$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa File: 2c91055f-20da-3c23-b862-dcdd076e260e.roa (raw, json) Hash identifier: HM5GfXt3Askeo4v2zXzGr3meJVT/7v0rhXlWaYuPBr8= Subject key identifier: 4B:D9:50:DA:29:A4:E1:A1:6B:06:32:82:45:90:84:59:1D:A9:8B:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490BFC8AFDEE66E3F7534200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa Signing time: Thu 21 Mar 2024 21:44:14 +0000 ROA not before: Thu 21 Mar 2024 21:44:14 +0000 ROA not after: Wed 19 Jun 2024 21:44:14 +0000 asID: 396982 IP address blocks: 34.89.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0b:fc:8a:fd:ee:66:e3:f7:53:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:44:14 2024 GMT Not After : Jun 19 21:44:14 2024 GMT Subject: CN=957181cb-0d41-4b32-92cf-c41d6491a768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:74:5a:65:44:25:b6:91:74:1c:92:bd:00: 6f:3b:19:1a:14:6d:5b:48:2d:e5:6b:a1:f0:0b:50: ad:a5:de:c0:82:f7:33:e2:c5:ec:e9:a6:a1:f3:d0: ff:e0:cc:9d:13:d3:b5:9a:1e:e9:a8:f6:ef:28:56: 14:3b:17:43:5f:58:c4:e1:16:ee:fe:9d:f8:ef:c3: 90:cd:1d:71:6b:3b:9f:c8:5b:55:1d:ff:be:51:8b: 3c:61:6b:40:0d:cb:7e:0e:f3:12:3d:2a:4e:ae:5b: 1a:b3:1d:67:f8:d0:bb:bc:94:3d:4b:4a:7d:65:04: 92:50:bc:87:ee:33:37:31:1e:f0:57:99:55:f5:25: f3:15:d0:c4:7e:0b:76:24:3e:48:e0:19:ed:e4:44: b1:b5:6b:54:b7:6f:f2:3c:53:c8:16:00:ee:fa:7c: 02:3c:66:46:bc:73:d5:a6:05:fd:f6:c2:8b:70:38: 01:0f:8b:a9:fe:50:81:54:42:ee:2c:e9:82:64:e8: fa:f0:b5:20:a3:7c:86:b3:30:14:c7:75:92:05:10: 87:e7:0f:ed:42:bf:5c:f0:5b:a4:de:d4:ca:fe:0b: 49:31:b7:5d:19:60:8e:5d:ed:ba:0d:87:33:d2:6f: a8:8e:cb:ca:c7:8d:22:37:ac:43:6d:cf:4b:2f:e3: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:50:DA:29:A4:E1:A1:6B:06:32:82:45:90:84:59:1D:A9:8B:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3c:bc:bc:79:b3:2b:37:d8:39:28:d7:83:ea:0c:da:4c:80: 04:5c:90:a9:e9:01:ff:60:6c:a3:20:33:7f:3e:99:98:b4:91: 7c:5b:2d:5c:dd:fb:cc:6c:2c:ab:f5:05:41:72:25:8c:ec:ea: 6c:58:01:f8:49:c2:c8:ec:a5:c3:a6:50:e0:f7:ec:1e:82:3a: a5:19:5b:2c:a3:43:91:ca:b4:3e:1f:1a:9f:ab:51:60:97:d3: 73:6c:45:e3:0e:14:64:c4:20:ff:42:a9:62:08:58:24:d3:f7: 2d:b8:f4:06:be:0e:72:94:73:ec:44:73:4e:f2:ba:ba:d7:ae: 00:48:55:74:3e:90:2a:a1:8e:e7:98:8b:9e:91:ea:8e:9a:07: 6b:f8:8e:e1:cc:49:4a:42:d5:3d:52:b1:fb:ce:04:a4:03:c0: d7:6b:f5:a3:b2:a0:22:68:2d:d8:5b:7e:1f:51:da:8c:39:c6: 2a:c6:e4:18:91:58:ac:6f:35:a8:f7:50:1c:ba:fd:07:7e:a5: 79:83:c9:14:17:71:78:98:1c:4c:9e:69:9b:67:03:9e:85:d4: ff:d1:36:c0:1a:cd:95:6a:a8:0c:b1:76:0d:8b:22:ff:3e:92: 4e:d0:da:08:b4:aa:94:a8:36:ee:9a:db:d5:a3:2f:06:8c:94: 27:4e:db:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJC/yK/e5m4/dTQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDQxNFoXDTI0MDYxOTIxNDQxNFowLzEtMCsGA1UEAxMk OTU3MTgxY2ItMGQ0MS00YjMyLTkyY2YtYzQxZDY0OTFhNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol90WmVEJbaRdBySvQBvOxkaFG1bSC3la6Hw C1Ctpd7Agvcz4sXs6aah89D/4MydE9O1mh7pqPbvKFYUOxdDX1jE4Rbu/p3478OQ zR1xazufyFtVHf++UYs8YWtADct+DvMSPSpOrlsasx1n+NC7vJQ9S0p9ZQSSULyH 7jM3MR7wV5lV9SXzFdDEfgt2JD5I4Bnt5ESxtWtUt2/yPFPIFgDu+nwCPGZGvHPV pgX99sKLcDgBD4up/lCBVELuLOmCZOj68LUgo3yGszAUx3WSBRCH5w/tQr9c8Fuk 3tTK/gtJMbddGWCOXe26DYcz0m+ojsvKx40iN6xDbc9LL+N8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvZUNoppOGhawYygkWQhFkdqYsYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM5MTA1NWYtMjBkYS0z YzIzLWI4NjItZGNkZDA3NmUyNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU8vLx5sys32Dko14PqDNpMgARckKnpAf9gbKMgM38+mZi0kXxbLVzd +8xsLKv1BUFyJYzs6mxYAfhJwsjspcOmUOD37B6COqUZWyyjQ5HKtD4fGp+rUWCX 03NsReMOFGTEIP9CqWIIWCTT9y249Aa+DnKUc+xEc07yurrXrgBIVXQ+kCqhjueY i56R6o6aB2v4juHMSUpC1T1SsfvOBKQDwNdr9aOyoCJoLdhbfh9R2ow5xirG5BiR WKxvNaj3UBy6/Qd+pXmDyRQXcXiYHEyeaZtnA56F1P/RNsAazZVqqAyxdg2LIv8+ kk7Q2gi0qpSoNu6a29WjLwaMlCdO24k= -----END CERTIFICATE-----Generated at Mon May 6 08:07:40 2024 by rpki-client on console-ams.rpki-client.org