$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa File: 43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa (raw, json) Hash identifier: 3lseWCwID1ym0qm7dezNItGsygLWGj214a5nNil3X38= Subject key identifier: 6F:F7:82:6D:5D:0E:48:EA:87:C9:C6:0D:51:22:8C:18:68:8F:48:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FDDF6D2DC60B57A40ED080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa Signing time: Thu 21 Mar 2024 21:15:48 +0000 ROA not before: Thu 21 Mar 2024 21:15:48 +0000 ROA not after: Wed 19 Jun 2024 21:15:48 +0000 asID: 396982 IP address blocks: 35.239.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fd:df:6d:2d:c6:0b:57:a4:0e:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:15:48 2024 GMT Not After : Jun 19 21:15:48 2024 GMT Subject: CN=ed7d2a73-4b46-44e3-9431-67554ee10038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:1b:d3:fa:56:a4:cd:c4:5e:a2:b7:b9:9c: be:0d:dd:85:37:c9:98:6b:cc:a1:dc:38:a0:7e:20: 4b:07:d6:b7:7b:25:6a:f1:d3:ac:63:1d:e8:ce:95: 9a:6c:f2:14:6d:14:9f:89:85:15:19:e1:41:5c:6c: a8:18:61:fb:5a:bf:71:de:82:30:64:f7:ad:96:37: c5:eb:a0:75:21:f7:51:1f:42:f6:5e:18:39:d8:3a: 56:72:71:74:9b:fb:a7:ea:04:e3:69:39:49:e7:3f: 6f:0d:e3:93:88:15:29:32:cc:88:d9:af:22:de:3a: ee:a2:6e:0b:1a:4e:a9:17:1b:6b:21:45:d4:5f:a5: ca:3c:21:c8:f7:46:ce:9c:6d:23:90:fa:8e:b2:d7: 37:36:a3:e9:e4:c8:73:9c:74:0c:22:06:5f:23:91: 6e:34:6d:d6:b7:12:40:0d:f9:5a:82:ed:3c:84:34: fe:96:51:7c:15:1d:41:5c:13:70:3a:fd:79:33:55: c2:d3:c4:30:4b:49:7a:25:f5:59:cc:e7:2b:a4:b0: c3:52:11:dd:d5:12:e3:43:cc:60:87:d3:18:cb:09: f4:f2:54:a3:7d:8e:fb:86:eb:ab:ff:c5:1c:f0:23: 75:b8:82:86:69:9c:29:7a:83:40:b2:0a:00:66:4a: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F7:82:6D:5D:0E:48:EA:87:C9:C6:0D:51:22:8C:18:68:8F:48:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:38:9f:c1:45:50:6b:8b:cd:63:4f:7b:8b:8a:82:d7:a1:f7: ed:aa:80:68:30:81:52:9e:64:da:53:f7:8b:78:42:38:6e:a1: f1:a4:d5:ff:b2:1c:f6:c4:d3:66:7a:c4:1d:87:4a:54:15:8d: d8:a8:4b:90:f3:0d:1b:b3:83:75:e9:2e:86:46:0b:1d:da:8d: 14:62:a7:29:72:7a:7b:02:c7:00:26:68:87:82:0b:aa:06:8c: f6:7e:d3:5a:2f:5a:56:72:16:06:2e:b7:2f:65:7a:2b:9e:71: 2d:fc:10:36:ed:31:1f:54:f9:25:ba:25:5a:ba:f9:b5:64:ac: 8a:f3:bf:87:bc:9b:75:52:65:86:54:13:08:a2:d4:58:2c:89: 1e:66:6d:5d:e6:b5:94:48:da:20:cf:0c:53:2a:48:d3:01:78: 7d:a9:48:59:6c:1d:cd:8b:85:da:bd:16:85:b2:24:01:e0:08: 9b:5d:15:8f:af:72:0d:5b:8d:eb:59:f6:a9:ca:f2:24:87:a3: 5b:08:e3:b3:3c:3a:8b:01:80:90:c0:d1:6e:eb:4c:f0:c2:14: aa:2d:fd:3a:87:12:49:d1:3f:ba:a9:0f:a1:81:40:fd:4f:8c: 03:f8:d2:a5:b2:f3:f8:fe:d4:25:d8:d7:47:04:cd:98:3d:74: 60:4c:8b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/d9tLcYLV6QO0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTU0OFoXDTI0MDYxOTIxMTU0OFowLzEtMCsGA1UEAxMk ZWQ3ZDJhNzMtNGI0Ni00NGUzLTk0MzEtNjc1NTRlZTEwMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeMb0/pWpM3EXqK3uZy+Dd2FN8mYa8yh3Dig fiBLB9a3eyVq8dOsYx3ozpWabPIUbRSfiYUVGeFBXGyoGGH7Wr9x3oIwZPetljfF 66B1IfdRH0L2Xhg52DpWcnF0m/un6gTjaTlJ5z9vDeOTiBUpMsyI2a8i3jruom4L Gk6pFxtrIUXUX6XKPCHI90bOnG0jkPqOstc3NqPp5MhznHQMIgZfI5FuNG3WtxJA Dflagu08hDT+llF8FR1BXBNwOv15M1XC08QwS0l6JfVZzOcrpLDDUhHd1RLjQ8xg h9MYywn08lSjfY77huur/8Uc8CN1uIKGaZwpeoNAsgoAZkpHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/3gm1dDkjqh8nGDVEijBhoj0iaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDNhNDllZTMtOGFhNC0z M2JjLThkNTItZDgwMWU1ZjBhMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc4n8FFUGuLzWNPe4uKgteh9+2qgGgwgVKeZNpT94t4QjhuofGk1f+y HPbE02Z6xB2HSlQVjdioS5DzDRuzg3XpLoZGCx3ajRRipylyensCxwAmaIeCC6oG jPZ+01ovWlZyFgYuty9leiuecS38EDbtMR9U+SW6JVq6+bVkrIrzv4e8m3VSZYZU Ewii1FgsiR5mbV3mtZRI2iDPDFMqSNMBeH2pSFlsHc2Lhdq9FoWyJAHgCJtdFY+v cg1bjetZ9qnK8iSHo1sI47M8OosBgJDA0W7rTPDCFKot/TqHEknRP7qpD6GBQP1P jAP40qWy8/j+1CXY10cEzZg9dGBMixs= -----END CERTIFICATE-----Generated at Sun May 5 15:35:04 2024 by rpki-client on console-fra.rpki-client.org