$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa File: 49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa (raw, json) Hash identifier: 5eIBvfkgMbi6C5UmyQpCkiWIuHZxaZtqvYiuB9/dT3I= Subject key identifier: 54:D0:EA:5F:B7:0B:F2:12:4B:AA:3B:67:E8:9F:08:05:02:AB:3E:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584549031371EF786D56A880B500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa Signing time: Thu 21 Mar 2024 21:26:17 +0000 ROA not before: Thu 21 Mar 2024 21:26:17 +0000 ROA not after: Wed 19 Jun 2024 21:26:17 +0000 asID: 396982 IP address blocks: 35.238.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:03:13:71:ef:78:6d:56:a8:80:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:26:17 2024 GMT Not After : Jun 19 21:26:17 2024 GMT Subject: CN=b7616d8e-0ef3-4ddd-bac4-bb0fef163ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:f7:c9:19:19:5a:58:09:53:ec:73:c9:6c: 68:aa:89:80:df:53:e9:4a:0b:7a:bf:b8:e8:5f:0c: d3:64:40:08:aa:9c:2f:d3:c2:48:01:ff:1f:2b:f2: 8d:ef:6a:e3:55:c2:85:ac:48:96:e8:18:45:32:68: 8a:8b:68:3a:7b:c1:cd:c5:26:11:db:4a:93:9f:6f: b8:39:86:25:97:51:bc:ec:1d:24:21:06:d1:fb:1a: 09:b1:03:82:68:03:fe:df:cd:86:5a:29:ba:67:24: 48:b6:7a:77:a1:c9:ed:36:fa:56:7d:09:98:3b:a6: f3:b7:b7:ce:c6:29:34:71:c5:29:4f:a5:8e:e5:45: 75:28:db:e4:39:9b:6a:bc:64:aa:56:e1:e1:5e:ff: b6:52:aa:f4:a6:dc:c9:75:c2:92:21:ce:1b:d6:a9: 60:60:f0:fe:1b:77:bc:f0:23:47:a5:61:3f:9d:ac: 36:06:c3:94:92:81:47:be:8e:e2:2b:9c:86:5e:97: 4d:db:88:bc:fc:65:1c:06:32:5f:7f:57:1d:00:ae: 4e:5a:8e:38:2c:79:5b:e9:42:99:a4:ce:be:7f:15: ba:8a:e5:6e:12:d4:2f:d6:82:7f:d1:12:ce:d5:e0: cf:93:7f:3d:07:98:a9:5a:db:79:92:4d:02:89:69: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D0:EA:5F:B7:0B:F2:12:4B:AA:3B:67:E8:9F:08:05:02:AB:3E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:67:4b:bb:86:07:53:2c:dc:d5:ce:8b:55:72:af:da:98:f8: 49:61:ad:b8:4f:28:ac:87:14:8d:34:e8:ce:02:8e:9c:a6:29: 90:8b:87:95:f5:6b:c3:59:66:0f:2c:00:af:b6:54:50:cf:39: 29:56:da:c3:19:94:f4:ef:6f:8b:3a:5c:cc:51:17:ad:7a:25: 8a:17:7b:c6:f8:eb:bd:ea:4f:08:52:cb:00:5c:69:4a:35:c7: 8f:37:88:88:d1:8a:12:71:a9:5d:ed:fb:6c:32:e9:95:b4:43: 71:25:e1:14:93:a7:b6:a0:fd:71:59:1f:ba:82:b7:2b:00:17: 17:68:ae:d4:8c:08:b2:82:c5:94:38:c8:52:6e:af:f7:3e:d5: 8b:6f:35:5d:05:d9:e6:08:fd:d1:cf:ee:8a:27:1e:d7:9e:a2: 18:e2:26:0e:7f:48:c4:b2:6b:74:95:88:76:5f:25:2e:8b:c8: 0a:15:81:7d:4c:55:a8:11:5b:15:29:5d:12:78:6c:3d:dd:69: dd:aa:40:f9:35:3e:d3:1e:76:37:d1:e3:42:1c:b0:8b:da:e5: 44:b3:2c:de:c0:b3:0e:46:67:c5:d7:30:c7:b6:28:9b:e4:99: d8:d8:80:dd:f7:4e:71:6b:5a:68:d5:79:60:58:7d:ce:f5:94: 8d:19:19:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJAxNx73htVqiAtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMjYxN1oXDTI0MDYxOTIxMjYxN1owLzEtMCsGA1UEAxMk Yjc2MTZkOGUtMGVmMy00ZGRkLWJhYzQtYmIwZmVmMTYzZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcD3yRkZWlgJU+xzyWxoqomA31PpSgt6v7jo XwzTZEAIqpwv08JIAf8fK/KN72rjVcKFrEiW6BhFMmiKi2g6e8HNxSYR20qTn2+4 OYYll1G87B0kIQbR+xoJsQOCaAP+382GWim6ZyRItnp3ocntNvpWfQmYO6bzt7fO xik0ccUpT6WO5UV1KNvkOZtqvGSqVuHhXv+2Uqr0ptzJdcKSIc4b1qlgYPD+G3e8 8CNHpWE/naw2BsOUkoFHvo7iK5yGXpdN24i8/GUcBjJff1cdAK5OWo44LHlb6UKZ pM6+fxW6iuVuEtQv1oJ/0RLO1eDPk389B5ipWtt5kk0CiWk+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTQ6l+3C/ISS6o7Z+ifCAUCqz7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDlmOGNiY2QtMzFiYS0z NWYxLWJlOWUtNTcyYWEyYzdhZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFnS7uGB1Ms3NXOi1Vyr9qY+ElhrbhPKKyHFI006M4CjpymKZCLh5X1 a8NZZg8sAK+2VFDPOSlW2sMZlPTvb4s6XMxRF616JYoXe8b4673qTwhSywBcaUo1 x483iIjRihJxqV3t+2wy6ZW0Q3El4RSTp7ag/XFZH7qCtysAFxdortSMCLKCxZQ4 yFJur/c+1YtvNV0F2eYI/dHP7oonHteeohjiJg5/SMSya3SViHZfJS6LyAoVgX1M VagRWxUpXRJ4bD3dad2qQPk1PtMedjfR40IcsIva5USzLN7Asw5GZ8XXMMe2KJvk mdjYgN33TnFrWmjVeWBYfc71lI0ZGVU= -----END CERTIFICATE-----Generated at Mon May 6 01:59:16 2024 by rpki-client on console-fra.rpki-client.org