$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756ec227-7a6a-32b0-82da-49420cf27a8b.roa File: 756ec227-7a6a-32b0-82da-49420cf27a8b.roa (raw, json) Hash identifier: 3VY0aFCsiPHWuglhJqdrjIIGKrEju+3qA2A7DUftkWg= Subject key identifier: 72:A9:AA:7E:17:B4:FD:EE:C8:9D:E7:67:0C:A7:B4:B1:EC:F2:63:EA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490B5DBE3F864BFBF729EB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756ec227-7a6a-32b0-82da-49420cf27a8b.roa Signing time: Thu 21 Mar 2024 21:42:59 +0000 ROA not before: Thu 21 Mar 2024 21:42:59 +0000 ROA not after: Wed 19 Jun 2024 21:42:59 +0000 asID: 396982 IP address blocks: 34.69.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0b:5d:be:3f:86:4b:fb:f7:29:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:42:59 2024 GMT Not After : Jun 19 21:42:59 2024 GMT Subject: CN=941a7b95-21f6-4a11-95a6-48d8dcac629a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:76:37:9d:02:0f:cf:a5:71:ec:37:b6:68: 08:56:1e:39:5a:b8:e6:c3:5b:51:e8:74:11:d0:2e: ef:55:18:07:b3:4a:2c:d7:5f:4e:de:7e:17:d9:9c: 8a:49:69:d9:b5:88:90:d7:d2:b4:8d:75:fa:04:97: cf:e7:2f:07:12:a8:df:e1:10:c1:b5:90:7a:9d:c3: 0c:98:5b:31:6a:49:55:63:cf:3f:a2:bc:ca:e7:77: fc:33:ff:26:d5:13:5e:80:3f:37:45:58:fc:7e:4d: da:48:ec:b6:ed:28:d6:82:a4:52:9b:2d:cf:17:fb: fb:cc:17:3f:66:ec:9a:67:97:5b:7d:c9:7b:3f:0d: e1:90:90:b2:81:64:10:f1:fa:41:ac:f1:ac:2e:54: b0:c9:6d:c9:68:b1:f0:04:96:8d:9c:46:7b:53:2a: 5e:54:bf:bb:27:16:64:a2:49:69:62:1d:8d:6b:b5: 1a:e5:df:07:76:03:b5:0f:24:15:43:5b:a7:2a:91: ae:65:13:1b:8e:39:ad:5f:2f:41:79:99:4a:af:39: ac:72:9f:b8:96:3b:b7:c4:d5:96:b0:d6:ba:fa:60: 14:d3:29:4b:e2:ba:d2:a8:37:ed:ea:20:c3:0a:51: 48:b2:24:8f:5e:c5:5b:7e:84:0e:03:d2:dd:7b:c9: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:AA:7E:17:B4:FD:EE:C8:9D:E7:67:0C:A7:B4:B1:EC:F2:63:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756ec227-7a6a-32b0-82da-49420cf27a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:59:40:af:fd:6f:db:5f:b2:4f:08:30:ed:2b:14:a8:e2:7d: 27:da:4a:3e:81:63:f6:12:0f:d1:0d:7e:a1:8f:07:a8:3e:db: 57:f6:f2:43:4f:fd:ba:f7:b3:e2:cb:33:f8:a7:d4:7b:63:a9: 2f:30:77:1d:6b:5a:b0:f0:fb:b0:7e:ac:45:a1:cc:e9:56:e3: 67:d0:84:03:22:d6:77:1d:31:c9:2b:79:bd:f6:1c:df:64:cc: 82:de:2c:81:1c:39:19:f6:f8:e9:92:35:60:af:72:ac:87:78: ff:2b:9c:25:18:74:82:a7:cc:6e:72:f0:3e:13:d2:56:f9:0d: 09:7f:d0:01:87:87:a9:20:5f:f0:3e:ea:29:01:cc:18:a5:10: 09:c0:33:69:00:fc:51:49:5b:1f:c7:0c:8e:ab:66:a0:f0:54: 07:16:26:59:54:83:68:f2:88:e8:a5:6a:1d:49:08:e8:37:0f: ab:04:e8:e5:e2:84:13:2a:d0:84:8f:b4:7d:7d:ed:09:a1:ec: d8:f4:71:3c:6a:bc:07:ce:a9:ea:46:57:a9:59:d5:24:df:ac: f1:8f:51:8b:0b:1c:d5:ed:61:e3:dc:a6:60:b0:5a:c5:74:40: 84:bb:4e:ca:c9:89:00:b0:65:d0:12:24:5e:ff:74:0b:f2:5e: 68:8a:fe:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJC12+P4ZL+/cp6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDI1OVoXDTI0MDYxOTIxNDI1OVowLzEtMCsGA1UEAxMk OTQxYTdiOTUtMjFmNi00YTExLTk1YTYtNDhkOGRjYWM2MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMd2N50CD8+lcew3tmgIVh45Wrjmw1tR6HQR 0C7vVRgHs0os119O3n4X2ZyKSWnZtYiQ19K0jXX6BJfP5y8HEqjf4RDBtZB6ncMM mFsxaklVY88/orzK53f8M/8m1RNegD83RVj8fk3aSOy27SjWgqRSmy3PF/v7zBc/ ZuyaZ5dbfcl7Pw3hkJCygWQQ8fpBrPGsLlSwyW3JaLHwBJaNnEZ7UypeVL+7JxZk oklpYh2Na7Ua5d8HdgO1DyQVQ1unKpGuZRMbjjmtXy9BeZlKrzmscp+4lju3xNWW sNa6+mAU0ylL4rrSqDft6iDDClFIsiSPXsVbfoQOA9Lde8nJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKpqn4XtP3uyJ3nZwyntLHs8mPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzU2ZWMyMjctN2E2YS0z MmIwLTgyZGEtNDk0MjBjZjI3YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlZQK/9b9tfsk8IMO0rFKjifSfaSj6BY/YSD9ENfqGPB6g+21f28kNP /br3s+LLM/in1HtjqS8wdx1rWrDw+7B+rEWhzOlW42fQhAMi1ncdMckreb32HN9k zILeLIEcORn2+OmSNWCvcqyHeP8rnCUYdIKnzG5y8D4T0lb5DQl/0AGHh6kgX/A+ 6ikBzBilEAnAM2kA/FFJWx/HDI6rZqDwVAcWJllUg2jyiOilah1JCOg3D6sE6OXi hBMq0ISPtH197Qmh7Nj0cTxqvAfOqepGV6lZ1STfrPGPUYsLHNXtYePcpmCwWsV0 QIS7TsrJiQCwZdASJF7/dAvyXmiK/ng= -----END CERTIFICATE-----Generated at Sun May 5 15:35:23 2024 by rpki-client on console-fra.rpki-client.org