$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa File: 3522a44b-9834-3ba3-bf38-77634819db56.roa (raw, json) Hash identifier: gnQ/j1pVVWSf7wrMSPjUkN83qn3KJVsg+3CElZSMB1A= Subject key identifier: 52:64:6C:5B:44:A0:A0:7B:6C:3D:47:F7:88:79:D5:0B:F8:A2:25:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490B70D88FC6ABF946531A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa Signing time: Thu 21 Mar 2024 21:43:08 +0000 ROA not before: Thu 21 Mar 2024 21:43:08 +0000 ROA not after: Wed 19 Jun 2024 21:43:08 +0000 asID: 396982 IP address blocks: 34.72.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0b:70:d8:8f:c6:ab:f9:46:53:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:43:08 2024 GMT Not After : Jun 19 21:43:08 2024 GMT Subject: CN=d9b3ce1d-6c49-46c7-9470-d96dfc662517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:5a:82:3e:6c:d9:24:b5:5d:ef:ea:c6:66: c1:31:83:93:65:50:16:68:81:3d:91:18:d6:23:71: d9:30:a8:be:07:76:87:32:af:09:3d:71:16:65:74: 86:d8:57:6f:92:f7:ba:38:df:a0:77:cf:78:fd:bc: a6:9e:64:75:4d:fe:81:d3:43:d1:43:fe:a4:04:8b: b0:a0:39:a5:14:ad:8c:90:a1:2d:6c:11:cf:96:4b: 4c:07:cf:f6:1d:43:27:88:cf:ae:0a:d0:98:ae:b9: 11:df:17:d5:a9:c3:dd:1e:ff:91:b1:03:c1:3e:62: fd:da:81:e1:e5:48:7f:49:23:1d:1c:92:e5:59:01: 31:e3:94:5c:69:d3:40:7b:50:0c:63:37:ba:82:03: ea:4c:b9:a6:11:be:c2:15:b4:b9:2a:93:1b:a8:eb: 5e:c3:98:1c:b8:a1:bd:31:d1:ab:cb:48:98:c0:d2: 50:97:db:a0:86:f1:49:86:8c:52:cf:38:3e:82:d6: 98:7c:6a:77:d0:22:45:0e:fe:ec:2a:95:f2:50:7b: 59:70:2d:cb:b4:70:0a:86:9b:da:4b:0b:a3:73:d9: 2b:75:2e:3d:d5:2d:63:0c:31:9d:91:3c:9e:0d:55: 47:0f:01:a3:e3:cb:81:8a:05:b1:46:14:84:e6:76: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:6C:5B:44:A0:A0:7B:6C:3D:47:F7:88:79:D5:0B:F8:A2:25:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ed:e2:2a:26:a7:ac:cd:5e:dd:79:af:1a:98:bb:5f:c9:5f: ac:b4:35:91:98:28:7c:70:5a:76:b7:be:42:3a:f8:4f:68:b2: 4b:61:e3:d5:98:b9:9f:36:5a:c4:a2:91:b9:c1:94:63:17:18: b0:47:2e:c9:b4:00:2b:75:75:39:c7:f1:cb:ce:e1:27:d3:70: 02:0c:44:96:0b:bf:10:5a:70:c0:de:17:8c:8d:6b:b6:5c:5d: 6b:fe:df:8e:1e:a4:93:b4:62:e0:fb:e0:ed:d3:95:98:ae:b9: 22:61:75:47:db:26:c1:f8:e0:ad:3f:f1:3d:f5:70:8e:e3:c1: 40:29:ec:f5:91:c2:de:4f:70:53:d7:fb:a3:61:cc:fe:b3:ab: e5:73:30:78:91:99:c9:c3:9a:70:44:0e:c6:8a:b4:f8:ec:1a: c6:49:8a:b1:cc:fd:d2:1a:ed:69:8d:43:bd:7b:3e:ae:0a:bb: ad:8d:3a:de:60:02:ad:2c:73:a7:c0:71:4d:d7:f7:f3:4d:ec: 6f:5a:84:c8:d4:02:a7:a3:48:45:a3:1c:08:6b:be:63:d1:8b: 02:ec:f0:50:37:44:5d:e2:d7:96:f2:ae:0e:d2:4c:7c:02:50: 79:f8:d4:75:ce:2f:9d:7d:bf:76:ae:be:c1:4b:19:5d:e7:5f: a0:5e:64:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJC3DYj8ar+UZTGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDMwOFoXDTI0MDYxOTIxNDMwOFowLzEtMCsGA1UEAxMk ZDliM2NlMWQtNmM0OS00NmM3LTk0NzAtZDk2ZGZjNjYyNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqRagj5s2SS1Xe/qxmbBMYOTZVAWaIE9kRjW I3HZMKi+B3aHMq8JPXEWZXSG2Fdvkve6ON+gd894/bymnmR1Tf6B00PRQ/6kBIuw oDmlFK2MkKEtbBHPlktMB8/2HUMniM+uCtCYrrkR3xfVqcPdHv+RsQPBPmL92oHh 5Uh/SSMdHJLlWQEx45RcadNAe1AMYze6ggPqTLmmEb7CFbS5KpMbqOtew5gcuKG9 MdGry0iYwNJQl9ughvFJhoxSzzg+gtaYfGp30CJFDv7sKpXyUHtZcC3LtHAKhpva Swujc9krdS491S1jDDGdkTyeDVVHDwGj48uBigWxRhSE5nZMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJkbFtEoKB7bD1H94h51Qv4oiWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzUyMmE0NGItOTgzNC0z YmEzLWJmMzgtNzc2MzQ4MTlkYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjt4iomp6zNXt15rxqYu1/JX6y0NZGYKHxwWna3vkI6+E9oskth49WY uZ82WsSikbnBlGMXGLBHLsm0ACt1dTnH8cvO4SfTcAIMRJYLvxBacMDeF4yNa7Zc XWv+344epJO0YuD74O3TlZiuuSJhdUfbJsH44K0/8T31cI7jwUAp7PWRwt5PcFPX +6NhzP6zq+VzMHiRmcnDmnBEDsaKtPjsGsZJirHM/dIa7WmNQ717Pq4Ku62NOt5g Aq0sc6fAcU3X9/NN7G9ahMjUAqejSEWjHAhrvmPRiwLs8FA3RF3i15byrg7STHwC UHn41HXOL519v3auvsFLGV3nX6BeZLo= -----END CERTIFICATE-----Generated at Mon May 6 01:57:21 2024 by rpki-client on console-ams.rpki-client.org