$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa File: e56a5122-33fc-33a6-8667-2401e22bc665.roa (raw, json) Hash identifier: sPPsM8v7gY0Rl+JR5Rwbd1kXQvL8/DJCmszFWkuI5CQ= Subject key identifier: DC:4B:5C:1A:A8:76:E3:4A:14:5F:C7:86:50:4C:B4:A0:D8:F0:C3:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BF852F84C8CEF68DB1C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f8:52:f8:4c:8c:ef:68:db:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ccdf63ab-d553-42e5-9be6-788d557de159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:48:21:4d:9d:4f:25:13:2c:02:a7:3f:82: a4:cc:4c:ca:16:83:6b:0e:67:ed:be:95:fb:77:ed: a3:59:9c:7d:e9:70:88:07:90:03:13:e9:1f:58:3c: b5:4f:7c:fd:9e:12:87:ac:0b:3f:35:c9:1d:c0:27: 71:81:f0:79:ba:37:26:95:de:ad:e6:29:3b:51:7a: 47:a0:92:c3:6d:46:9a:44:52:61:b7:1a:93:1a:6d: a9:83:73:b8:02:52:97:11:40:76:21:e4:39:a8:db: 92:4b:83:51:73:a0:4f:d6:8d:c7:cb:4f:29:ee:09: 9d:2f:b0:7c:d7:ad:5a:14:b4:b0:4b:38:ed:c3:73: 38:06:ff:7b:f2:c4:11:d1:93:00:69:82:ee:a7:0b: 91:a2:92:0c:20:4c:18:fd:0e:53:f1:36:e0:bf:d9: 8e:e3:ed:9d:cb:65:d4:4b:c7:03:76:6e:0d:d3:64: 3d:21:63:b6:23:e1:3e:e2:77:1d:e1:40:7c:2f:09: 86:45:53:28:0d:2a:59:67:55:3a:2d:90:96:44:f8: 87:5a:42:d9:37:11:53:76:1a:dd:4c:45:f6:90:b1: eb:9d:8f:08:c6:78:24:b2:d2:10:d0:66:b6:ad:a3: c4:cb:86:b3:be:1a:9a:e6:08:98:8f:fb:e2:c7:ef: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4B:5C:1A:A8:76:E3:4A:14:5F:C7:86:50:4C:B4:A0:D8:F0:C3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b3:4f:40:47:b1:63:48:aa:33:00:3f:f0:40:23:21:ee:a9: 5d:c3:38:48:9c:b6:94:4f:78:70:56:31:09:a5:24:68:a9:c5: 43:d5:e1:13:8c:c7:00:fd:58:9c:ba:91:ac:cf:4e:dd:40:0d: b6:97:22:3e:6a:b8:4e:6e:40:fa:d2:1a:21:d8:dd:60:2a:30: 95:71:03:19:0a:fb:8e:6e:3d:3a:1c:2b:d8:d9:f2:58:cd:d8: b8:09:50:0c:23:75:03:af:19:97:fd:2f:b4:28:66:a9:8a:29: 7e:4d:18:55:b1:d5:cf:20:56:07:5a:b6:2a:95:df:81:3d:34: af:eb:9a:25:77:b4:d4:ef:31:bd:b7:99:71:4d:2d:be:58:f7: 0f:6d:6e:54:18:21:e8:f5:61:9b:2d:a5:b1:f0:99:37:1d:f7: 6d:c6:49:5c:a9:98:66:28:33:8e:fe:69:4a:36:7f:d8:e1:ac: 85:0c:3e:62:c3:cc:0c:38:bb:ff:38:77:7f:f5:18:80:52:af: 69:81:35:45:c0:8b:27:4b:85:30:aa:51:a8:b9:f5:e3:6c:40: 88:42:db:9b:1a:8a:db:12:7d:52:97:47:3b:c8:83:89:d9:17: 48:97:0b:35:8e:28:de:39:07:70:76:d6:35:bb:d3:8a:4a:44: b3:09:51:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/hS+EyM72jbHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2NkZjYzYWItZDU1My00MmU1LTliZTYtNzg4ZDU1N2RlMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+pIIU2dTyUTLAKnP4KkzEzKFoNrDmftvpX7 d+2jWZx96XCIB5ADE+kfWDy1T3z9nhKHrAs/NckdwCdxgfB5ujcmld6t5ik7UXpH oJLDbUaaRFJhtxqTGm2pg3O4AlKXEUB2IeQ5qNuSS4NRc6BP1o3Hy08p7gmdL7B8 161aFLSwSzjtw3M4Bv978sQR0ZMAaYLupwuRopIMIEwY/Q5T8Tbgv9mO4+2dy2XU S8cDdm4N02Q9IWO2I+E+4ncd4UB8LwmGRVMoDSpZZ1U6LZCWRPiHWkLZNxFTdhrd TEX2kLHrnY8IxngkstIQ0Ga2raPEy4azvhqa5giYj/vix+/nNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxLXBqoduNKFF/HhlBMtKDY8MMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTU2YTUxMjItMzNmYy0z M2E2LTg2NjctMjQwMWUyMmJjNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADizT0BHsWNIqjMAP/BAIyHuqV3DOEictpRPeHBWMQmlJGipxUPV4ROM xwD9WJy6kazPTt1ADbaXIj5quE5uQPrSGiHY3WAqMJVxAxkK+45uPTocK9jZ8ljN 2LgJUAwjdQOvGZf9L7QoZqmKKX5NGFWx1c8gVgdatiqV34E9NK/rmiV3tNTvMb23 mXFNLb5Y9w9tblQYIej1YZstpbHwmTcd923GSVypmGYoM47+aUo2f9jhrIUMPmLD zAw4u/84d3/1GIBSr2mBNUXAiydLhTCqUai59eNsQIhC25saitsSfVKXRzvIg4nZ F0iXCzWOKN45B3B21jW704pKRLMJUTk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:44 2025 by rpki-client