$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa File: cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa (raw, json) Hash identifier: Vx2MutnLV6kMuxJy3YK/CJXSzSdP3cv6VKYkazCXk3Y= Subject key identifier: 9A:E2:9C:2C:63:1B:26:07:6C:2D:06:CC:71:0A:A1:DB:FE:C6:E2:89 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858457D13291686864C173D3ABE40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.94.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:29:16:86:86:4c:17:3d:3a:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=b3a12e5d-a492-435a-9e04-80a8ee27ff64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:cb:61:86:d4:1c:43:29:f3:49:d4:8a:46: a7:d6:0e:6e:76:88:37:11:fc:bf:59:73:73:7d:01: 08:fb:31:f9:82:9b:96:6f:37:eb:ee:41:7f:5d:ee: c0:2f:51:e8:34:4c:19:a2:f4:b3:4b:74:5c:19:5f: 0b:9b:1f:bd:e5:0c:0e:4b:01:9b:3a:0e:e0:82:af: 28:c9:7f:92:07:a2:53:7b:d4:b1:dd:fa:76:ca:c9: f8:23:6e:a4:d0:bb:05:fb:21:56:d3:42:ad:fa:97: 58:eb:d5:cf:25:a1:81:40:e2:2a:12:ac:48:e8:6b: 5f:4c:c6:17:8d:cc:be:31:2e:90:4c:9e:82:0d:4f: e8:cf:77:32:3f:39:b4:5d:4c:cc:12:32:b8:04:aa: a9:66:0c:ba:46:82:1f:e1:33:18:4c:57:fd:91:42: 95:93:45:ab:9f:49:10:b0:c2:89:c3:55:10:34:a5: 7a:5e:b9:e2:fa:b5:57:45:07:ab:83:cd:d8:fa:fb: 70:3f:ea:be:c5:6b:2e:00:4c:7c:66:43:06:b4:b9: f9:c5:49:17:a0:ee:77:cd:07:b1:89:bb:c4:9e:3f: e1:45:b4:9d:ba:75:41:7e:5e:95:e5:71:a3:8f:c8: 77:67:5b:a0:45:ce:e7:98:04:8d:96:51:5c:48:dc: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:9C:2C:63:1B:26:07:6C:2D:06:CC:71:0A:A1:DB:FE:C6:E2:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c7:33:68:cf:05:c8:70:c5:3a:be:c4:06:a1:ae:07:1e:3d: 3f:8e:cd:76:c3:3f:87:4e:7c:e5:9e:5d:e6:05:54:95:5e:2e: b4:b5:5d:d4:c6:36:4c:35:b1:a7:77:6b:d9:de:e0:b6:3a:99: be:85:d2:c2:76:ff:0e:dc:89:17:51:ff:de:e0:86:b6:0b:91: 95:a7:0b:f4:04:87:23:0c:10:79:c6:f9:8f:29:0a:43:99:05: 62:88:ac:03:5c:26:d3:3c:88:64:7e:03:c8:fb:c3:0d:da:60: ad:2e:b6:88:ab:3f:5e:3b:ea:ed:ad:4e:8c:ad:3f:8c:47:f7: 22:ec:dd:a7:13:c3:62:54:b5:0d:32:54:af:7a:9c:61:15:20: 98:d7:e8:f9:36:ac:d1:d8:aa:33:91:a8:48:a1:5f:29:56:5d: 16:fa:ae:68:05:48:71:63:7e:6d:f9:70:01:5e:f8:60:3e:57: c8:5a:d3:11:a4:4d:3e:bf:f4:9f:e3:4b:fe:a8:5d:56:20:b8: ed:e6:39:ba:12:7f:1f:f2:cc:1d:39:c4:f9:20:c3:5c:48:32: 7e:8e:4b:8e:11:66:11:a6:71:e6:6c:7e:5b:64:22:10:be:0b: 70:62:d2:75:c8:51:14:87:e9:c3:f1:7a:31:32:68:0c:3d:a3: d3:cc:76:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9EykWhoZMFz06vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk YjNhMTJlNWQtYTQ5Mi00MzVhLTllMDQtODBhOGVlMjdmZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCPLYYbUHEMp80nUikan1g5udog3Efy/WXNz fQEI+zH5gpuWbzfr7kF/Xe7AL1HoNEwZovSzS3RcGV8Lmx+95QwOSwGbOg7ggq8o yX+SB6JTe9Sx3fp2ysn4I26k0LsF+yFW00Kt+pdY69XPJaGBQOIqEqxI6GtfTMYX jcy+MS6QTJ6CDU/oz3cyPzm0XUzMEjK4BKqpZgy6RoIf4TMYTFf9kUKVk0Wrn0kQ sMKJw1UQNKV6Xrni+rVXRQerg83Y+vtwP+q+xWsuAEx8ZkMGtLn5xUkXoO53zQex ibvEnj/hRbSdunVBfl6V5XGjj8h3Z1ugRc7nmASNllFcSNxqmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrinCxjGyYHbC0GzHEKodv+xuKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2ZkY2E2ZTctZmE0Zi0z MWNhLWJhODYtZGM2YTE3NTM1NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjHM2jPBchwxTq+xAahrgcePT+OzXbDP4dOfOWeXeYFVJVeLrS1XdTG Nkw1sad3a9ne4LY6mb6F0sJ2/w7ciRdR/97ghrYLkZWnC/QEhyMMEHnG+Y8pCkOZ BWKIrANcJtM8iGR+A8j7ww3aYK0utoirP1476u2tToytP4xH9yLs3acTw2JUtQ0y VK96nGEVIJjX6Pk2rNHYqjORqEihXylWXRb6rmgFSHFjfm35cAFe+GA+V8ha0xGk TT6/9J/jS/6oXVYguO3mOboSfx/yzB05xPkgw1xIMn6OS44RZhGmceZsfltkIhC+ C3Bi0nXIURSH6cPxejEyaAw9o9PMdjQ= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:33 2024 by rpki-client on console-ams.rpki-client.org