$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa File: cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa (raw, json) Hash identifier: wW+RO35b04rmEXzyqockBea8WOicRTBGfZlBTIUdosc= Subject key identifier: D3:84:C8:84:7C:E7:F0:42:E5:7A:E8:93:C8:22:D2:85:0D:06:C1:3A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841221D85040AA621F31E700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 172.217.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:21:d8:50:40:aa:62:1f:31:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=00193a1a-78ea-4c50-8938-43daa68ff60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:15:53:99:69:9b:0b:50:53:e8:04:eb:34: a5:7b:4c:0a:82:79:bf:03:ff:e1:9c:5b:35:87:f9: 72:30:5e:3e:00:ba:86:f9:7b:ea:f7:e4:59:f3:11: 59:42:f6:bd:db:f6:d9:c5:71:73:58:86:e0:ad:87: ee:2e:5e:36:6d:30:59:5d:58:b9:03:20:77:52:3a: 9d:67:b7:b4:7d:9e:55:db:68:77:24:5e:92:cc:06: dc:af:b3:8a:9a:bb:56:d4:b2:98:9a:be:f5:79:97: d5:f0:f0:0f:01:cb:1b:0a:f8:81:9c:72:ca:20:80: 8c:9e:30:b2:63:0e:de:f1:ad:68:1c:c0:c8:1e:44: 1d:45:f4:18:c5:60:49:00:a6:34:ce:f8:e8:c5:fa: f5:dd:c2:01:d6:83:89:0a:d2:2d:a6:4e:0e:ed:ee: c4:10:99:ff:d9:f8:e1:f8:0c:ae:3b:db:ba:17:83: bb:2e:75:40:57:c3:2a:c7:26:e6:48:2a:a5:09:c6: 76:be:2c:7d:fe:c0:95:15:a6:1f:2e:66:8b:e9:ce: fa:0a:95:86:35:cb:48:e0:85:8e:96:41:67:d7:c7: 00:19:d9:af:3b:4a:99:8f:f9:59:1b:ff:12:78:62: 05:d2:0a:41:ea:e2:56:5d:36:5f:39:f5:ce:84:e0: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:C8:84:7C:E7:F0:42:E5:7A:E8:93:C8:22:D2:85:0D:06:C1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc4c52fc-6f4c-391f-ba11-9da51214f9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:03:6b:da:95:78:f1:22:21:13:2a:5f:34:c7:76:b4:bd:cf: d4:9a:f3:13:a9:09:92:3d:d6:ae:b2:bb:e5:fa:7f:a7:88:ea: c4:b6:82:21:a3:57:f0:96:7e:8e:28:99:48:df:da:68:83:2c: e4:56:cd:b3:c8:d9:98:31:19:34:a4:13:a8:b6:07:ff:21:2f: 7d:3f:1c:06:21:20:6a:1e:c6:cf:97:87:e3:ff:9c:76:f6:ec: dc:95:33:ff:c6:5f:93:ab:d8:73:91:37:14:6a:e6:12:86:70: fe:6b:1c:fe:45:30:be:11:3c:6f:c3:85:65:8d:30:22:e3:8e: 47:32:d1:a5:4b:d9:82:97:ca:df:f6:3b:8c:b8:01:6d:bb:e7: 37:e6:b6:50:49:c6:fb:de:31:80:10:a2:e2:4d:c3:1b:79:39: 9d:6b:87:63:54:0f:cd:ed:92:cf:ee:77:ee:98:0b:6c:62:04: 83:a4:0c:b6:67:7d:ec:cf:79:cc:9f:b8:bf:ac:e7:3b:66:d0: 79:f0:d3:1d:7f:c0:6e:52:de:62:6a:d0:c2:26:d2:76:28:12: 75:f8:6b:00:22:0b:4b:bb:7d:1e:ed:a1:58:03:1e:36:0b:13: 7c:23:5a:8f:66:b6:8a:9a:25:5a:b2:3a:f0:72:35:bc:f3:9e: 85:68:59:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiHYUECqYh8x5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDAxOTNhMWEtNzhlYS00YzUwLTg5MzgtNDNkYWE2OGZmNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2gVU5lpmwtQU+gE6zSle0wKgnm/A//hnFs1 h/lyMF4+ALqG+Xvq9+RZ8xFZQva92/bZxXFzWIbgrYfuLl42bTBZXVi5AyB3Ujqd Z7e0fZ5V22h3JF6SzAbcr7OKmrtW1LKYmr71eZfV8PAPAcsbCviBnHLKIICMnjCy Yw7e8a1oHMDIHkQdRfQYxWBJAKY0zvjoxfr13cIB1oOJCtItpk4O7e7EEJn/2fjh +AyuO9u6F4O7LnVAV8MqxybmSCqlCcZ2vix9/sCVFaYfLmaL6c76CpWGNctI4IWO lkFn18cAGdmvO0qZj/lZG/8SeGIF0gpB6uJWXTZfOfXOhOCs+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOEyIR85/BC5Xrok8gi0oUNBsE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2M0YzUyZmMtNmY0Yy0z OTFmLWJhMTEtOWRhNTEyMTRmOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIDa9qVePEiIRMqXzTHdrS9z9Sa8xOpCZI91q6yu+X6f6eI6sS2giGj V/CWfo4omUjf2miDLORWzbPI2ZgxGTSkE6i2B/8hL30/HAYhIGoexs+Xh+P/nHb2 7NyVM//GX5Or2HORNxRq5hKGcP5rHP5FML4RPG/DhWWNMCLjjkcy0aVL2YKXyt/2 O4y4AW275zfmtlBJxvveMYAQouJNwxt5OZ1rh2NUD83tks/ud+6YC2xiBIOkDLZn fezPecyfuL+s5ztm0Hnw0x1/wG5S3mJq0MIm0nYoEnX4awAiC0u7fR7toVgDHjYL E3wjWo9mtoqaJVqyOvByNbzznoVoWWQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:15:18 2025 by rpki-client