$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/cc827d5e-d871-3d02-8e5a-eb0dafc7755c.roa File: cc827d5e-d871-3d02-8e5a-eb0dafc7755c.roa (raw, json) Hash identifier: njnaptV9vJe5+HTNavavOE4z0c0/gR343/UY9HDSUoE= Subject key identifier: 10:B0:86:1E:2C:28:5E:36:86:FB:18:CA:BC:AB:64:65:D1:66:CC:12 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584930DE70F9A7BD78C27E229380 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/cc827d5e-d871-3d02-8e5a-eb0dafc7755c.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 262287 IP address blocks: 172.102.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:70:f9:a7:bd:78:c2:7e:22:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=cc9ade50-0231-44f4-bc29-be8f3ad3866b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:bc:bc:fe:6a:ce:d7:05:9c:91:09:0b:82: 41:35:b2:b5:f7:57:7e:c4:28:aa:56:9b:d9:d6:5f: c1:ca:09:13:c9:4c:07:76:19:91:e6:29:89:e4:f4: b8:41:c4:0c:25:bb:92:ea:be:06:72:54:36:81:2f: 51:4d:74:c7:5b:9a:25:cb:3b:5b:ba:48:2f:64:41: a2:4a:ba:8e:cb:17:bb:c4:29:a0:cd:9a:75:46:12: 3a:25:9b:b1:1a:c6:94:68:82:0e:81:71:0d:41:cd: 48:07:8d:46:28:5d:27:6f:5d:d5:3f:84:f7:aa:a3: fd:34:27:7a:04:19:cc:b2:e1:26:c7:a0:db:52:e3: 58:79:a6:c5:f9:11:fe:f7:16:d9:25:d7:b8:69:5d: c1:a4:51:ee:f1:f8:65:f6:60:1d:d4:3d:1b:f0:eb: 0c:04:af:3f:aa:94:3c:69:08:5f:1d:92:bc:33:40: 20:d2:c5:04:a6:8e:ef:b1:c2:9f:30:6b:3c:03:3b: 8e:50:87:a5:3c:91:4e:d3:f6:c4:7e:75:08:73:a9: 7d:61:33:4e:61:ae:91:e7:33:ee:d1:83:68:c4:8b: ad:e6:b5:40:6e:7a:fd:63:08:21:02:79:b5:c4:c9: b3:e1:8b:2f:ad:d3:c4:ae:59:3a:df:e9:54:9d:4f: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B0:86:1E:2C:28:5E:36:86:FB:18:CA:BC:AB:64:65:D1:66:CC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/cc827d5e-d871-3d02-8e5a-eb0dafc7755c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:af:db:1a:16:22:f4:cb:fa:43:94:6e:d2:13:b7:c7:0e:b0: b3:3b:b8:b7:60:a1:64:99:53:9b:69:9b:b4:e5:a2:42:6a:b5: fd:b5:c0:7f:e5:10:47:42:16:36:38:29:92:2d:74:f3:69:a6: 87:7e:aa:fb:37:7c:ac:1a:45:3f:02:5c:4a:de:12:b4:89:27: e8:51:88:87:94:e8:af:15:37:c0:5d:eb:02:9e:a0:e4:83:83: 93:25:dc:3d:82:27:4e:ba:73:0c:53:b2:ca:d6:d7:c5:50:ea: 15:b7:3f:8c:bc:fd:3d:18:d8:0b:4c:91:29:b5:9d:39:81:27: b3:0d:c3:42:a6:38:d7:c0:e8:7a:b3:8f:a1:f4:ac:63:c4:54: 9f:72:c7:25:07:9a:ec:3c:60:6a:51:77:b1:75:ee:da:b6:ec: 5e:f4:e8:62:fc:a4:d5:17:16:9e:40:17:a0:14:a5:83:75:5c: 64:e5:2f:1b:6a:54:16:92:52:59:f2:92:8c:37:5a:a7:f8:90: 2a:81:7f:c5:70:7f:67:79:e3:92:9d:b4:bf:96:7d:90:3a:ae: 5c:34:4e:2f:ff:4a:02:73:15:6c:e6:ab:93:87:6e:ea:93:5a: dd:aa:99:89:dd:00:e5:c9:77:b3:4f:82:5f:c1:78:fc:bc:85: 48:c6:07:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nD5p714wn4ik4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk Y2M5YWRlNTAtMDIzMS00NGY0LWJjMjktYmU4ZjNhZDM4NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyy8vP5qztcFnJEJC4JBNbK191d+xCiqVpvZ 1l/BygkTyUwHdhmR5imJ5PS4QcQMJbuS6r4GclQ2gS9RTXTHW5olyztbukgvZEGi SrqOyxe7xCmgzZp1RhI6JZuxGsaUaIIOgXENQc1IB41GKF0nb13VP4T3qqP9NCd6 BBnMsuEmx6DbUuNYeabF+RH+9xbZJde4aV3BpFHu8fhl9mAd1D0b8OsMBK8/qpQ8 aQhfHZK8M0Ag0sUEpo7vscKfMGs8AzuOUIelPJFO0/bEfnUIc6l9YTNOYa6R5zPu 0YNoxIut5rVAbnr9YwghAnm1xMmz4YsvrdPErlk63+lUnU/yIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCwhh4sKF42hvsYyryrZGXRZswSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvY2M4MjdkNWUtZDg3MS0z ZDAyLThlNWEtZWIwZGFmYzc3NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqv2xoWIvTL+kOUbtITt8cOsLM7uLdgoWSZU5tpm7TlokJqtf21wH/l EEdCFjY4KZItdPNppod+qvs3fKwaRT8CXEreErSJJ+hRiIeU6K8VN8Bd6wKeoOSD g5Ml3D2CJ066cwxTssrW18VQ6hW3P4y8/T0Y2AtMkSm1nTmBJ7MNw0KmONfA6Hqz j6H0rGPEVJ9yxyUHmuw8YGpRd7F17tq27F706GL8pNUXFp5AF6AUpYN1XGTlLxtq VBaSUlnykow3Wqf4kCqBf8Vwf2d545KdtL+WfZA6rlw0Ti//SgJzFWzmq5OHbuqT Wt2qmYndAOXJd7NPgl/BePy8hUjGB9g= -----END CERTIFICATE-----Generated at Fri May 9 02:46:17 2025 by rpki-client