$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa File: 9a23917d-461e-3291-a9be-0803e9d905a9.roa (raw, json) Hash identifier: QFjRdL8rJp5apzCJOpnCOkQVJ7EPJ4H5yHMjoYrbukI= Subject key identifier: D2:2E:B8:DA:BD:E6:B9:39:BD:FC:D7:7B:25:D9:78:4F:7B:74:31:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FCB712A52C4962A799B6C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa Signing time: Thu 21 Mar 2024 21:13:28 +0000 ROA not before: Thu 21 Mar 2024 21:13:28 +0000 ROA not after: Wed 19 Jun 2024 21:13:28 +0000 asID: 396982 IP address blocks: 35.189.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fc:b7:12:a5:2c:49:62:a7:99:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:13:28 2024 GMT Not After : Jun 19 21:13:28 2024 GMT Subject: CN=3f6b4556-c288-4226-9f34-0c9392e76225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:69:74:96:94:6c:ee:a1:b3:63:de:f1:69: ff:5b:9d:af:3b:7c:23:fc:09:56:56:1e:5d:18:f4: 58:9d:20:d3:81:d8:b2:fa:5f:30:52:04:3f:2f:e6: c0:74:fb:f9:be:69:87:bc:07:f5:a8:0d:27:8a:72: 6a:14:b9:34:ee:ce:3f:a4:b1:a7:1e:63:a8:80:2f: 35:70:6c:00:57:cc:02:2b:05:b2:0f:7b:6d:84:95: bf:e2:ec:f8:e2:ff:f2:48:d3:24:a5:24:4b:59:1a: 77:8a:a7:c2:8e:f2:0a:a6:83:a9:7c:51:93:0c:ac: 10:56:e6:22:c5:47:0a:73:21:0f:ba:09:5a:59:e0: 3d:e4:8a:c1:e2:47:e2:c2:8d:ad:3a:c3:68:41:0c: 14:0a:2b:ab:90:8b:7d:eb:17:fa:4d:93:63:20:6e: 44:35:0f:51:d6:52:0e:b8:d9:ea:75:52:d3:0b:79: 96:f8:27:5a:c5:fb:54:b9:9c:68:ee:ae:6a:46:44: 8b:3e:7b:41:0d:01:e8:71:b6:ce:ec:69:04:5b:e6: d9:c1:8b:44:3a:46:a0:84:4b:9e:f0:01:43:b7:96: 16:98:7c:a1:e7:3c:86:26:3a:12:3c:b1:66:56:65: 10:c5:65:64:7e:24:cf:44:81:f6:23:76:46:50:d6: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:B8:DA:BD:E6:B9:39:BD:FC:D7:7B:25:D9:78:4F:7B:74:31:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:31:1d:1c:e6:cf:ed:9f:b5:7f:db:62:4f:f4:2b:5e:2a:0b: 26:7b:e5:c2:30:9e:53:d7:83:33:5a:78:6e:17:94:60:80:af: 5c:14:f7:d2:61:be:ea:f5:82:5d:f3:78:55:b8:15:7b:35:b4: 4b:24:ac:60:0b:fc:f4:b0:c8:b2:3d:01:36:88:bf:52:b8:6a: 9f:23:26:93:76:05:f3:5f:d1:f9:bd:bc:8f:d1:88:cf:0a:d3: 0f:89:1b:63:45:f7:8a:b2:68:f0:1b:c9:82:4c:92:10:43:fd: 4f:aa:50:bc:32:57:55:d9:4a:63:35:cb:b6:55:80:fa:f8:4d: 72:5d:a9:da:eb:c5:5b:db:c5:3e:b4:fe:75:91:72:cb:88:1d: 29:d8:b0:a3:de:38:3b:ec:e3:66:4c:45:2d:2c:86:78:bf:2e: e6:e7:f6:a5:49:36:08:c0:f7:41:b4:69:ac:91:90:c4:6d:7a: ad:aa:1a:f2:8d:1b:08:a3:d7:25:0f:d3:0c:64:36:bc:1a:75: b3:f2:3c:7d:8a:e3:34:7e:39:30:0e:eb:f6:57:2e:38:c2:98: 46:03:c0:51:0c:6b:12:3a:44:52:9b:7a:eb:52:e6:ed:03:4e: f2:c7:49:b8:a8:6a:70:a0:16:30:db:33:75:a0:b2:ec:71:30: 7d:fa:1f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/LcSpSxJYqeZtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTMyOFoXDTI0MDYxOTIxMTMyOFowLzEtMCsGA1UEAxMk M2Y2YjQ1NTYtYzI4OC00MjI2LTlmMzQtMGM5MzkyZTc2MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSNpdJaUbO6hs2Pe8Wn/W52vO3wj/AlWVh5d GPRYnSDTgdiy+l8wUgQ/L+bAdPv5vmmHvAf1qA0ninJqFLk07s4/pLGnHmOogC81 cGwAV8wCKwWyD3tthJW/4uz44v/ySNMkpSRLWRp3iqfCjvIKpoOpfFGTDKwQVuYi xUcKcyEPuglaWeA95IrB4kfiwo2tOsNoQQwUCiurkIt96xf6TZNjIG5ENQ9R1lIO uNnqdVLTC3mW+CdaxftUuZxo7q5qRkSLPntBDQHocbbO7GkEW+bZwYtEOkaghEue 8AFDt5YWmHyh5zyGJjoSPLFmVmUQxWVkfiTPRIH2I3ZGUNbAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIuuNq95rk5vfzXeyXZeE97dDFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEyMzkxN2QtNDYxZS0z MjkxLWE5YmUtMDgwM2U5ZDkwNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYxHRzmz+2ftX/bYk/0K14qCyZ75cIwnlPXgzNaeG4XlGCAr1wU99Jh vur1gl3zeFW4FXs1tEskrGAL/PSwyLI9ATaIv1K4ap8jJpN2BfNf0fm9vI/RiM8K 0w+JG2NF94qyaPAbyYJMkhBD/U+qULwyV1XZSmM1y7ZVgPr4TXJdqdrrxVvbxT60 /nWRcsuIHSnYsKPeODvs42ZMRS0shni/Lubn9qVJNgjA90G0aayRkMRteq2qGvKN Gwij1yUP0wxkNrwadbPyPH2K4zR+OTAO6/ZXLjjCmEYDwFEMaxI6RFKbeutS5u0D TvLHSbioanCgFjDbM3WgsuxxMH36H9M= -----END CERTIFICATE-----Generated at Mon May 6 01:57:54 2024 by rpki-client on console-ams.rpki-client.org