$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ebeef820-32e0-34e8-98d2-02deea166130.roa File: ebeef820-32e0-34e8-98d2-02deea166130.roa (raw, json) Hash identifier: kPrGPq1I2rQoteA6ggoD9SM0wYphYz5JthJBh2SyRlo= Subject key identifier: 58:9E:B9:9A:4A:7A:48:91:CC:40:18:53:78:D5:7A:DC:AA:9B:2C:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BB8BC3AA3780D838E5A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ebeef820-32e0-34e8-98d2-02deea166130.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 70.32.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b8:bc:3a:a3:78:0d:83:8e:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=99c54fef-56ac-4920-8d11-dc03ad2ec25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f9:c4:70:75:9c:51:22:ca:d1:b1:91:e0:f1: ce:95:ef:15:8c:a0:c0:a8:a0:bf:51:7b:da:d6:4e: 40:0a:30:99:70:d8:11:e7:7b:50:91:20:78:86:52: 15:2d:26:f0:ae:f1:e3:3b:93:94:24:da:0f:03:16: 45:01:f1:71:cf:ce:f2:f8:81:09:15:e1:bb:e0:96: c9:f5:4c:39:3e:3e:c7:e6:30:7e:88:ba:40:a6:71: 99:8a:8a:83:99:ca:51:c3:f8:df:2c:65:a9:b5:04: 99:45:ac:f0:f8:17:d9:f7:be:3a:14:e1:c2:c8:34: 89:6f:1d:4f:f7:82:9c:23:a3:97:ac:c4:4f:7c:eb: 21:0f:db:b7:4c:99:9e:1a:13:01:c8:f7:f6:57:5e: 5e:8e:6a:41:23:e3:4a:f0:76:ff:f0:5f:bb:4a:80: e2:23:a8:32:67:03:25:ae:85:db:08:4c:ea:d8:4e: 30:c8:1b:ac:66:97:1c:85:cd:5f:7c:56:38:3a:f0: 23:26:eb:eb:25:48:b5:4b:a7:99:7c:50:ab:45:3b: 6e:ad:9e:61:46:8e:ef:53:1f:6f:2e:60:54:b4:33: 75:f6:8c:25:b2:a7:fd:7a:d4:c2:8c:ee:8b:82:f8: 56:16:0d:79:53:3d:49:68:3c:02:c1:2e:ef:8e:2b: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:B9:9A:4A:7A:48:91:CC:40:18:53:78:D5:7A:DC:AA:9B:2C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ebeef820-32e0-34e8-98d2-02deea166130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:45:17:42:33:57:eb:28:10:9d:d7:f3:3f:10:55:6d:64:86: 12:50:41:d6:23:aa:88:b6:c3:ef:b4:68:a6:aa:27:8c:fa:94: 52:e5:59:23:3f:5c:ce:90:8d:8a:13:6c:44:91:46:00:fe:9d: 39:5d:08:09:90:0e:2e:bb:4a:01:e2:f4:4b:08:15:e4:6e:50: 67:d0:b8:f0:ed:68:24:f6:7a:10:81:66:3d:fd:8b:5e:2d:66: d1:19:bb:33:94:90:6c:21:92:ed:0c:69:e2:d6:e9:b5:ca:f8: 9f:a5:4a:6e:24:71:15:b8:e3:e8:a4:a0:0f:40:28:a4:d3:14: 97:da:28:8c:0d:88:30:ee:90:7e:e4:cc:2c:84:9e:c7:00:53: e4:ab:23:0b:28:ce:ca:2b:6e:ee:23:76:53:24:75:2e:52:38: 1f:ef:2f:64:35:85:20:a9:ce:d9:76:9b:7a:3d:ee:78:d0:f3: 1f:ec:d4:cf:df:bc:aa:01:3a:7a:e2:6e:60:2c:86:c7:ce:05: 10:79:3d:2c:f9:04:56:99:87:53:04:0e:78:04:7f:12:af:f3: 46:9d:bd:ea:d0:9f:ac:87:f1:c6:17:57:b3:5d:4b:bd:b0:96: e9:f8:c8:9d:cf:5f:e7:df:b7:89:7d:91:77:a0:bb:e6:53:84: f9:62:16:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7i8OqN4DYOOWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTljNTRmZWYtNTZhYy00OTIwLThkMTEtZGMwM2FkMmVjMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fnEcHWcUSLK0bGR4PHOle8VjKDAqKC/UXva 1k5ACjCZcNgR53tQkSB4hlIVLSbwrvHjO5OUJNoPAxZFAfFxz87y+IEJFeG74JbJ 9Uw5Pj7H5jB+iLpApnGZioqDmcpRw/jfLGWptQSZRazw+BfZ9746FOHCyDSJbx1P 94KcI6OXrMRPfOshD9u3TJmeGhMByPf2V15ejmpBI+NK8Hb/8F+7SoDiI6gyZwMl roXbCEzq2E4wyBusZpcchc1ffFY4OvAjJuvrJUi1S6eZfFCrRTturZ5hRo7vUx9v LmBUtDN19owlsqf9etTCjO6LgvhWFg15Uz1JaDwCwS7vjivIkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFieuZpKekiRzEAYU3jVetyqmyyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWJlZWY4MjAtMzJlMC0z NGU4LTk4ZDItMDJkZWVhMTY2MTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVFF0IzV+soEJ3X8z8QVW1khhJQQdYjqoi2w++0aKaqJ4z6lFLlWSM/ XM6QjYoTbESRRgD+nTldCAmQDi67SgHi9EsIFeRuUGfQuPDtaCT2ehCBZj39i14t ZtEZuzOUkGwhku0MaeLW6bXK+J+lSm4kcRW44+ikoA9AKKTTFJfaKIwNiDDukH7k zCyEnscAU+SrIwsozsorbu4jdlMkdS5SOB/vL2Q1hSCpztl2m3o97njQ8x/s1M/f vKoBOnribmAshsfOBRB5PSz5BFaZh1MEDngEfxKv80adverQn6yH8cYXV7NdS72w lun4yJ3PX+fft4l9kXegu+ZThPliFgQ= -----END CERTIFICATE-----Generated at Fri Apr 4 08:43:52 2025 by rpki-client