$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa File: 5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa (raw, json) Hash identifier: fIWwJV+xFiWE5H88VNrBUqcB3+R6/etsaekFJMsZdRg= Subject key identifier: CF:9E:21:0A:12:36:4E:91:A2:F7:46:AD:E7:A1:5B:75:B4:39:00:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FF6DAD06B6C2ECAA1339C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa Signing time: Thu 21 Mar 2024 21:18:56 +0000 ROA not before: Thu 21 Mar 2024 21:18:56 +0000 ROA not after: Wed 19 Jun 2024 21:18:56 +0000 asID: 396982 IP address blocks: 34.123.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:ff:6d:ad:06:b6:c2:ec:aa:13:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:18:56 2024 GMT Not After : Jun 19 21:18:56 2024 GMT Subject: CN=fa242b03-315f-48c7-957f-edc3b864d837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b9:0d:f2:f3:4d:fd:91:a9:de:41:e3:91:8a: b7:3e:35:fd:d9:7c:f3:e7:70:aa:e2:c3:66:b9:42: f0:34:c1:56:ef:21:f6:2e:71:29:54:a5:06:18:db: 4a:1d:d5:f4:5d:2c:b0:24:7d:e4:81:f6:28:4f:fb: e7:f3:0a:dd:98:84:76:fc:3a:0f:a0:04:08:d3:ef: f7:2e:22:49:7b:83:08:f7:21:d0:64:3b:54:91:57: dd:ec:fc:61:3a:30:fb:21:48:2d:db:02:b6:8b:71: ac:47:ee:89:a0:3b:89:ae:28:a9:77:69:62:5b:5d: 3e:b8:a9:b1:a7:07:4c:a1:81:b5:43:ca:07:10:51: c3:4d:72:d1:bf:84:b9:ed:50:e3:d0:6e:5c:57:15: 79:02:08:4b:74:63:b6:26:03:79:ac:15:c0:09:2a: 6a:43:97:5f:2f:b8:d9:76:33:b7:c4:ba:21:0d:3e: fb:5d:53:7a:27:79:16:01:4b:7d:eb:a3:4a:7f:da: c4:0e:4d:c7:fa:55:5c:ee:0f:fe:c5:ba:ec:f6:0f: bc:8a:c4:3c:95:52:40:5e:59:45:84:ab:c1:59:21: 3c:ff:eb:94:a0:c2:34:05:d4:2e:47:12:ae:b8:81: b1:4d:2c:c6:fb:06:dc:b6:08:f6:b8:02:30:b3:e1: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:21:0A:12:36:4E:91:A2:F7:46:AD:E7:A1:5B:75:B4:39:00:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfd7f13-db37-3096-8408-3a4e1ce92a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:de:45:05:fe:d6:0b:b9:5d:ba:06:a0:ed:9a:8d:3d:56:ae: 5f:3d:8f:8a:ac:6f:54:e1:b2:51:c2:4b:7a:70:a8:3b:d9:6e: b2:3f:0e:07:af:87:c4:5d:a1:15:fb:f0:d5:e4:dc:08:be:16: 77:c6:3f:19:19:d2:0b:ec:4b:2f:95:82:cd:c4:a1:cf:b7:32: 11:de:78:b6:2e:a4:52:3c:77:3c:52:a0:e8:b8:a7:b0:0b:f0: aa:4a:d1:34:11:b3:c8:2a:b4:a8:d8:65:42:85:38:19:2d:99: 3d:0b:85:eb:80:34:b2:a1:f5:34:db:8a:af:ca:7c:f1:60:09: df:26:e5:84:65:e9:81:ef:56:97:9d:45:c3:ec:2b:76:58:ab: 3e:d6:d0:1a:a5:18:25:9c:a9:86:4d:70:79:47:2a:e1:7c:71: 46:f6:5c:61:2a:c3:82:81:d0:cf:67:0f:80:99:ed:4f:4c:8e: 05:42:a3:9c:4b:93:8f:91:8b:ed:cc:ae:92:fa:37:a2:95:28: c2:43:cb:7d:62:89:f5:80:e4:f2:27:f1:26:39:c3:9f:b8:92: 65:4f:1a:b4:c9:e1:a8:fd:71:97:85:f5:c6:1d:3e:ed:c6:b9: 75:ab:96:ee:7b:29:e2:e4:d8:2c:ff:1b:a4:9e:7b:7f:b1:68: eb:7c:8e:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/22tBrbC7KoTOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTg1NloXDTI0MDYxOTIxMTg1NlowLzEtMCsGA1UEAxMk ZmEyNDJiMDMtMzE1Zi00OGM3LTk1N2YtZWRjM2I4NjRkODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrkN8vNN/ZGp3kHjkYq3PjX92Xzz53Cq4sNm uULwNMFW7yH2LnEpVKUGGNtKHdX0XSywJH3kgfYoT/vn8wrdmIR2/DoPoAQI0+/3 LiJJe4MI9yHQZDtUkVfd7PxhOjD7IUgt2wK2i3GsR+6JoDuJriipd2liW10+uKmx pwdMoYG1Q8oHEFHDTXLRv4S57VDj0G5cVxV5AghLdGO2JgN5rBXACSpqQ5dfL7jZ djO3xLohDT77XVN6J3kWAUt966NKf9rEDk3H+lVc7g/+xbrs9g+8isQ8lVJAXllF hKvBWSE8/+uUoMI0BdQuRxKuuIGxTSzG+wbctgj2uAIws+FIEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+eIQoSNk6RovdGreehW3W0OQBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmZDdmMTMtZGIzNy0z MDk2LTg0MDgtM2E0ZTFjZTkyYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIreRQX+1gu5XboGoO2ajT1Wrl89j4qsb1ThslHCS3pwqDvZbrI/Dgev h8RdoRX78NXk3Ai+FnfGPxkZ0gvsSy+Vgs3Eoc+3MhHeeLYupFI8dzxSoOi4p7AL 8KpK0TQRs8gqtKjYZUKFOBktmT0LheuANLKh9TTbiq/KfPFgCd8m5YRl6YHvVped RcPsK3ZYqz7W0BqlGCWcqYZNcHlHKuF8cUb2XGEqw4KB0M9nD4CZ7U9MjgVCo5xL k4+Ri+3MrpL6N6KVKMJDy31iifWA5PIn8SY5w5+4kmVPGrTJ4aj9cZeF9cYdPu3G uXWrlu57KeLk2Cz/G6See3+xaOt8joU= -----END CERTIFICATE-----Generated at Mon May 6 09:12:25 2024 by rpki-client on console-fra.rpki-client.org