$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa File: dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa (raw, json) Hash identifier: KTuH8BVE/owlSKuF0bplCqjSZI0IZOWeNpffrais+lI= Subject key identifier: C1:D6:51:A3:27:72:18:CE:54:BE:DB:84:0D:54:D8:73:C7:92:F8:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C108D29E88F6B91413B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:10:8d:29:e8:8f:6b:91:41:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c9ed195e-ef38-4b11-b0de-00bb324ef11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:20:08:78:5f:43:ad:12:ba:0f:c3:61:25: a8:82:2e:1e:40:cd:82:37:05:eb:5c:9c:c4:27:f8: c7:27:d6:73:47:12:17:42:33:df:86:21:77:89:79: d4:e3:da:20:0e:3c:01:15:81:8a:92:3b:fa:c0:7b: 5d:4c:d9:ab:bf:c6:84:4e:14:e2:5f:23:9b:15:d2: 29:b8:2a:94:56:49:fb:de:91:73:b8:4e:69:9a:a3: 3a:4f:4f:f7:e3:e4:5e:55:3f:2b:88:e6:6c:ca:bd: 63:27:5b:18:32:87:ce:98:b2:27:42:e8:5b:1f:13: db:e7:c8:5e:76:96:8e:87:c4:fe:92:05:7c:7d:02: ff:22:16:44:a8:ae:ea:8f:88:5e:9a:f8:8c:b8:02: 47:bd:11:0a:c3:67:24:3d:76:de:7f:d5:97:f6:5e: d8:d6:91:57:74:2a:03:f3:e0:2c:c2:cd:c5:93:27: 73:f5:fc:e1:e6:42:8d:80:eb:0a:81:c6:d4:dd:84: 0f:19:f9:59:48:1c:ee:16:c0:22:49:ce:96:65:fa: a4:46:9d:9a:50:0a:68:e8:10:2c:d2:f5:19:09:cb: 9d:d3:66:3a:d6:9e:fb:d7:67:a9:1e:a9:54:9c:be: af:42:bb:62:fb:b9:db:74:1b:0c:36:4c:38:75:e4: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D6:51:A3:27:72:18:CE:54:BE:DB:84:0D:54:D8:73:C7:92:F8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ea:b3:84:48:19:13:35:7a:d5:4e:9f:62:1d:a3:23:f2:56: e4:2c:01:dc:92:55:23:43:7c:ca:8b:a8:4a:c3:b5:78:7e:7c: c3:d3:f7:08:0d:fa:c8:72:c7:41:cb:5d:1c:41:16:40:2e:1a: f5:3c:64:a5:fb:74:34:6d:b4:fb:3b:86:6a:ee:e8:3f:32:77: 2a:30:48:3a:37:b6:98:73:78:8f:5d:e5:e8:b5:9e:49:66:41: c8:ab:05:24:41:1f:65:1a:b2:69:1d:f8:1e:0f:a8:8c:d4:f9: 7c:3b:53:30:14:03:13:f3:cd:4d:12:27:dc:c5:22:a8:aa:10: 42:18:30:7e:8b:10:0b:59:ce:19:a5:e6:20:c3:0b:43:66:3c: 5d:4a:1b:0e:95:6f:fa:59:84:4d:dc:29:31:9f:1e:c7:5c:c6: 36:31:44:c3:61:fa:9b:9e:b4:96:ca:f3:d3:60:b0:24:91:bf: da:36:8d:61:43:6d:1d:3b:f0:97:ea:9d:16:c9:f1:e8:32:25: 73:99:68:ae:b5:54:df:a0:69:52:27:c2:65:e7:e9:bd:88:de: 01:2b:13:5c:5a:50:b9:66:b3:a0:fe:ac:e7:f9:03:0f:d1:1e: 47:35:eb:93:98:1a:84:c9:58:57:7b:0c:e4:6b:af:b4:4a:13: 0d:88:1a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBCNKeiPa5FBOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzllZDE5NWUtZWYzOC00YjExLWIwZGUtMDBiYjMyNGVmMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ggCHhfQ60Sug/DYSWogi4eQM2CNwXrXJzE J/jHJ9ZzRxIXQjPfhiF3iXnU49ogDjwBFYGKkjv6wHtdTNmrv8aEThTiXyObFdIp uCqUVkn73pFzuE5pmqM6T0/34+ReVT8riOZsyr1jJ1sYMofOmLInQuhbHxPb58he dpaOh8T+kgV8fQL/IhZEqK7qj4hemviMuAJHvREKw2ckPXbef9WX9l7Y1pFXdCoD 8+Asws3Fkydz9fzh5kKNgOsKgcbU3YQPGflZSBzuFsAiSc6WZfqkRp2aUApo6BAs 0vUZCcud02Y61p7712epHqlUnL6vQrti+7nbdBsMNkw4deRt2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHWUaMnchjOVL7bhA1U2HPHkvgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ0ZTU1NTktY2ZmMC0z MzEzLWFmYzgtZmRjZGFmM2Q5ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/qs4RIGRM1etVOn2IdoyPyVuQsAdySVSNDfMqLqErDtXh+fMPT9wgN +shyx0HLXRxBFkAuGvU8ZKX7dDRttPs7hmru6D8ydyowSDo3tphzeI9d5ei1nklm QcirBSRBH2Uasmkd+B4PqIzU+Xw7UzAUAxPzzU0SJ9zFIqiqEEIYMH6LEAtZzhml 5iDDC0NmPF1KGw6Vb/pZhE3cKTGfHsdcxjYxRMNh+puetJbK89NgsCSRv9o2jWFD bR078JfqnRbJ8egyJXOZaK61VN+gaVInwmXn6b2I3gErE1xaULlms6D+rOf5Aw/R Hkc165OYGoTJWFd7DORrr7RKEw2IGq8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:01 2025 by rpki-client