, json) Hash identifier: vlYrEw76FZ7ZjeSlY5AwmgLXSdVk7lh3xiqbXnfsukY= Subject key identifier: 97:4E:26:70:7C:21:6F:62:BC:F3:FA:BE:8A:B2:95:35:8F:5B:40:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C11FB096F5189B6000360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90a012f1-2317-3463-9993-e6f465af0112.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:11:fb:09:6f:51:89:b6:00:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2d806821-96ad-4cf3-a5b5-8ad472820b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:2e:ce:ad:b8:bf:10:b7:0a:d8:1a:4e:0c: e7:bf:3c:73:a7:96:9d:41:c8:22:ff:38:cc:a5:3a: 7c:59:42:1f:65:92:29:1a:4b:cb:d1:5f:92:e0:77: 9a:62:72:a4:78:36:68:7f:28:e6:39:44:de:15:ec: 3a:dc:ba:05:0c:51:fa:10:78:e3:b5:30:4f:0e:92: 59:de:ff:e2:eb:ca:6e:1d:4e:c9:40:48:ea:2c:ac: 4e:e4:d9:57:d1:1b:bd:a4:88:3d:a0:35:54:42:3d: 24:5f:9d:f9:e9:53:e2:4c:2d:39:77:c2:35:c3:98: 94:8c:ea:9f:bc:2b:e4:ba:89:38:86:4a:84:29:fe: 6b:d9:45:f6:81:3b:32:5c:a3:56:24:b9:2c:90:73: 3e:42:50:b1:69:8b:97:99:77:8a:ef:bd:ba:87:a1: de:c6:20:88:2a:06:c4:45:8d:15:c4:7e:fc:aa:31: 32:80:33:c3:3e:66:27:52:c5:15:03:5e:49:11:64: 73:53:29:15:cc:4e:e5:e5:72:91:64:c3:68:ac:b8: 4e:41:48:bc:73:e1:2b:6e:15:55:8a:b7:24:09:75: 3c:78:f6:c2:33:91:13:00:48:d4:46:ab:7e:3c:2c: 4b:d4:06:dc:80:d9:07:fe:4f:39:82:03:d2:f1:42: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:26:70:7C:21:6F:62:BC:F3:FA:BE:8A:B2:95:35:8F:5B:40:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90a012f1-2317-3463-9993-e6f465af0112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:85:91:22:ef:6a:e3:59:c8:27:d5:e1:91:43:d8:11:68:00: 59:96:7e:e8:f0:b5:76:96:0a:5c:2c:97:9b:5e:ea:25:1c:1c: 28:bb:8d:1e:61:32:60:72:1a:12:78:97:f7:00:48:ab:61:e7: f3:b0:a7:65:84:6e:08:88:c7:dc:87:70:de:2e:40:d2:7f:5c: d5:fd:e3:b4:4c:d4:f7:9e:98:1f:1b:e7:a1:06:1b:1c:14:37: 9e:26:1e:6c:21:c6:7d:4e:86:53:87:29:bc:bf:56:8d:c2:b9: a5:55:4a:50:34:d9:a9:7a:97:57:a7:85:07:c9:98:52:bf:d7: 01:76:a1:da:a4:32:e5:69:17:6c:7b:87:d0:6f:22:59:38:70: 4f:37:83:c6:fb:af:91:e9:d5:cc:06:46:50:eb:2d:f0:90:4b: 19:ca:2f:54:3e:10:6d:f1:25:cc:85:da:81:37:ca:2f:13:2a: 7c:74:af:97:d0:90:3e:48:fd:df:20:ef:21:66:78:82:b6:11: 17:32:c8:b3:b1:62:b7:19:90:1f:e5:89:bb:9d:d1:75:02:fe: 90:eb:be:7c:0e:52:3f:c8:2b:6b:a8:ca:10:7d:99:49:6f:93: 62:60:46:ab:b8:4c:73:3b:f0:64:24:af:36:3e:bd:f2:48:ca: c6:97:fd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBH7CW9RibYAA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmQ4MDY4MjEtOTZhZC00Y2YzLWE1YjUtOGFkNDcyODIwYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvccuzq24vxC3CtgaTgznvzxzp5adQcgi/zjM pTp8WUIfZZIpGkvL0V+S4HeaYnKkeDZofyjmOUTeFew63LoFDFH6EHjjtTBPDpJZ 3v/i68puHU7JQEjqLKxO5NlX0Ru9pIg9oDVUQj0kX5356VPiTC05d8I1w5iUjOqf vCvkuok4hkqEKf5r2UX2gTsyXKNWJLkskHM+QlCxaYuXmXeK7726h6HexiCIKgbE RY0VxH78qjEygDPDPmYnUsUVA15JEWRzUykVzE7l5XKRZMNorLhOQUi8c+ErbhVV irckCXU8ePbCM5ETAEjURqt+PCxL1AbcgNkH/k85ggPS8UJV0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdOJnB8IW9ivPP6voqylTWPW0DZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBhMDEyZjEtMjMxNy0z NDYzLTk5OTMtZTZmNDY1YWYwMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuFkSLvauNZyCfV4ZFD2BFoAFmWfujwtXaWClwsl5te6iUcHCi7jR5h MmByGhJ4l/cASKth5/Owp2WEbgiIx9yHcN4uQNJ/XNX947RM1PeemB8b56EGGxwU N54mHmwhxn1OhlOHKby/Vo3CuaVVSlA02al6l1enhQfJmFK/1wF2odqkMuVpF2x7 h9BvIlk4cE83g8b7r5Hp1cwGRlDrLfCQSxnKL1Q+EG3xJcyF2oE3yi8TKnx0r5fQ kD5I/d8g7yFmeIK2ERcyyLOxYrcZkB/libud0XUC/pDrvnwOUj/IK2uoyhB9mUlv k2JgRqu4THM78GQkrzY+vfJIysaX/bw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:01 2025 by rpki-client