$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa File: 70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa (raw, json) Hash identifier: TYMZP+70cM97N2QMGC9u5VIVhP3usejEdjPK9H+3DBw= Subject key identifier: 61:E1:78:90:C2:1A:DD:C1:98:D7:11:82:89:FE:52:86:82:4B:F7:7C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490D7628A0B3D74ED816DD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa Signing time: Thu 21 Mar 2024 21:47:12 +0000 ROA not before: Thu 21 Mar 2024 21:47:12 +0000 ROA not after: Wed 19 Jun 2024 21:47:12 +0000 asID: 396982 IP address blocks: 34.134.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0d:76:28:a0:b3:d7:4e:d8:16:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:47:12 2024 GMT Not After : Jun 19 21:47:12 2024 GMT Subject: CN=821a8675-c863-4b8f-b829-8f2965d4c52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:fb:1a:c1:87:c0:da:2f:11:8a:78:0d:5e: 0f:57:e9:88:4e:15:dd:30:7b:b7:93:70:3c:a2:3a: 6c:ae:27:09:51:9b:4c:2f:34:22:82:c1:b1:f3:31: 48:5b:25:bb:b7:11:f9:9b:08:7a:50:f1:6f:b4:ab: 6e:b2:cc:59:ae:27:4e:b0:84:86:a1:06:4d:f3:ec: 6b:51:51:37:a1:e3:09:d3:8a:63:d0:b1:09:90:1f: 9d:72:6c:76:f0:54:29:1b:5c:04:19:c3:64:5d:69: f6:1b:84:5b:ac:cb:d3:32:16:70:53:34:2f:8a:0d: 58:19:6e:bb:b2:84:fa:4d:62:1c:29:82:95:40:c9: 08:bc:6e:87:92:57:2a:5b:96:51:20:54:ae:45:9a: e6:41:4c:20:0b:12:52:e6:1f:bc:7e:d3:72:e3:83: 00:80:81:50:1f:0b:8f:65:8f:d5:1b:4e:48:eb:bc: 69:da:68:84:e2:dc:8f:0a:25:4c:8c:6f:f5:2c:62: b1:cc:dc:0c:06:11:b9:1e:45:fe:b1:51:4f:67:98: 7b:df:6e:f6:8c:74:84:8c:10:13:21:4a:3f:9d:7e: 35:6f:c2:7f:75:f9:b6:e5:7a:45:2f:dc:10:87:3e: 2a:37:d7:18:be:eb:dd:ec:94:89:ed:23:e7:2d:d3: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E1:78:90:C2:1A:DD:C1:98:D7:11:82:89:FE:52:86:82:4B:F7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8f:be:a1:0b:a3:17:e2:07:78:8a:49:23:68:44:01:48:1f: 77:80:f7:49:99:65:6b:13:73:0b:b8:96:9c:eb:10:71:1e:dc: ed:77:67:fc:98:48:20:99:de:98:e0:68:52:10:3f:8f:69:b7: ad:ea:75:9f:85:f0:ab:5a:04:69:3e:e1:9f:6c:9f:d2:f1:3d: 34:bc:57:b3:ce:57:41:93:1c:bd:d4:6b:f6:23:5c:61:9b:50: 44:b4:49:5b:3f:d8:0f:a2:e8:15:6c:b9:23:0e:66:f5:ff:36: ef:ce:60:0c:2a:33:4e:4b:03:2a:7c:74:22:1f:10:c0:fa:c8: 49:b5:e4:42:cc:0f:7e:ec:67:55:b6:39:5d:c9:65:37:77:ab: 20:f5:a8:48:c4:29:83:cd:eb:8b:c6:10:fe:50:21:fd:80:75: 8b:8e:e8:e7:df:fe:9f:07:76:20:f3:ae:69:9e:20:dd:cc:88: 9d:56:5f:6f:5b:10:4f:03:87:d2:6d:c3:bc:54:ef:a1:d9:08: d8:d5:a3:4d:e6:92:57:e2:27:de:fd:92:83:e2:a0:ec:12:75: 0f:f5:f7:69:1e:94:6a:4f:a0:cb:03:18:d0:a2:f5:a4:9e:b8: 64:23:d5:88:9c:03:6d:c1:39:83:09:3e:cf:0d:c9:ff:54:69: 50:0a:4e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDXYooLPXTtgW3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDcxMloXDTI0MDYxOTIxNDcxMlowLzEtMCsGA1UEAxMk ODIxYTg2NzUtYzg2My00YjhmLWI4MjktOGYyOTY1ZDRjNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTT7GsGHwNovEYp4DV4PV+mIThXdMHu3k3A8 ojpsricJUZtMLzQigsGx8zFIWyW7txH5mwh6UPFvtKtussxZridOsISGoQZN8+xr UVE3oeMJ04pj0LEJkB+dcmx28FQpG1wEGcNkXWn2G4RbrMvTMhZwUzQvig1YGW67 soT6TWIcKYKVQMkIvG6HklcqW5ZRIFSuRZrmQUwgCxJS5h+8ftNy44MAgIFQHwuP ZY/VG05I67xp2miE4tyPCiVMjG/1LGKxzNwMBhG5HkX+sVFPZ5h73272jHSEjBAT IUo/nX41b8J/dfm25XpFL9wQhz4qN9cYvuvd7JSJ7SPnLdOMywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHheJDCGt3BmNcRgon+UoaCS/d8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzBjOGM3MWItMWI1OS0z M2E1LThmOWUtMjllMDQzZTRhZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGePvqELoxfiB3iKSSNoRAFIH3eA90mZZWsTcwu4lpzrEHEe3O13Z/yY SCCZ3pjgaFIQP49pt63qdZ+F8KtaBGk+4Z9sn9LxPTS8V7POV0GTHL3Ua/YjXGGb UES0SVs/2A+i6BVsuSMOZvX/Nu/OYAwqM05LAyp8dCIfEMD6yEm15ELMD37sZ1W2 OV3JZTd3qyD1qEjEKYPN64vGEP5QIf2AdYuO6Off/p8HdiDzrmmeIN3MiJ1WX29b EE8Dh9Jtw7xU76HZCNjVo03mklfiJ979koPioOwSdQ/192kelGpPoMsDGNCi9aSe uGQj1YicA23BOYMJPs8Nyf9UaVAKTgo= -----END CERTIFICATE-----Generated at Mon May 6 01:59:32 2024 by rpki-client on console-fra.rpki-client.org