$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d113cea-1917-3f19-94d6-5a887289add6.roa File: 9d113cea-1917-3f19-94d6-5a887289add6.roa (raw, json) Hash identifier: aylaUNp9DZVlXziGpfn/QRLxgXud/3c+4adPc9Lrj+Y= Subject key identifier: 2D:C6:3F:85:F7:AE:A0:9B:A5:BD:0D:CE:C8:2F:7F:59:1D:26:68:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584549045E90178555513A953180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d113cea-1917-3f19-94d6-5a887289add6.roa Signing time: Thu 21 Mar 2024 21:28:53 +0000 ROA not before: Thu 21 Mar 2024 21:28:53 +0000 ROA not after: Wed 19 Jun 2024 21:28:53 +0000 asID: 396982 IP address blocks: 35.198.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:04:5e:90:17:85:55:51:3a:95:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:28:53 2024 GMT Not After : Jun 19 21:28:53 2024 GMT Subject: CN=7ea86c30-88f1-44ac-984f-d41c9789d9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:88:c2:37:1b:ec:d2:63:e8:ba:d4:54:fa:7c: aa:bb:98:27:15:fd:93:d9:3c:59:27:b3:24:d5:03: 0b:40:33:e0:4a:c3:c6:10:c8:9d:1b:e4:5b:c7:cc: 36:5b:ef:f7:52:ea:65:2a:56:5a:c0:70:b5:7e:a1: d3:2c:45:95:d3:4d:68:09:ac:0d:d4:28:f7:11:7c: 72:96:ba:bd:37:59:e7:85:5c:80:32:3d:9d:ce:ff: 66:fc:a5:08:2b:ae:7b:1c:7d:5c:61:6d:5b:de:a2: 77:bb:2e:51:a5:a4:6f:e8:9b:19:8a:18:00:c3:59: 71:dd:37:0c:11:13:69:70:d8:d6:2e:58:92:5a:da: 2e:97:7f:f1:38:23:3b:48:b4:80:7a:ae:11:ea:81: 9c:73:60:d7:18:b9:33:14:d9:1f:49:13:a9:af:ff: 20:c1:99:e0:ec:36:0c:be:56:5e:89:1b:cb:d7:aa: e2:1b:4c:62:68:4e:8a:d3:88:df:07:fb:f2:4e:47: aa:40:f8:81:e8:49:5a:36:56:ba:52:66:e3:09:0c: 00:a5:27:55:7b:14:e1:2c:93:c0:2a:10:87:7b:73: ca:2d:d5:ef:a1:8e:11:d8:70:25:6d:79:d6:57:f0: 68:19:fa:de:41:f5:66:eb:c8:a5:73:c9:0b:5f:d8: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C6:3F:85:F7:AE:A0:9B:A5:BD:0D:CE:C8:2F:7F:59:1D:26:68:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d113cea-1917-3f19-94d6-5a887289add6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c7:80:c5:b8:c6:b6:49:99:06:f8:9d:47:d1:b5:f5:00:d0: 70:cb:74:33:fb:98:97:5a:4f:0d:58:85:99:9c:e4:9d:a2:a2: ff:cd:95:7f:7a:13:71:a6:15:5e:ec:43:b3:57:43:c3:e1:5d: e3:3e:1e:6d:df:90:52:47:d6:e4:6b:5f:b6:ac:6f:e1:cd:31: 34:1a:bb:c7:98:d1:ed:ca:b1:a8:ff:07:3a:70:9a:c3:af:41: b6:1f:0c:f9:3b:39:8c:88:2a:92:15:5f:49:f1:ef:26:28:4c: 9c:47:d2:da:3d:2f:ca:d5:01:8a:ad:07:4e:f5:63:08:0a:de: f4:59:f9:34:7b:55:ab:aa:3c:95:7a:b8:cb:2a:ce:ab:66:f6: c4:30:7c:3b:7d:27:fc:9f:84:86:20:83:59:a7:81:2c:bd:ff: 11:d4:c4:7b:05:69:8b:5a:ab:b6:38:32:64:bf:e6:1b:13:07: b7:08:29:41:d0:7a:f1:20:24:25:66:78:de:26:09:c0:a9:80: 0f:1f:f6:42:e4:51:8b:0d:9c:fa:7f:8b:6b:a2:5b:c8:b4:8a: c4:31:72:a5:73:f3:fe:9b:ba:ce:b7:5a:9a:a7:e9:6b:b4:93: 63:3f:c1:ea:29:aa:98:2d:99:c5:e5:28:84:0f:82:cc:83:f9: 11:de:fc:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJBF6QF4VVUTqVMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMjg1M1oXDTI0MDYxOTIxMjg1M1owLzEtMCsGA1UEAxMk N2VhODZjMzAtODhmMS00NGFjLTk4NGYtZDQxYzk3ODlkOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYjCNxvs0mPoutRU+nyqu5gnFf2T2TxZJ7Mk 1QMLQDPgSsPGEMidG+Rbx8w2W+/3UuplKlZawHC1fqHTLEWV001oCawN1Cj3EXxy lrq9N1nnhVyAMj2dzv9m/KUIK657HH1cYW1b3qJ3uy5RpaRv6JsZihgAw1lx3TcM ERNpcNjWLliSWtoul3/xOCM7SLSAeq4R6oGcc2DXGLkzFNkfSROpr/8gwZng7DYM vlZeiRvL16riG0xiaE6K04jfB/vyTkeqQPiB6ElaNla6UmbjCQwApSdVexThLJPA KhCHe3PKLdXvoY4R2HAlbXnWV/BoGfreQfVm68ilc8kLX9gOrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3GP4X3rqCbpb0Nzsgvf1kdJmgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWQxMTNjZWEtMTkxNy0z ZjE5LTk0ZDYtNWE4ODcyODlhZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTHgMW4xrZJmQb4nUfRtfUA0HDLdDP7mJdaTw1YhZmc5J2iov/NlX96 E3GmFV7sQ7NXQ8PhXeM+Hm3fkFJH1uRrX7asb+HNMTQau8eY0e3Ksaj/BzpwmsOv QbYfDPk7OYyIKpIVX0nx7yYoTJxH0to9L8rVAYqtB071YwgK3vRZ+TR7VauqPJV6 uMsqzqtm9sQwfDt9J/yfhIYgg1mngSy9/xHUxHsFaYtaq7Y4MmS/5hsTB7cIKUHQ evEgJCVmeN4mCcCpgA8f9kLkUYsNnPp/i2uiW8i0isQxcqVz8/6bus63Wpqn6Wu0 k2M/weopqpgtmcXlKIQPgsyD+RHe/KY= -----END CERTIFICATE-----Generated at Mon May 6 08:08:10 2024 by rpki-client on console-ams.rpki-client.org