$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588ba5d4-ec29-31a8-9f01-d30b39536dd0.roa File: 588ba5d4-ec29-31a8-9f01-d30b39536dd0.roa (raw, json) Hash identifier: q7gEpTA7KA7XIAtvVaeEHv/85Nh2YWGNnmp8zJHyVTg= Subject key identifier: C3:60:57:1E:FB:EF:24:93:FC:57:B4:0C:AF:FE:9B:98:2A:21:35:E3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858455F0463E44393EA7B71FD0980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588ba5d4-ec29-31a8-9f01-d30b39536dd0.roa Signing time: Fri 29 Mar 2024 18:36:43 +0000 ROA not before: Fri 29 Mar 2024 18:36:43 +0000 ROA not after: Thu 27 Jun 2024 18:36:43 +0000 asID: 396982 IP address blocks: 34.109.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:04:63:e4:43:93:ea:7b:71:fd:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 29 18:36:43 2024 GMT Not After : Jun 27 18:36:43 2024 GMT Subject: CN=f41e8195-32f8-4413-871d-7c2800e396b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:81:f0:3a:b0:24:90:3a:a3:f6:9c:73:5a: fb:66:d1:96:53:bf:d7:a2:c5:1d:fc:3b:37:ef:ce: 9c:fe:d4:a8:cb:26:30:d4:ff:8c:83:d1:bf:95:ab: 4b:44:7b:93:7a:52:73:3c:35:cb:11:0a:a3:3b:38: e9:4c:26:15:dd:56:3f:b0:4e:d3:13:86:bf:5d:3e: ed:19:0f:f6:f0:82:fe:12:dd:bf:11:3b:1b:16:38: bb:57:d7:de:c3:74:6a:0a:3e:77:4e:be:3d:6d:7b: 96:40:28:0b:a7:13:36:3d:c0:04:45:f3:64:9e:1a: b8:b6:46:70:35:d4:8e:06:2f:a9:fc:68:7b:1d:a5: 1c:34:5e:b3:ec:1b:e4:12:46:c9:3b:0e:43:3b:ff: 5e:a9:0c:0f:06:b0:e3:89:9e:a2:fc:33:d9:bb:1e: 5e:db:e9:1d:71:03:7d:27:ad:81:c3:49:76:1c:6f: cf:1a:7e:ab:95:6f:c2:b3:4d:05:0b:79:9d:13:12: 52:75:b8:92:9a:0e:49:ab:bf:33:f0:cf:91:31:e9: 49:3f:07:0b:bf:34:fa:65:c5:d4:12:28:53:67:0b: 91:2a:c6:f7:d1:ad:69:db:6b:13:32:06:5a:b8:65: 95:fc:af:9e:14:b4:ff:ec:c7:c8:86:1a:08:37:45: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:60:57:1E:FB:EF:24:93:FC:57:B4:0C:AF:FE:9B:98:2A:21:35:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588ba5d4-ec29-31a8-9f01-d30b39536dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.109.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9e:1f:df:56:d2:72:4e:29:dc:4b:86:1b:01:e3:a5:7a:4f: 89:26:7b:f6:c8:64:02:fc:9c:df:42:35:eb:ea:3f:09:7c:7c: 25:35:a6:36:92:8e:21:0e:8c:79:d9:be:56:e3:57:03:fc:14: c7:31:4e:b2:45:f3:9f:67:a3:c7:cd:a5:a9:6b:29:7f:5e:85: d5:18:78:37:eb:95:88:7f:48:93:c0:86:48:47:93:2b:0c:4c: 61:4c:79:8a:12:f1:7a:e2:f8:77:12:8d:dc:5f:c8:73:0c:93: 31:f9:f9:f3:38:7b:d9:f1:14:11:33:cf:77:ad:85:f5:05:6b: bc:24:08:7d:cb:9d:b0:70:1f:8c:10:c5:40:14:b4:4c:27:47: b1:fd:7e:fb:92:8b:1f:53:a6:3b:19:74:cb:9f:38:1c:e1:b8: 50:14:17:be:a4:5e:39:8b:38:1d:5b:b0:7a:d2:0f:cc:54:f0: 5f:84:97:4c:f4:86:3a:8e:11:67:1e:c8:2d:3a:69:51:6f:5e: 8e:19:4a:b9:ef:3c:56:0a:e5:fa:eb:c0:3b:da:60:de:a6:8b: 0c:01:70:0b:12:3b:86:fd:31:ea:14:d4:61:24:44:b6:6d:45: 18:97:7b:ab:c6:20:5c:d0:68:e0:be:df:bb:04:51:d0:39:0d: 18:77:ed:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBGPkQ5Pqe3H9CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyOTE4MzY0M1oXDTI0MDYyNzE4MzY0M1owLzEtMCsGA1UEAxMk ZjQxZTgxOTUtMzJmOC00NDEzLTg3MWQtN2MyODAwZTM5NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8CB8DqwJJA6o/acc1r7ZtGWU7/XosUd/Ds3 786c/tSoyyYw1P+Mg9G/latLRHuTelJzPDXLEQqjOzjpTCYV3VY/sE7TE4a/XT7t GQ/28IL+Et2/ETsbFji7V9few3RqCj53Tr49bXuWQCgLpxM2PcAERfNknhq4tkZw NdSOBi+p/Gh7HaUcNF6z7BvkEkbJOw5DO/9eqQwPBrDjiZ6i/DPZux5e2+kdcQN9 J62Bw0l2HG/PGn6rlW/Cs00FC3mdExJSdbiSmg5Jq78z8M+RMelJPwcLvzT6ZcXU EihTZwuRKsb30a1p22sTMgZauGWV/K+eFLT/7MfIhhoIN0VHJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNgVx777yST/Fe0DK/+m5gqITXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg4YmE1ZDQtZWMyOS0z MWE4LTlmMDEtZDMwYjM5NTM2ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIm1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmeH99W0nJOKdxLhhsB46V6T4kme/bIZAL8nN9CNevqPwl8fCU1pjaS jiEOjHnZvlbjVwP8FMcxTrJF859no8fNpalrKX9ehdUYeDfrlYh/SJPAhkhHkysM TGFMeYoS8Xri+HcSjdxfyHMMkzH5+fM4e9nxFBEzz3ethfUFa7wkCH3LnbBwH4wQ xUAUtEwnR7H9fvuSix9TpjsZdMufOBzhuFAUF76kXjmLOB1bsHrSD8xU8F+El0z0 hjqOEWceyC06aVFvXo4ZSrnvPFYK5frrwDvaYN6miwwBcAsSO4b9MeoU1GEkRLZt RRiXe6vGIFzQaOC+37sEUdA5DRh37Qk= -----END CERTIFICATE-----Generated at Mon May 6 01:59:22 2024 by rpki-client on console-fra.rpki-client.org