$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa File: 238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa (raw, json) Hash identifier: omaJVzYXDWfnmoGqnO4umjTiM84EIxabQUs10F6Qk8s= Subject key identifier: 7F:C1:89:FD:8A:61:51:7E:0D:5A:CB:34:D4:F3:2C:7C:00:6F:A3:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FE0E069F0DD57E4340E1E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa Signing time: Thu 21 Mar 2024 21:16:10 +0000 ROA not before: Thu 21 Mar 2024 21:16:10 +0000 ROA not after: Wed 19 Jun 2024 21:16:10 +0000 asID: 396982 IP address blocks: 35.204.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fe:0e:06:9f:0d:d5:7e:43:40:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:16:10 2024 GMT Not After : Jun 19 21:16:10 2024 GMT Subject: CN=a001e160-b262-48ad-9dfb-cc42c6573c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:c7:36:19:e9:bf:7a:57:2d:f9:35:51:97: 92:11:54:cf:ed:0e:29:ee:7f:2b:b1:e7:93:b5:ba: 6b:a5:bc:dc:66:a8:9c:24:21:bb:91:bc:79:73:ea: 54:7c:8c:2d:02:1f:fa:43:11:43:78:98:42:fd:ab: ad:c0:c2:c4:1d:06:53:03:8a:5f:bd:12:bd:d5:69: ca:23:94:79:1d:1f:bb:3e:59:9b:a2:20:46:f7:34: 75:21:b6:3b:70:d2:f7:71:c4:8e:2c:79:1e:3b:b1: ff:22:53:41:2a:3c:a0:d6:29:79:5f:20:a8:d4:a8: 11:fd:7d:24:ca:87:24:7f:2c:06:ba:8f:c5:5e:d5: ee:90:cb:ee:96:90:7a:d1:d4:67:6b:44:52:a3:5e: 73:eb:21:48:8c:38:e8:b0:f2:df:07:ff:ad:0f:0e: 7c:76:8f:a7:f1:97:f8:fa:c8:6a:bc:b5:14:ad:ef: 71:24:ea:cc:b6:7b:ee:7f:26:bc:88:c5:8b:5f:18: 47:7a:7e:da:6f:c1:a2:22:69:40:2e:c7:36:c5:ac: 4b:a6:b7:5a:c4:a5:ad:59:30:ae:6b:c4:d9:7f:5f: fe:25:07:be:31:a8:08:ab:dd:7d:d9:85:3f:7e:ba: 48:3b:06:6d:53:72:c4:a8:78:ad:3b:3e:c8:8f:4d: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C1:89:FD:8A:61:51:7E:0D:5A:CB:34:D4:F3:2C:7C:00:6F:A3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e6:bf:13:ef:b8:40:2d:99:3b:e9:7f:39:7a:56:8b:45:67: 53:a9:c0:8f:ab:ac:e3:2b:94:4d:9d:25:a2:de:46:af:f7:26: fa:60:6b:a9:f6:90:9b:1d:e1:12:f6:13:b9:3c:c2:be:e6:18: 1b:76:a3:73:49:c7:b0:23:8b:47:ae:10:63:0e:a4:ab:40:7d: b8:73:07:f6:e0:c1:3c:2a:d6:80:17:a9:99:74:36:bc:f1:e0: 3c:0e:2d:6c:2c:94:8f:dc:36:eb:4f:df:83:3f:e1:a0:14:03: 72:06:53:9a:d7:c1:46:3a:0c:b7:5c:fa:c1:dd:f1:4a:a6:b8: fa:88:7c:72:9e:c8:b5:f4:60:c4:04:f6:49:cd:3e:21:79:94: d1:ef:4c:97:8a:80:8d:a3:b0:ea:8f:9a:98:83:10:94:b3:00: cb:62:7c:69:ab:3d:64:9e:bd:ac:5e:d9:67:cb:e9:40:85:ba: f5:9b:74:3e:e9:02:3a:ef:df:82:a3:96:ed:0d:49:58:69:69: 12:4c:5e:d7:a1:c8:f4:55:78:20:37:c3:53:b7:bc:91:03:44: 61:50:4e:bd:ba:ba:a9:84:89:8f:0e:a8:a6:8e:63:20:14:4b: dc:80:86:c9:da:38:c5:d5:13:08:8b:69:60:d1:30:a2:1e:8d: 92:2b:2b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/g4Gnw3VfkNA4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTYxMFoXDTI0MDYxOTIxMTYxMFowLzEtMCsGA1UEAxMk YTAwMWUxNjAtYjI2Mi00OGFkLTlkZmItY2M0MmM2NTczYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw3HNhnpv3pXLfk1UZeSEVTP7Q4p7n8rseeT tbprpbzcZqicJCG7kbx5c+pUfIwtAh/6QxFDeJhC/autwMLEHQZTA4pfvRK91WnK I5R5HR+7PlmboiBG9zR1IbY7cNL3ccSOLHkeO7H/IlNBKjyg1il5XyCo1KgR/X0k yockfywGuo/FXtXukMvulpB60dRna0RSo15z6yFIjDjosPLfB/+tDw58do+n8Zf4 +shqvLUUre9xJOrMtnvufya8iMWLXxhHen7ab8GiImlALsc2xaxLprdaxKWtWTCu a8TZf1/+JQe+MagIq9192YU/frpIOwZtU3LEqHitOz7Ij01XUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/Bif2KYVF+DVrLNNTzLHwAb6MIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM4MzI5Y2MtOWQ3Yy0z M2JkLTljYTEtNmVlYWEzOTM5ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnmvxPvuEAtmTvpfzl6VotFZ1OpwI+rrOMrlE2dJaLeRq/3Jvpga6n2 kJsd4RL2E7k8wr7mGBt2o3NJx7Aji0euEGMOpKtAfbhzB/bgwTwq1oAXqZl0Nrzx 4DwOLWwslI/cNutP34M/4aAUA3IGU5rXwUY6DLdc+sHd8UqmuPqIfHKeyLX0YMQE 9knNPiF5lNHvTJeKgI2jsOqPmpiDEJSzAMtifGmrPWSevaxe2WfL6UCFuvWbdD7p Ajrv34Kjlu0NSVhpaRJMXtehyPRVeCA3w1O3vJEDRGFQTr26uqmEiY8OqKaOYyAU S9yAhsnaOMXVEwiLaWDRMKIejZIrK+g= -----END CERTIFICATE-----Generated at Sun May 5 15:48:56 2024 by rpki-client on console-ams.rpki-client.org