$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa File: eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa (raw, json) Hash identifier: IfMgyvw1fj+E/WDYg3hsSJ783uy3HalcCDxh2Aj+/ck= Subject key identifier: D1:6E:19:FA:E0:CC:9F:30:AD:0D:1D:FE:04:E2:F8:30:CE:CE:F3:2D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C06D9C8348DC834C9B000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:06:d9:c8:34:8d:c8:34:c9:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e22de687-4112-4089-926b-3b5206c6b173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:54:45:f3:19:2c:ec:7a:d8:ad:1f:c2:d2: 8b:38:3c:74:c1:4c:ab:94:02:59:99:ef:36:d1:61: da:c3:d4:d1:7d:09:89:6f:5e:a2:ad:34:af:8e:df: f7:78:c1:87:d6:4d:7e:92:d8:21:6d:c4:c2:d4:d7: c6:e3:9f:80:d9:bd:32:66:41:ac:c4:9a:62:d4:fc: b4:92:9c:bb:cb:3b:7b:0d:18:2b:0d:63:cf:76:c6: d7:0a:d9:7e:9f:a6:36:6c:e6:fd:c4:29:39:f6:bb: d5:19:38:5b:f9:05:d9:49:07:4a:ce:76:62:84:49: 33:ce:6f:85:02:92:a3:0e:ce:d9:fc:ce:fd:ea:b1: ee:a8:83:94:76:f7:b7:74:69:ad:79:e6:f5:d0:1c: e8:63:cf:e0:5a:af:3b:e2:cc:8a:1b:0f:c1:65:40: 96:28:ce:09:7d:38:34:05:d1:e2:23:a5:e9:3a:fd: 16:ac:f0:f6:ea:38:18:ce:a7:09:17:07:f1:5e:5b: ba:58:64:e0:7f:9a:11:3d:47:8a:85:b8:64:57:bc: 25:c6:29:7d:1f:ed:05:41:5c:a1:11:9f:dd:2a:13: 90:df:bc:59:de:e4:39:86:07:30:45:2e:73:fe:98: f4:f6:d9:34:a0:46:35:df:7a:ec:0d:0e:06:a8:46: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6E:19:FA:E0:CC:9F:30:AD:0D:1D:FE:04:E2:F8:30:CE:CE:F3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:89:ac:f3:c5:cf:1a:7e:c5:48:b0:97:01:65:8c:7b:12:bb: 72:80:e2:9c:d6:f4:dc:a5:d7:8f:e0:40:e5:dd:d6:f4:07:af: a3:4b:e7:bc:12:a6:fd:9d:1d:3e:1b:74:6e:ff:49:3e:d9:74: 48:8f:cb:8f:ad:87:03:ec:e4:c6:0f:f0:db:bf:24:55:c7:c3: f7:67:4a:bb:81:50:64:a7:32:c7:c3:1d:ad:89:1b:52:b1:75: 32:5c:c6:14:ac:d3:fb:f4:03:74:ee:d3:c4:18:ee:97:8b:9e: 44:05:a7:20:6a:c1:02:f1:f3:1d:f8:a3:42:4d:71:67:51:8c: 62:b5:6f:b3:f1:9e:3b:13:42:f4:97:ff:c5:cf:c9:85:6b:33: 3d:42:f9:61:e6:5b:a7:dc:e4:a8:09:b6:43:9d:31:96:c4:96: 52:f7:33:76:dd:04:19:67:23:1d:d2:d8:2e:de:33:1f:4e:93: b6:e2:83:e4:9f:81:7d:15:07:90:4e:17:79:d5:ad:17:87:da: 17:b5:f4:c3:b6:9b:77:b7:4e:25:a1:53:16:72:00:06:d2:29: c6:37:6b:3d:22:29:81:87:ce:a1:c6:aa:1f:37:bf:72:71:5e: c3:d3:6a:62:76:54:b9:02:a4:4a:06:df:98:5b:63:aa:1e:b6: 00:e1:e1:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAbZyDSNyDTJsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTIyZGU2ODctNDExMi00MDg5LTkyNmItM2I1MjA2YzZiMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7JURfMZLOx62K0fwtKLODx0wUyrlAJZme82 0WHaw9TRfQmJb16irTSvjt/3eMGH1k1+ktghbcTC1NfG45+A2b0yZkGsxJpi1Py0 kpy7yzt7DRgrDWPPdsbXCtl+n6Y2bOb9xCk59rvVGThb+QXZSQdKznZihEkzzm+F ApKjDs7Z/M796rHuqIOUdve3dGmteeb10BzoY8/gWq874syKGw/BZUCWKM4JfTg0 BdHiI6XpOv0WrPD26jgYzqcJFwfxXlu6WGTgf5oRPUeKhbhkV7wlxil9H+0FQVyh EZ/dKhOQ37xZ3uQ5hgcwRS5z/pj09tk0oEY133rsDQ4GqEZuPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFuGfrgzJ8wrQ0d/gTi+DDOzvMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWFmMjhlMGYtMDViZC0z MWEyLWI0YjAtY2IzNGU2MTk1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaJrPPFzxp+xUiwlwFljHsSu3KA4pzW9Nyl14/gQOXd1vQHr6NL57wS pv2dHT4bdG7/ST7ZdEiPy4+thwPs5MYP8Nu/JFXHw/dnSruBUGSnMsfDHa2JG1Kx dTJcxhSs0/v0A3Tu08QY7peLnkQFpyBqwQLx8x34o0JNcWdRjGK1b7PxnjsTQvSX /8XPyYVrMz1C+WHmW6fc5KgJtkOdMZbEllL3M3bdBBlnIx3S2C7eMx9Ok7big+Sf gX0VB5BOF3nVrReH2he19MO2m3e3TiWhUxZyAAbSKcY3az0iKYGHzqHGqh83v3Jx XsPTamJ2VLkCpEoG35hbY6oetgDh4ao= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:19 2025 by rpki-client