$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa File: 4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa (raw, json) Hash identifier: yQmykZiKCg9zqgBp+cnenFGFf58/vG87RTpfqzXtirs= Subject key identifier: 73:00:A9:78:A9:EC:0C:9C:59:44:F7:F1:EC:5C:B4:40:AC:C6:D0:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858455F07D739624451BEE9FF1480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa Signing time: Fri 29 Mar 2024 18:43:40 +0000 ROA not before: Fri 29 Mar 2024 18:43:40 +0000 ROA not after: Thu 27 Jun 2024 18:43:40 +0000 asID: 396982 IP address blocks: 34.156.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:07:d7:39:62:44:51:be:e9:ff:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 29 18:43:40 2024 GMT Not After : Jun 27 18:43:40 2024 GMT Subject: CN=7a8de274-d23d-443b-9cd6-e42b3ab35db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:f1:7d:bf:59:fa:c9:7d:e8:8c:49:d2:d5: 93:3d:45:b3:86:ab:66:04:3a:22:d3:df:8a:d1:03: ce:d5:68:ca:fa:e6:6e:fc:96:b5:2c:59:d5:26:76: 8e:7c:59:cf:2c:2f:0e:5e:8a:f0:63:36:b7:27:e1: bc:53:9f:99:49:d0:ce:e4:fd:ea:cc:84:82:5b:63: fd:a8:3d:41:c9:39:f2:37:45:d3:30:01:6f:28:a1: f3:aa:17:de:32:54:74:36:54:e6:33:8e:bc:bc:81: 8c:07:46:28:90:51:3d:89:ca:40:ba:af:96:d0:18: a5:9b:76:54:2f:ce:a7:b2:05:60:44:08:5b:e6:23: 31:53:22:e0:10:d3:60:df:81:75:b2:7e:52:50:c1: 9c:c5:6e:84:da:12:0a:f1:af:be:32:8e:a7:ac:89: 01:30:9d:9d:88:a4:cb:40:82:9d:58:98:9f:67:d4: 19:9e:f4:94:1d:4f:93:61:a2:8e:74:1a:dd:92:03: e0:0c:1e:56:61:9e:fb:9f:33:a4:5f:fd:31:4e:c7: 6a:db:ec:dc:35:1d:3e:a5:1b:94:a6:cb:bb:31:ca: 04:83:be:bb:18:f9:ad:3e:f5:3b:b7:02:a7:f7:1c: 2a:d9:12:05:27:af:6a:38:b3:5b:2c:38:28:35:7a: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:00:A9:78:A9:EC:0C:9C:59:44:F7:F1:EC:5C:B4:40:AC:C6:D0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.156.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d5:72:1c:28:f9:10:3a:09:11:f9:67:34:41:8b:f3:ee:9d: 5a:aa:ed:dc:03:47:6a:90:b2:d0:5e:7d:5a:9e:0a:31:be:72: 08:ff:35:2f:b4:ad:27:44:9e:81:62:2b:e2:d1:ad:a4:0c:a3: 0e:55:c2:68:a4:ab:01:4e:0f:95:35:d2:1d:7d:8d:0c:74:5a: 93:f3:b5:d9:96:d4:ff:40:05:b5:87:c9:60:0e:89:5f:78:15: 95:b2:f4:c6:8a:63:2b:be:b5:3c:23:93:33:ee:ad:c2:5b:60: c5:e1:7d:2e:02:36:80:ef:47:80:d6:33:cb:1c:0c:64:4e:3b: 98:c5:f1:fe:ca:33:00:8e:92:c2:2c:5f:66:bb:8b:ce:b6:fe: 1e:6d:db:e8:10:fe:3f:e7:b7:18:47:0d:48:4d:cf:23:13:6e: 9a:47:38:d8:ed:4e:fa:a7:66:78:c4:bd:ad:be:25:86:80:41: d3:ee:eb:79:10:80:4c:82:6c:75:ed:36:d9:24:17:e4:2b:9a: d2:30:41:e7:b4:89:49:45:e0:34:ab:28:7c:c3:68:f1:28:d4: eb:5a:d4:f2:7f:c6:6a:4d:54:fc:ac:bd:7b:7c:2f:86:e6:34: 86:95:8d:0b:a4:77:59:ca:ef:48:77:2d:14:d9:ad:c5:55:1d: b2:77:10:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfB9c5YkRRvun/FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyOTE4NDM0MFoXDTI0MDYyNzE4NDM0MFowLzEtMCsGA1UEAxMk N2E4ZGUyNzQtZDIzZC00NDNiLTljZDYtZTQyYjNhYjM1ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha7xfb9Z+sl96IxJ0tWTPUWzhqtmBDoi09+K 0QPO1WjK+uZu/Ja1LFnVJnaOfFnPLC8OXorwYza3J+G8U5+ZSdDO5P3qzISCW2P9 qD1ByTnyN0XTMAFvKKHzqhfeMlR0NlTmM468vIGMB0YokFE9icpAuq+W0Bilm3ZU L86nsgVgRAhb5iMxUyLgENNg34F1sn5SUMGcxW6E2hIK8a++Mo6nrIkBMJ2diKTL QIKdWJifZ9QZnvSUHU+TYaKOdBrdkgPgDB5WYZ77nzOkX/0xTsdq2+zcNR0+pRuU psu7McoEg767GPmtPvU7twKn9xwq2RIFJ69qOLNbLDgoNXpZpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMAqXip7AycWUT38exctECsxtCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGZlYTAwMTItNWY0ZS0z OTY3LThjYTQtMGVjZWE2YjM3M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXVchwo+RA6CRH5ZzRBi/PunVqq7dwDR2qQstBefVqeCjG+cgj/NS+0 rSdEnoFiK+LRraQMow5VwmikqwFOD5U10h19jQx0WpPztdmW1P9ABbWHyWAOiV94 FZWy9MaKYyu+tTwjkzPurcJbYMXhfS4CNoDvR4DWM8scDGROO5jF8f7KMwCOksIs X2a7i862/h5t2+gQ/j/ntxhHDUhNzyMTbppHONjtTvqnZnjEva2+JYaAQdPu63kQ gEyCbHXtNtkkF+QrmtIwQee0iUlF4DSrKHzDaPEo1Ota1PJ/xmpNVPysvXt8L4bm NIaVjQukd1nK70h3LRTZrcVVHbJ3EHE= -----END CERTIFICATE-----Generated at Sun May 5 15:35:09 2024 by rpki-client on console-fra.rpki-client.org