$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa File: 3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa (raw, json) Hash identifier: nQYs4I9p9wWkmyNXv5TkTKP9Oc9spzOeMXMFJnTJQAc= Subject key identifier: FA:F5:6F:8B:0B:D7:79:48:DA:31:53:9C:D7:84:B1:EA:A5:EC:C3:B1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490A5F04ECAD291DF87EEB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa Signing time: Thu 21 Mar 2024 21:40:59 +0000 ROA not before: Thu 21 Mar 2024 21:40:59 +0000 ROA not after: Wed 19 Jun 2024 21:40:59 +0000 asID: 396982 IP address blocks: 34.86.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0a:5f:04:ec:ad:29:1d:f8:7e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:40:59 2024 GMT Not After : Jun 19 21:40:59 2024 GMT Subject: CN=341b35fa-71c0-4e6c-9a90-61d373a85deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:af:0e:da:9d:66:31:cd:b2:57:49:b4:7b: b5:65:30:e9:ca:60:67:5a:79:30:42:95:ec:58:62: 65:3a:3b:29:2d:3c:de:2e:26:87:39:1d:74:d5:b7: b9:5e:62:fe:97:39:dc:e6:f1:b1:cc:17:00:8e:dc: b3:ce:68:78:09:fa:52:c5:8f:45:84:e3:0e:6d:2f: 32:20:28:0e:9e:9d:d8:b2:59:8a:56:74:a8:be:68: d8:cc:0f:76:e1:55:3e:62:09:20:24:d6:d7:87:86: 83:0b:3c:2d:54:48:bb:76:e5:62:45:7d:df:80:d6: 71:ba:d0:82:96:51:a6:94:f8:de:13:bd:da:96:8c: d4:07:a4:f4:e4:ef:88:42:00:e6:ea:30:25:92:f3: d9:4c:e4:54:26:33:11:59:a6:12:88:9c:65:7d:67: 27:2e:9d:a9:e9:e3:77:fb:e9:e2:98:79:b6:7c:f5: e6:66:d4:73:72:5e:6b:c5:a6:d6:1a:2e:9e:07:94: e4:4e:f0:b9:ae:38:4e:e9:05:cb:ed:c8:d1:d4:f0: a0:d9:b4:d0:1c:7a:60:fa:37:39:ab:e4:8d:2d:e5: 97:94:c9:2b:d3:77:9e:85:ac:b4:3c:11:06:24:91: 12:46:87:b2:52:45:d5:0b:cd:be:2f:68:a8:c8:ff: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:6F:8B:0B:D7:79:48:DA:31:53:9C:D7:84:B1:EA:A5:EC:C3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bb:6f:89:13:22:28:db:25:9b:da:c4:12:b2:c1:fa:08:78: 36:f5:bf:e7:70:eb:91:b7:08:84:8f:b1:03:f3:c6:aa:1e:b9: e6:db:bc:5d:12:39:16:f9:ab:9d:5f:2b:79:09:1a:61:e9:f8: 62:e3:8c:39:ae:c7:63:98:a9:fa:f4:d6:df:6b:df:5e:d1:30: f2:61:c5:95:e3:c3:fd:d0:5a:1b:ec:0c:bb:ba:e4:5f:f0:33: 64:ad:9e:1c:d0:ff:3a:29:e9:20:11:66:ae:f9:97:b0:9e:48: e7:0b:e0:34:84:a8:34:6f:04:f8:5d:61:dc:6f:c0:dc:eb:fe: e3:e4:b5:2c:1e:20:16:db:64:ce:52:26:72:9c:8a:75:8b:7b: 2f:09:15:07:ef:33:23:25:86:d9:c4:55:bd:ec:cc:ce:11:c7: b6:bd:fc:a8:3a:58:eb:bc:50:47:e2:73:67:52:09:3e:2f:3f: 6f:78:12:90:7d:e5:25:50:f6:75:44:0a:d3:12:82:5c:22:b0: aa:f7:20:5f:9b:4b:47:c4:38:f1:c2:35:4b:82:f7:ff:99:e0: 17:50:c3:24:83:15:87:b3:99:2c:fd:87:b9:52:40:5b:48:2a: f3:6d:75:df:1c:d6:af:11:9b:40:04:d5:33:83:f2:b1:6c:77: 88:e5:da:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJCl8E7K0pHfh+6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDA1OVoXDTI0MDYxOTIxNDA1OVowLzEtMCsGA1UEAxMk MzQxYjM1ZmEtNzFjMC00ZTZjLTlhOTAtNjFkMzczYTg1ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQyvDtqdZjHNsldJtHu1ZTDpymBnWnkwQpXs WGJlOjspLTzeLiaHOR101be5XmL+lznc5vGxzBcAjtyzzmh4CfpSxY9FhOMObS8y ICgOnp3YslmKVnSovmjYzA924VU+YgkgJNbXh4aDCzwtVEi7duViRX3fgNZxutCC llGmlPjeE73alozUB6T05O+IQgDm6jAlkvPZTORUJjMRWaYSiJxlfWcnLp2p6eN3 ++nimHm2fPXmZtRzcl5rxabWGi6eB5TkTvC5rjhO6QXL7cjR1PCg2bTQHHpg+jc5 q+SNLeWXlMkr03eehay0PBEGJJESRoeyUkXVC82+L2ioyP9aGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr1b4sL13lI2jFTnNeEseql7MOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2UyM2Q3MGItNzVmMS0z NjBkLWFmODQtYmQxNTY4YWQyZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa7b4kTIijbJZvaxBKywfoIeDb1v+dw65G3CISPsQPzxqoeuebbvF0S ORb5q51fK3kJGmHp+GLjjDmux2OYqfr01t9r317RMPJhxZXjw/3QWhvsDLu65F/w M2StnhzQ/zop6SARZq75l7CeSOcL4DSEqDRvBPhdYdxvwNzr/uPktSweIBbbZM5S JnKcinWLey8JFQfvMyMlhtnEVb3szM4Rx7a9/Kg6WOu8UEfic2dSCT4vP294EpB9 5SVQ9nVECtMSglwisKr3IF+bS0fEOPHCNUuC9/+Z4BdQwySDFYezmSz9h7lSQFtI KvNtdd8c1q8Rm0AE1TOD8rFsd4jl2os= -----END CERTIFICATE-----Generated at Mon May 6 01:59:11 2024 by rpki-client on console-fra.rpki-client.org