$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa File: e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa (raw, json) Hash identifier: HlQlyalg8gmx5y8oqDyemuim4ZXsj7/bwY8ev/htZmI= Subject key identifier: 9E:6F:1D:FF:BD:29:9B:F7:E1:BA:43:6C:27:AE:5A:F5:67:98:1C:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F4CE5C7A0C2730E18C7270 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 70.32.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:ce:5c:7a:0c:27:30:e1:8c:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=328c5f52-186b-401c-bd01-ff9a787cec2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:31:9e:05:c9:86:b3:89:92:05:09:7c:ce:6c: 0c:69:b1:d8:5d:53:0b:c3:83:25:f2:d4:50:4c:e1: 27:f1:42:02:27:4f:9f:eb:c7:47:81:f2:2b:d0:52: e4:62:57:dc:72:13:3b:f9:1f:79:53:72:24:ff:a3: 24:db:0f:38:c3:3e:3d:b9:d9:cd:4f:6a:0b:4d:a8: f6:fe:96:9e:a2:55:03:bb:c1:2a:03:db:c3:52:4c: 22:0c:8d:71:86:4b:33:b3:76:3f:ec:40:d7:df:5f: 12:5b:b7:3f:43:32:bc:e3:38:af:34:ae:5b:52:f8: b9:bf:d0:60:5a:25:e0:58:33:cb:d0:be:02:f9:17: 4d:9c:a1:77:d5:65:17:00:1b:b7:fd:ff:b5:98:17: 84:ce:67:43:71:d2:7a:e2:fe:32:6f:41:90:ee:ff: 69:25:fc:09:62:f6:22:0b:b8:ed:df:87:69:3e:c5: 90:ab:2f:e0:b3:69:30:46:c7:54:e6:6f:6b:a8:8e: 59:6c:40:f5:ad:83:05:08:db:bf:80:c2:d5:b0:4f: b4:b7:0b:c5:5b:20:75:6a:b0:33:19:e4:85:e6:a6: ea:5f:27:ad:bb:78:b7:5d:0b:fd:40:32:a3:ec:01: 6f:91:ba:a3:16:95:0e:75:87:eb:7c:ab:9b:ad:68: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:1D:FF:BD:29:9B:F7:E1:BA:43:6C:27:AE:5A:F5:67:98:1C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:66:18:0e:e4:bf:03:48:01:4c:e0:78:61:a5:56:50:d8:89: 04:49:79:14:59:83:83:e3:bc:71:0f:bd:0d:37:f8:ba:70:f7: fb:68:a2:66:44:db:d4:55:67:c2:c8:99:97:7d:81:f8:f6:3c: 46:e6:0f:5e:7e:50:e6:dd:12:7b:9d:37:0d:5d:22:01:bc:49: 66:f9:83:8b:7c:bd:04:28:d5:9a:0b:eb:3e:33:6a:89:dc:b7: 59:b9:5f:ca:c3:31:95:76:ba:9c:5d:12:0a:5f:21:ec:07:67: 66:f7:33:88:09:65:b8:b1:17:8e:93:c6:a0:6c:7f:d7:20:16: 8b:99:0d:fb:d6:c6:81:d8:77:7a:bb:0e:3b:cf:b4:8b:71:fc: 1d:6e:fd:b1:44:23:e3:d4:76:b7:af:a9:11:29:fe:e7:bd:5a: da:d1:8f:99:ea:4e:96:8b:66:53:62:f0:34:ce:df:5f:c6:12: 88:8f:02:7d:8f:aa:29:34:3b:50:37:d3:f3:43:37:16:52:49: e6:a6:73:52:12:af:ef:7f:1f:2d:5a:c3:2b:39:7f:15:0d:b9: 59:83:c8:d3:c6:4b:0c:a5:ed:5b:6d:a4:0d:70:e4:62:34:6c: cf:83:23:ed:5b:f6:32:6f:29:a2:b7:d1:6b:20:81:10:db:d2: 9d:cc:26:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9M5cegwnMOGMcnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MzI4YzVmNTItMTg2Yi00MDFjLWJkMDEtZmY5YTc4N2NlYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjGeBcmGs4mSBQl8zmwMabHYXVMLw4Ml8tRQ TOEn8UICJ0+f68dHgfIr0FLkYlfcchM7+R95U3Ik/6Mk2w84wz49udnNT2oLTaj2 /paeolUDu8EqA9vDUkwiDI1xhkszs3Y/7EDX318SW7c/QzK84zivNK5bUvi5v9Bg WiXgWDPL0L4C+RdNnKF31WUXABu3/f+1mBeEzmdDcdJ64v4yb0GQ7v9pJfwJYvYi C7jt34dpPsWQqy/gs2kwRsdU5m9rqI5ZbED1rYMFCNu/gMLVsE+0twvFWyB1arAz GeSF5qbqXyetu3i3XQv9QDKj7AFvkbqjFpUOdYfrfKubrWgw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5vHf+9KZv34bpDbCeuWvVnmByCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTc2YWMzYTQtOGNlZC0z MzRjLWIyOWUtNmI3OTNiNWYyNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNmGA7kvwNIAUzgeGGlVlDYiQRJeRRZg4PjvHEPvQ03+Lpw9/toomZE 29RVZ8LImZd9gfj2PEbmD15+UObdEnudNw1dIgG8SWb5g4t8vQQo1ZoL6z4zaonc t1m5X8rDMZV2upxdEgpfIewHZ2b3M4gJZbixF46TxqBsf9cgFouZDfvWxoHYd3q7 DjvPtItx/B1u/bFEI+PUdrevqREp/ue9WtrRj5nqTpaLZlNi8DTO31/GEoiPAn2P qik0O1A30/NDNxZSSeamc1ISr+9/Hy1awys5fxUNuVmDyNPGSwyl7VttpA1w5GI0 bM+DI+1b9jJvKaK30WsggRDb0p3MJns= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:02 2024 by rpki-client on console-ams.rpki-client.org