$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa File: d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa (raw, json) Hash identifier: HH3CT41fLToOTBuYP1yO3NkCUN+gGPDAMgAH6b99Jec= Subject key identifier: 9E:B3:F3:CC:E9:54:A9:53:57:6B:55:0D:41:11:28:22:EA:C2:7B:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454904E7FDE6F2A2EEFE202E60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa Signing time: Thu 21 Mar 2024 21:29:58 +0000 ROA not before: Thu 21 Mar 2024 21:29:58 +0000 ROA not after: Wed 19 Jun 2024 21:29:58 +0000 asID: 2386 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:04:e7:fd:e6:f2:a2:ee:fe:20:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:29:58 2024 GMT Not After : Jun 19 21:29:58 2024 GMT Subject: CN=84115e2b-6097-4b4d-b376-c65da2de897b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2c:8a:2c:a0:8c:a7:98:0e:e6:16:a2:f0:66: a9:20:fb:54:ff:b5:62:a7:3b:ad:cd:ea:36:1e:be: 1b:09:db:78:21:a4:17:db:e7:5c:45:d2:0a:ae:d3: 60:2b:be:8f:66:c6:95:99:5d:b8:69:b6:c3:7f:f9: 68:f0:76:4a:c1:2b:b9:9e:f0:91:f8:a7:6d:dd:81: 04:7c:79:25:87:4b:fa:3c:41:06:72:d9:54:2b:f1: ca:b2:02:10:be:f0:7a:7f:da:9a:1c:b0:dd:e7:52: 01:d9:7e:fd:ba:5d:7e:6a:57:6c:4d:55:50:c2:87: cf:9e:ea:2d:3b:61:81:47:56:51:46:55:3b:22:09: 55:e2:08:45:e3:f3:2e:8d:ae:52:7c:68:e7:b1:b9: ee:a6:a3:63:d4:b2:9c:ec:d5:db:ba:e9:e3:7f:e7: d2:51:6b:21:1c:21:58:66:4e:34:2c:f4:af:95:10: 39:cd:8a:97:3a:02:e4:53:9b:e6:08:4b:e3:20:71: 30:76:7f:23:1f:7c:ec:dc:13:71:72:9d:79:44:4c: f1:ec:d5:24:24:5c:8f:fe:6f:84:53:1c:96:2d:f9: db:69:da:63:50:ed:25:65:51:e2:94:52:ff:f0:ad: 34:0b:2e:fc:11:6a:cc:50:0d:88:6c:ed:84:42:db: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B3:F3:CC:E9:54:A9:53:57:6B:55:0D:41:11:28:22:EA:C2:7B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a0:fa:ec:61:35:08:3e:38:6a:42:55:5f:f9:21:f2:9f:b7: ec:61:ac:6a:55:e6:bf:06:eb:98:23:7f:0f:ea:26:8c:37:d5: 3a:1d:ea:8f:16:ba:1a:74:a2:78:9a:d8:b0:0e:8c:aa:0c:d7: 6a:80:06:0b:dc:92:75:4f:35:d2:6d:ec:3d:ce:53:33:db:53: 30:4c:86:ea:bb:c4:0a:9a:e3:37:89:ca:f6:80:04:58:59:a5: 83:de:26:26:18:1d:52:94:87:7d:d2:4a:8d:5c:8a:9b:5b:92: d7:71:29:21:b3:66:a2:38:c1:e5:f8:37:08:eb:da:f9:a9:18: 96:eb:43:3a:53:b2:87:6b:46:45:4b:35:06:cf:30:34:89:27: db:35:74:12:21:4d:bd:e3:30:be:36:a1:06:ba:8a:ce:03:6c: 82:09:24:c0:4f:20:67:30:85:a2:47:99:ef:4b:03:18:25:d2: 63:8a:2a:e5:4a:f1:17:4b:0a:24:8f:8f:91:1f:e0:70:de:85: 3a:b5:b5:04:59:26:a9:94:18:ba:6a:cd:8f:29:00:43:8b:30: 97:75:ae:5d:97:1f:ac:4d:0d:7d:6d:d4:37:0e:7a:cc:9c:03: a4:38:d3:43:02:95:72:ae:98:f1:34:df:24:78:24:46:93:03: 97:0d:07:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJBOf95vKi7v4gLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxMjk1OFoXDTI0MDYxOTIxMjk1OFowLzEtMCsGA1UEAxMk ODQxMTVlMmItNjA5Ny00YjRkLWIzNzYtYzY1ZGEyZGU4OTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSyKLKCMp5gO5hai8GapIPtU/7Vipzutzeo2 Hr4bCdt4IaQX2+dcRdIKrtNgK76PZsaVmV24abbDf/lo8HZKwSu5nvCR+Kdt3YEE fHklh0v6PEEGctlUK/HKsgIQvvB6f9qaHLDd51IB2X79ul1+aldsTVVQwofPnuot O2GBR1ZRRlU7IglV4ghF4/Muja5SfGjnsbnupqNj1LKc7NXbuunjf+fSUWshHCFY Zk40LPSvlRA5zYqXOgLkU5vmCEvjIHEwdn8jH3zs3BNxcp15REzx7NUkJFyP/m+E UxyWLfnbadpjUO0lZVHilFL/8K00Cy78EWrMUA2IbO2EQtvwcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6z88zpVKlTV2tVDUERKCLqwnuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlhNmFkYjQtNjlhNS0z YTQyLWI0YWEtM2I3MDU4YTczYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2g+uxhNQg+OGpCVV/5IfKft+xhrGpV5r8G65gjfw/qJow31Tod6o8W uhp0onia2LAOjKoM12qABgvcknVPNdJt7D3OUzPbUzBMhuq7xAqa4zeJyvaABFhZ pYPeJiYYHVKUh33SSo1ciptbktdxKSGzZqI4weX4Nwjr2vmpGJbrQzpTsodrRkVL NQbPMDSJJ9s1dBIhTb3jML42oQa6is4DbIIJJMBPIGcwhaJHme9LAxgl0mOKKuVK 8RdLCiSPj5Ef4HDehTq1tQRZJqmUGLpqzY8pAEOLMJd1rl2XH6xNDX1t1DcOesyc A6Q400MClXKumPE03yR4JEaTA5cNBy8= -----END CERTIFICATE-----Generated at Sun May 5 22:50:33 2024 by rpki-client on console-fra.rpki-client.org