$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1538256a-8a26-34f5-a964-36238aeaab03.roa File: 1538256a-8a26-34f5-a964-36238aeaab03.roa (raw, json) Hash identifier: L8EDk4ZeE1KuuXgzGnN7ICyyysqvbo4ak6B9AJSjlRc= Subject key identifier: 3B:CA:33:B1:CF:4B:E1:07:56:04:F3:23:8C:2D:AB:AC:35:E7:0F:44 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858454623A3FD655733629FAF0C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1538256a-8a26-34f5-a964-36238aeaab03.roa Signing time: Wed 20 Mar 2024 20:44:28 +0000 ROA not before: Wed 20 Mar 2024 20:44:28 +0000 ROA not after: Tue 18 Jun 2024 20:44:28 +0000 asID: 396982 IP address blocks: 34.122.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:23:a3:fd:65:57:33:62:9f:af:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 20 20:44:28 2024 GMT Not After : Jun 18 20:44:28 2024 GMT Subject: CN=34f946b9-3828-40a2-abe8-8dc1b0aaa17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:40:6d:c2:e3:46:c8:dd:54:c5:6f:49:8c: cb:0c:9b:52:0f:a0:42:ab:2a:c5:0a:c3:62:4b:9f: 2c:43:40:8d:86:a0:ae:be:1c:97:de:f3:08:f4:95: 74:1e:8e:3c:dd:fa:43:1c:5c:40:b9:b0:08:1a:d2: 4e:c0:c6:a4:09:91:34:db:6c:e2:1b:73:3e:b0:f4: cc:28:d8:b6:18:60:e8:44:47:b0:0f:65:5f:45:9a: 61:e8:95:c1:68:49:0c:92:6e:ba:de:42:3a:c1:f8: 55:f2:ba:25:d7:a6:23:d9:4a:d1:f2:dc:32:46:71: 80:99:a2:28:d0:2d:bb:c9:b0:25:b8:29:37:e4:19: b8:38:d1:bc:4d:e8:d1:89:3e:e9:7f:7c:6c:52:c2: 6d:0a:36:de:df:d0:85:e1:a9:dd:02:19:56:7e:9e: 22:dc:01:fa:e8:c3:74:9c:a5:9f:c4:e7:ab:86:1c: 41:3d:49:be:3a:32:9a:e6:8d:a0:21:15:8e:f9:82: 2b:39:b5:a0:85:ba:29:fb:51:5c:38:b6:0d:36:ed: f0:ba:df:ed:fc:e6:9e:2b:57:ad:41:80:07:28:8a: 85:07:e0:52:6b:e2:84:45:a8:f1:fa:86:de:5a:f1: 72:e6:92:4a:a3:fa:97:bf:86:68:73:27:ac:bf:34: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CA:33:B1:CF:4B:E1:07:56:04:F3:23:8C:2D:AB:AC:35:E7:0F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1538256a-8a26-34f5-a964-36238aeaab03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:3d:38:e4:d2:ed:6e:e2:1f:1d:c4:f0:6e:d7:35:de:bf:e1: 1a:0f:c0:6b:27:03:69:4b:7c:87:a4:ce:67:11:24:4b:17:39: 60:60:23:83:49:4a:06:d9:2c:3c:0e:f8:bd:45:b6:73:48:63: b5:96:7e:53:a2:22:5d:50:b0:63:45:06:ba:85:e3:de:91:0b: 9c:ba:92:ae:82:9b:df:37:fc:48:8c:26:f7:43:1d:ce:34:a1: e0:63:94:45:01:64:2c:85:63:4f:a1:e6:dc:3b:99:54:d9:78: 12:ce:1a:70:a8:ed:c1:5a:11:df:02:ee:47:ac:79:ea:a1:f0: db:f5:00:59:0c:09:3a:91:b5:fd:34:8b:50:3b:54:3a:38:4c: 63:3b:92:e4:47:af:1a:8d:a8:90:ad:22:a4:cc:e6:df:9a:46: e3:84:ff:dc:34:6f:f3:fe:ee:eb:d7:c2:e0:c5:ac:9f:5b:99: 08:6a:28:3f:4d:20:20:91:57:6f:6d:8e:88:f3:f2:5f:1b:bb: 91:91:21:ea:da:63:aa:a2:c6:24:46:1a:62:86:d3:8f:dd:f5: cb:5c:44:64:39:94:b9:39:10:79:78:06:a0:ec:9c:f7:8a:a9: 78:a2:b6:a8:90:41:a2:93:44:93:75:5e:39:28:09:db:99:2d: fa:cd:d8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGI6P9ZVczYp+vDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMDIwNDQyOFoXDTI0MDYxODIwNDQyOFowLzEtMCsGA1UEAxMk MzRmOTQ2YjktMzgyOC00MGEyLWFiZTgtOGRjMWIwYWFhMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJRAbcLjRsjdVMVvSYzLDJtSD6BCqyrFCsNi S58sQ0CNhqCuvhyX3vMI9JV0Ho483fpDHFxAubAIGtJOwMakCZE022ziG3M+sPTM KNi2GGDoREewD2VfRZph6JXBaEkMkm663kI6wfhV8rol16Yj2UrR8twyRnGAmaIo 0C27ybAluCk35Bm4ONG8TejRiT7pf3xsUsJtCjbe39CF4andAhlWfp4i3AH66MN0 nKWfxOerhhxBPUm+OjKa5o2gIRWO+YIrObWghbop+1FcOLYNNu3wut/t/OaeK1et QYAHKIqFB+BSa+KERajx+obeWvFy5pJKo/qXv4ZocyesvzS7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvKM7HPS+EHVgTzI4wtq6w15w9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTUzODI1NmEtOGEyNi0z NGY1LWE5NjQtMzYyMzhhZWFhYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJc9OOTS7W7iHx3E8G7XNd6/4RoPwGsnA2lLfIekzmcRJEsXOWBgI4NJ SgbZLDwO+L1FtnNIY7WWflOiIl1QsGNFBrqF496RC5y6kq6Cm983/EiMJvdDHc40 oeBjlEUBZCyFY0+h5tw7mVTZeBLOGnCo7cFaEd8C7keseeqh8Nv1AFkMCTqRtf00 i1A7VDo4TGM7kuRHrxqNqJCtIqTM5t+aRuOE/9w0b/P+7uvXwuDFrJ9bmQhqKD9N ICCRV29tjojz8l8bu5GRIeraY6qixiRGGmKG04/d9ctcRGQ5lLk5EHl4BqDsnPeK qXiitqiQQaKTRJN1XjkoCduZLfrN2GE= -----END CERTIFICATE-----Generated at Mon May 6 09:11:54 2024 by rpki-client on console-fra.rpki-client.org