$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa File: cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa (raw, json) Hash identifier: Mkv40Bz4Yw7a6sB7OalhEKQ8rcWByjXlIQevWjFwtxk= Subject key identifier: 69:F7:A2:2B:9E:99:24:E5:1A:6A:99:48:F0:89:68:E3:A3:EE:E9:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582007D05B6ACE9AC655B64 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 172.217.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:00:7d:05:b6:ac:e9:ac:65:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3cd68666-3a44-41d6-934f-efe33e8737b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:2c:ba:cc:43:24:81:75:fe:b2:ad:25:85: e6:cc:89:25:1c:9d:12:0e:d2:82:92:43:08:58:db: 63:1d:90:ea:17:47:23:47:43:2d:3b:eb:08:4c:c5: c6:45:8b:23:0b:02:5e:0c:cd:02:4c:de:ee:b0:ef: 62:a4:8a:02:3e:bc:68:f5:45:98:2b:e9:0c:28:27: c8:c0:2e:15:78:b9:55:72:01:5a:a3:d9:ee:05:93: 79:2b:0f:d3:e9:26:6a:64:df:42:52:f9:8e:ea:e6: de:c3:84:ff:9c:cf:f4:21:b6:eb:c1:47:52:80:58: 75:04:d2:e1:ff:7f:24:a2:c6:c2:c7:be:75:66:53: c3:4a:e7:90:89:0b:3a:9c:da:48:21:f9:16:96:c2: e6:c9:54:0d:c9:00:c1:0c:67:70:35:1d:f8:6c:9e: 26:49:d0:af:ac:d4:95:4a:3f:5b:07:70:3f:58:66: 6e:b1:c3:d4:76:17:83:87:0f:f7:4e:c5:14:b2:97: d5:b5:35:d8:80:a4:d7:15:55:73:c5:df:96:62:a4: 5e:ea:ea:17:08:3f:6d:6e:23:2a:f8:03:93:2b:5f: 97:1f:d6:d2:4d:b7:5f:7b:f9:5f:db:4e:f8:fc:42: a9:46:ac:1d:14:4a:55:6f:8b:14:33:fc:c7:d3:8a: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F7:A2:2B:9E:99:24:E5:1A:6A:99:48:F0:89:68:E3:A3:EE:E9:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8e:f9:fc:03:99:9a:ab:40:45:3e:44:6d:2b:26:75:79:13: 72:6d:b5:1e:52:c0:9f:fa:d0:a3:47:23:45:53:c4:4c:8d:2a: ee:a6:78:67:5e:b2:8a:0d:d2:c3:1f:21:eb:e4:a6:57:0d:51: 15:f1:47:a9:43:16:7d:a1:03:ac:21:b9:03:ce:28:02:c8:73: ee:b3:64:ad:15:b1:e4:c3:d4:ef:86:47:e1:e2:c7:84:5e:cb: e9:d0:5a:47:ef:55:f0:e4:34:7f:42:0b:06:d8:2d:77:5f:40: 3f:bf:77:ad:76:f0:40:96:d0:00:12:36:a6:12:43:37:69:f7: 6e:38:17:c3:5d:25:16:54:8e:6c:58:9b:dd:d5:6e:0b:6e:75: a8:29:08:f4:88:92:6d:db:b8:ff:a9:ae:c3:2b:68:fa:9a:8c: 70:ed:ca:77:71:2e:c4:11:85:eb:70:12:18:b3:f8:a9:3e:42: 8a:1d:bc:2e:a7:77:e6:43:f3:cc:f4:ee:f1:69:24:2f:c8:c7: 0b:3d:cc:6e:6f:77:4a:5d:81:95:d3:24:07:23:c8:11:34:4b: 7b:fd:46:30:f7:ce:82:24:60:8f:14:54:9b:6d:45:13:0a:e8: 1b:13:b3:09:05:0f:ca:c8:df:41:6f:ce:0d:56:c1:93:19:d0: 79:ee:ea:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggB9Bbas6axlW2QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2NkNjg2NjYtM2E0NC00MWQ2LTkzNGYtZWZlMzNlODczN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzUsusxDJIF1/rKtJYXmzIklHJ0SDtKCkkMI WNtjHZDqF0cjR0MtO+sITMXGRYsjCwJeDM0CTN7usO9ipIoCPrxo9UWYK+kMKCfI wC4VeLlVcgFao9nuBZN5Kw/T6SZqZN9CUvmO6ubew4T/nM/0IbbrwUdSgFh1BNLh /38kosbCx751ZlPDSueQiQs6nNpIIfkWlsLmyVQNyQDBDGdwNR34bJ4mSdCvrNSV Sj9bB3A/WGZuscPUdheDhw/3TsUUspfVtTXYgKTXFVVzxd+WYqRe6uoXCD9tbiMq +AOTK1+XH9bSTbdfe/lf2074/EKpRqwdFEpVb4sUM/zH04qVaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn3oiuemSTlGmqZSPCJaOOj7unFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2M0YzUyZmMtNmY0Yy0z OTFmLWJhMTEtOWRhNTEyMTRmOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaO+fwDmZqrQEU+RG0rJnV5E3JttR5SwJ/60KNHI0VTxEyNKu6meGde sooN0sMfIevkplcNURXxR6lDFn2hA6whuQPOKALIc+6zZK0VseTD1O+GR+Hix4Re y+nQWkfvVfDkNH9CCwbYLXdfQD+/d6128ECW0AASNqYSQzdp9244F8NdJRZUjmxY m93VbgtudagpCPSIkm3buP+prsMraPqajHDtyndxLsQRhetwEhiz+Kk+QoodvC6n d+ZD88z07vFpJC/Ixws9zG5vd0pdgZXTJAcjyBE0S3v9RjD3zoIkYI8UVJttRRMK 6BsTswkFD8rI30Fvzg1WwZMZ0Hnu6pU= -----END CERTIFICATE-----Generated at Fri Apr 4 08:25:05 2025 by rpki-client