$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c71f95-46a5-312f-83b3-7006a418d0aa.roa File: 35c71f95-46a5-312f-83b3-7006a418d0aa.roa (raw, json) Hash identifier: jJ295rDR94P7sJCyVuKz+1z/fndazHnlRg251BVgAT0= Subject key identifier: 31:1C:1B:15:EE:BC:92:C3:67:57:02:16:81:E3:1B:6F:E9:23:66:21 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490160071671EA3178810D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c71f95-46a5-312f-83b3-7006a418d0aa.roa Signing time: Thu 21 Mar 2024 21:22:51 +0000 ROA not before: Thu 21 Mar 2024 21:22:51 +0000 ROA not after: Wed 19 Jun 2024 21:22:51 +0000 asID: 396982 IP address blocks: 34.73.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:01:60:07:16:71:ea:31:78:81:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:22:51 2024 GMT Not After : Jun 19 21:22:51 2024 GMT Subject: CN=d45916cd-f0ad-49b6-8b60-e4481fce0d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7f:52:02:50:d9:59:97:0a:63:5a:e0:16:c7: a6:c0:a4:c3:16:24:4a:59:d9:24:e3:0c:d6:26:21: 5a:04:d0:64:c0:96:2b:35:ac:34:bd:5b:0b:b9:8d: 3a:b9:de:11:45:5a:88:bc:33:17:7a:8e:f0:43:a0: 4a:e7:c6:ef:40:c2:e9:4c:ae:ff:48:e4:99:49:23: 19:63:d2:ff:68:58:65:30:6e:fd:ad:45:b4:c5:48: 32:77:75:bb:9b:87:44:a4:0b:e7:2e:be:4a:d7:fe: 47:3d:8f:ac:d5:d5:20:d5:b5:63:ef:54:ad:86:be: b6:17:37:88:9a:00:1f:6f:81:98:14:01:23:6e:b3: 9d:99:ee:a7:c3:46:0e:44:38:bc:6d:b9:2a:b6:d2: 78:49:4a:c9:ce:92:0f:94:bb:5d:94:2f:44:cc:57: 52:a3:23:6d:f8:df:c7:6d:2c:c6:f3:f5:fe:32:f5: 09:1c:43:85:87:33:9e:e2:55:b8:bc:61:96:de:40: 1d:91:cc:44:e8:8a:df:aa:ca:e6:68:11:33:fc:93: d9:1f:cb:b5:ba:76:6a:c6:cd:68:c2:78:a2:52:e9: ec:0c:f4:78:22:36:1d:82:d1:97:86:c8:07:9e:53: ee:01:fd:df:55:64:3f:f3:3a:69:7a:41:f1:c6:f0: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:1B:15:EE:BC:92:C3:67:57:02:16:81:E3:1B:6F:E9:23:66:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c71f95-46a5-312f-83b3-7006a418d0aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:29:31:31:bc:9b:1c:94:3e:4f:1d:d7:7f:aa:98:c5:32:75: 33:a3:b5:71:68:f7:86:6e:62:e1:c1:e2:c2:e1:5a:9a:a5:d5: 6d:59:3d:b0:ca:cd:fb:88:eb:8a:ca:8b:b2:cf:33:79:1e:67: fc:db:ac:6c:bd:c0:6f:2c:ab:d9:38:cd:ef:63:ae:73:fd:0e: e5:66:8d:cf:d4:8d:98:df:47:f6:ee:86:be:e8:e6:17:bd:86: 70:e1:e2:c5:dc:77:56:a8:8d:88:4d:a8:0d:82:90:fd:9e:aa: 4b:6f:a7:4c:d5:5c:43:97:4d:4a:fa:50:b3:61:cf:cf:0b:76: ab:e5:ca:dc:6f:4f:b5:e3:c3:d9:4b:8c:57:56:01:87:af:c7: 32:73:d1:6e:1e:82:f4:72:61:85:8c:5f:e7:3f:d9:c5:44:ec: d1:d9:04:a3:d6:62:95:76:84:39:5d:d3:b2:68:4f:0e:e7:2c: 40:57:ab:ba:7d:be:57:9a:91:11:36:0b:58:56:d6:e3:13:6d: 3e:c3:66:fc:0b:41:cb:ce:df:f8:19:75:84:59:87:ce:1f:a4: 1f:bd:5c:64:0d:d1:79:26:ca:7e:ad:b9:8e:88:2a:9b:8d:7e: 10:03:c2:84:a9:42:5d:49:a6:7c:6f:f6:d7:bc:30:0f:8e:34: d4:8d:ad:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJAWAHFnHqMXiBDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMjI1MVoXDTI0MDYxOTIxMjI1MVowLzEtMCsGA1UEAxMk ZDQ1OTE2Y2QtZjBhZC00OWI2LThiNjAtZTQ0ODFmY2UwZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX9SAlDZWZcKY1rgFsemwKTDFiRKWdkk4wzW JiFaBNBkwJYrNaw0vVsLuY06ud4RRVqIvDMXeo7wQ6BK58bvQMLpTK7/SOSZSSMZ Y9L/aFhlMG79rUW0xUgyd3W7m4dEpAvnLr5K1/5HPY+s1dUg1bVj71Sthr62FzeI mgAfb4GYFAEjbrOdme6nw0YORDi8bbkqttJ4SUrJzpIPlLtdlC9EzFdSoyNt+N/H bSzG8/X+MvUJHEOFhzOe4lW4vGGW3kAdkcxE6IrfqsrmaBEz/JPZH8u1unZqxs1o wniiUunsDPR4IjYdgtGXhsgHnlPuAf3fVWQ/8zppekHxxvDtdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEcGxXuvJLDZ1cCFoHjG2/pI2YhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVjNzFmOTUtNDZhNS0z MTJmLTgzYjMtNzAwNmE0MThkMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYpMTG8mxyUPk8d13+qmMUydTOjtXFo94ZuYuHB4sLhWpql1W1ZPbDK zfuI64rKi7LPM3keZ/zbrGy9wG8sq9k4ze9jrnP9DuVmjc/UjZjfR/buhr7o5he9 hnDh4sXcd1aojYhNqA2CkP2eqktvp0zVXEOXTUr6ULNhz88LdqvlytxvT7Xjw9lL jFdWAYevxzJz0W4egvRyYYWMX+c/2cVE7NHZBKPWYpV2hDld07JoTw7nLEBXq7p9 vleakRE2C1hW1uMTbT7DZvwLQcvO3/gZdYRZh84fpB+9XGQN0Xkmyn6tuY6IKpuN fhADwoSpQl1Jpnxv9te8MA+ONNSNrSE= -----END CERTIFICATE-----Generated at Mon May 6 01:59:08 2024 by rpki-client on console-fra.rpki-client.org