$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa File: cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa (raw, json) Hash identifier: iDx2PcjcOJ0GuEP1rVtfoSOMpnu9KUgwnz0ljeXN4WQ= Subject key identifier: 0B:B0:16:09:9D:15:1E:54:3D:5D:7E:93:EE:D6:DD:D0:46:F2:78:63 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584705514A7A52E15FCEBCA2A540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa Signing time: Wed 28 Aug 2024 01:00:31 +0000 ROA not before: Wed 28 Aug 2024 01:00:31 +0000 ROA not after: Tue 26 Nov 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.217.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:51:4a:7a:52:e1:5f:ce:bc:a2:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 28 01:00:31 2024 GMT Not After : Nov 26 02:00:31 2024 GMT Subject: CN=47ee73a7-f50d-44ed-a0b7-41f6706144c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:9c:94:31:ed:e3:85:fb:13:7c:21:d0:94: f2:c3:cb:f2:ac:2a:95:a9:65:83:e7:63:91:16:09: 96:ce:d0:90:73:3f:89:17:82:86:ca:52:20:db:e6: 08:f8:b0:19:d6:cc:49:9a:95:b1:29:49:ce:cc:1b: e5:6b:c1:0b:4a:b5:a7:b6:0d:04:0b:3d:a0:dc:0a: a5:5f:b9:ca:4c:ad:db:94:6d:fe:89:82:6b:52:9a: 8e:2f:32:95:fc:62:be:70:81:0f:fe:38:43:6a:1f: 1b:70:88:b7:b4:e0:e3:94:e7:3b:84:cd:8e:10:2f: 97:d7:33:17:ec:ff:cc:ce:3c:5b:fc:9b:a6:ef:0f: 47:4c:b1:92:08:85:02:ce:0c:57:f8:08:7c:9d:6f: 65:35:2e:94:66:e9:d8:9f:4c:e7:89:9c:fb:ae:16: 42:c4:14:65:39:a4:b2:6b:39:88:7d:c1:f3:f1:55: 61:7c:48:a1:9e:1e:59:85:7e:06:ca:81:ba:1d:34: fe:a0:62:ba:16:55:79:62:4b:92:b8:76:c6:e0:f1: e4:a3:86:7d:54:76:b4:7d:9f:fa:9f:e9:ce:e5:b3: a4:70:76:a4:30:62:4c:89:58:23:df:46:2b:e0:95: 64:93:0c:70:2b:ef:09:70:c6:82:29:61:9e:38:dd: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B0:16:09:9D:15:1E:54:3D:5D:7E:93:EE:D6:DD:D0:46:F2:78:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:03:b8:7e:03:00:5e:75:19:a8:bb:7d:03:ee:16:70:d5:69: 0d:33:49:a4:4c:fe:bf:d5:35:57:88:b3:65:b3:d3:ed:75:b0: 7e:04:25:64:eb:c5:ce:b0:ca:9c:3b:ed:bf:26:4b:5b:57:15: 16:3c:e2:88:c3:15:6e:e0:2c:df:91:71:17:e9:64:5f:49:86: 5e:07:cf:81:cf:15:86:97:71:72:b3:91:49:4e:8b:f8:9f:a6: 1a:bf:d7:95:df:bc:a4:81:a2:d8:db:4f:04:ff:ca:f6:93:ab: d9:a7:92:b2:d5:59:e9:28:d6:80:f4:90:4e:b7:20:76:d7:a2: 5d:eb:bf:fa:61:92:c9:11:5c:04:26:d3:98:2b:ea:cd:cf:52: ed:18:d4:05:20:75:61:a2:99:f6:19:35:8a:f6:2e:ef:72:2d: 40:7e:64:c9:03:f5:ce:e5:16:3a:82:5b:a8:2d:d1:53:25:b1: c1:b9:fc:8a:23:f7:32:d4:35:36:d5:db:7e:f6:57:57:44:21: 8a:80:e3:4c:d5:11:f8:30:c6:ce:14:9c:9f:0e:3f:c1:92:b3: a3:b2:d0:6f:82:35:2c:b0:dd:1a:95:99:5c:1c:7b:96:04:5c: bd:37:26:4e:2a:56:79:db:e6:61:46:55:e6:77:f3:a6:01:d5: 28:46:6a:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUUp6UuFfzryipUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NDdlZTczYTctZjUwZC00NGVkLWEwYjctNDFmNjcwNjE0NGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRiclDHt44X7E3wh0JTyw8vyrCqVqWWD52OR FgmWztCQcz+JF4KGylIg2+YI+LAZ1sxJmpWxKUnOzBvla8ELSrWntg0ECz2g3Aql X7nKTK3blG3+iYJrUpqOLzKV/GK+cIEP/jhDah8bcIi3tODjlOc7hM2OEC+X1zMX 7P/Mzjxb/Jum7w9HTLGSCIUCzgxX+Ah8nW9lNS6UZunYn0zniZz7rhZCxBRlOaSy azmIfcHz8VVhfEihnh5ZhX4GyoG6HTT+oGK6FlV5YkuSuHbG4PHko4Z9VHa0fZ/6 n+nO5bOkcHakMGJMiVgj30Yr4JVkkwxwK+8JcMaCKWGeON258wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuwFgmdFR5UPV1+k+7W3dBG8nhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2M0YzUyZmMtNmY0Yy0z OTFmLWJhMTEtOWRhNTEyMTRmOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwDuH4DAF51Gai7fQPuFnDVaQ0zSaRM/r/VNVeIs2Wz0+11sH4EJWTr xc6wypw77b8mS1tXFRY84ojDFW7gLN+RcRfpZF9Jhl4Hz4HPFYaXcXKzkUlOi/if phq/15XfvKSBotjbTwT/yvaTq9mnkrLVWeko1oD0kE63IHbXol3rv/phkskRXAQm 05gr6s3PUu0Y1AUgdWGimfYZNYr2Lu9yLUB+ZMkD9c7lFjqCW6gt0VMlscG5/Ioj 9zLUNTbV2372V1dEIYqA40zVEfgwxs4UnJ8OP8GSs6Oy0G+CNSyw3RqVmVwce5YE XL03Jk4qVnnb5mFGVeZ386YB1ShGajQ= -----END CERTIFICATE-----Generated at Sat Sep 7 22:45:10 2024 by rpki-client on console-ams.rpki-client.org