$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa File: 1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa (raw, json) Hash identifier: y250tQjxeegUJ9KUBLVOlXEOMjOaeQAW1pCH6nJyzzU= Subject key identifier: 8D:9C:6A:32:CE:0D:0A:FA:5F:B7:E2:8D:05:39:12:DB:EF:41:ED:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858454623994B3A2B0E04D4730680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa Signing time: Wed 20 Mar 2024 20:44:23 +0000 ROA not before: Wed 20 Mar 2024 20:44:23 +0000 ROA not after: Tue 18 Jun 2024 20:44:23 +0000 asID: 396982 IP address blocks: 34.121.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:23:99:4b:3a:2b:0e:04:d4:73:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 20 20:44:23 2024 GMT Not After : Jun 18 20:44:23 2024 GMT Subject: CN=5f877855-d3d3-495e-b254-52231ec65ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:17:9d:f2:d8:ce:df:06:73:da:c4:d4:7b:1f: 58:21:3a:78:b9:cb:eb:ca:3b:b1:1b:06:12:36:da: 1d:48:e8:8b:84:09:3c:ee:93:b6:9f:ee:f8:9e:a9: a6:c9:93:6a:0a:56:91:f2:d7:e0:db:3a:0d:1d:83: 2c:01:58:f4:df:b4:b2:c8:91:ea:6b:11:65:2c:c6: 37:3b:22:a3:e4:91:25:28:54:5f:04:e3:da:ac:fc: db:b7:4e:e0:0b:b9:a6:8f:aa:31:f7:ac:61:f7:20: ad:4b:55:42:6b:30:04:1a:1d:0b:e6:16:d5:a6:1e: fa:e9:48:ab:34:69:aa:5e:a5:95:ac:0e:20:4b:1d: 54:5d:60:47:07:c4:78:31:aa:b8:26:5e:ef:4b:5c: 18:12:7c:60:e9:0e:53:dc:1c:79:3a:fb:1f:94:47: 66:7c:40:b3:c2:ad:8e:e5:e9:c7:5d:c5:a7:3c:47: 37:2a:12:4f:f6:91:47:9a:4a:94:32:fb:09:cc:d1: 68:3c:0e:20:50:7e:19:e4:5f:5d:f3:58:55:2d:5a: 11:7a:b9:62:54:a3:cb:52:3f:42:00:88:59:18:04: 9e:ef:35:12:ec:34:f7:cf:9c:53:1f:51:64:96:83: 07:a4:2b:df:86:cd:c5:90:55:ac:51:82:74:32:32: 45:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9C:6A:32:CE:0D:0A:FA:5F:B7:E2:8D:05:39:12:DB:EF:41:ED:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:03:00:6a:a0:71:8a:ed:e5:11:1a:1f:1b:67:28:39:66:8b: 91:00:64:b2:44:3f:2b:61:c7:f2:97:fb:0c:97:c6:0a:89:62: ba:8d:27:74:48:ef:75:76:49:41:71:7e:c3:c7:bb:ad:4e:73: 84:62:a4:f6:26:a8:9b:39:8d:02:39:8c:ff:18:15:2e:46:04: f0:b9:eb:5d:e6:c0:48:b6:59:78:71:3b:3e:f7:3b:da:87:84: 9c:81:a2:88:d3:92:d2:59:4b:f7:f9:3f:d0:6b:8a:4e:c8:b3: 97:1c:4d:f7:80:da:a0:db:4c:a8:41:1d:64:6a:68:bc:7e:a6: 50:bd:e4:94:b6:6d:c8:25:fb:e8:95:59:d2:b9:02:c7:a3:6a: 95:6d:fa:71:a1:31:32:e8:71:4f:b1:06:ba:cf:d8:57:2b:cb: 00:7e:d3:01:13:da:58:3d:9b:96:fc:f2:70:d4:39:0a:ec:ef: a1:9a:c3:94:b9:82:41:21:6c:ab:05:52:75:f3:e4:f0:1a:00: 2b:ca:2d:b7:30:7a:3e:ff:ff:1f:7d:5f:0b:78:03:a4:e5:e6: e8:b9:ef:24:83:cc:91:9b:f9:1f:fc:7d:f2:7e:02:41:13:7e: 84:a6:4c:cd:a1:aa:d2:43:3c:66:1d:aa:aa:90:4a:fd:c2:85: 14:59:d9:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGI5lLOisOBNRzBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMDIwNDQyM1oXDTI0MDYxODIwNDQyM1owLzEtMCsGA1UEAxMk NWY4Nzc4NTUtZDNkMy00OTVlLWIyNTQtNTIyMzFlYzY1ZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRed8tjO3wZz2sTUex9YITp4ucvryjuxGwYS NtodSOiLhAk87pO2n+74nqmmyZNqClaR8tfg2zoNHYMsAVj037SyyJHqaxFlLMY3 OyKj5JElKFRfBOParPzbt07gC7mmj6ox96xh9yCtS1VCazAEGh0L5hbVph766Uir NGmqXqWVrA4gSx1UXWBHB8R4Maq4Jl7vS1wYEnxg6Q5T3Bx5OvsflEdmfECzwq2O 5enHXcWnPEc3KhJP9pFHmkqUMvsJzNFoPA4gUH4Z5F9d81hVLVoRerliVKPLUj9C AIhZGASe7zUS7DT3z5xTH1FkloMHpCvfhs3FkFWsUYJ0MjJFzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2cajLODQr6X7fijQU5EtvvQe0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWMyYTNlMGYtNWU1NC0z ZjZjLWI4MGEtYjk0YWYzZTVlY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQDAGqgcYrt5REaHxtnKDlmi5EAZLJEPythx/KX+wyXxgqJYrqNJ3RI 73V2SUFxfsPHu61Oc4RipPYmqJs5jQI5jP8YFS5GBPC5613mwEi2WXhxOz73O9qH hJyBoojTktJZS/f5P9Brik7Is5ccTfeA2qDbTKhBHWRqaLx+plC95JS2bcgl++iV WdK5AsejapVt+nGhMTLocU+xBrrP2FcrywB+0wET2lg9m5b88nDUOQrs76Gaw5S5 gkEhbKsFUnXz5PAaACvKLbcwej7//x99Xwt4A6Tl5ui57ySDzJGb+R/8ffJ+AkET foSmTM2hqtJDPGYdqqqQSv3ChRRZ2bE= -----END CERTIFICATE-----Generated at Mon May 6 01:58:57 2024 by rpki-client on console-fra.rpki-client.org