$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9de16116-a453-36b8-a6d2-189f2f7a0484.roa File: 9de16116-a453-36b8-a6d2-189f2f7a0484.roa (raw, json) Hash identifier: +NeS2maVfVOUXWoQkr67zXrDOdHVEUNqxsVZfvtU6RE= Subject key identifier: 67:AA:72:C1:10:C7:91:C4:A5:1A:85:43:9F:E4:1C:12:95:D3:61:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490FB74DB53B085959A4FC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9de16116-a453-36b8-a6d2-189f2f7a0484.roa Signing time: Thu 21 Mar 2024 21:51:45 +0000 ROA not before: Thu 21 Mar 2024 21:51:45 +0000 ROA not after: Wed 19 Jun 2024 21:51:45 +0000 asID: 396982 IP address blocks: 35.184.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0f:b7:4d:b5:3b:08:59:59:a4:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:51:45 2024 GMT Not After : Jun 19 21:51:45 2024 GMT Subject: CN=36b1cb23-ba52-42e3-bcc7-cd888e7a1875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:a3:c0:50:e3:d5:03:7f:84:d0:67:51:e1: d0:94:ea:52:49:77:2b:36:f7:4e:af:cc:7d:32:54: 0b:09:bc:e1:48:db:f6:24:47:de:e4:a8:8e:20:90: 43:bd:f8:48:6e:82:c5:be:26:c5:3b:2e:f8:70:0d: 23:08:59:14:b3:3f:12:f8:2a:2c:8b:0a:14:00:b0: 96:9f:68:df:7c:97:0f:5e:58:e4:7f:1e:16:4e:33: c7:21:b1:39:1d:bc:6d:fb:a8:66:d3:9e:7d:cd:33: 61:eb:74:5e:91:72:03:1b:f5:6c:1a:36:b9:35:12: 20:bf:07:61:6c:66:27:bb:1a:c5:43:91:a1:b9:51: 56:a6:cc:5d:e9:a9:c7:f6:9c:37:a6:89:69:e9:04: 6e:83:ae:b7:04:40:5c:9c:98:6f:b2:b1:23:8e:46: a3:a0:db:99:70:c2:90:e4:df:ba:03:08:0d:e7:96: 9a:87:a0:7c:39:b3:ba:21:d6:56:d0:a8:e1:56:04: 68:e2:f6:f5:0c:5d:76:23:84:85:5e:d0:96:81:e2: 47:df:90:89:ea:80:a7:c4:f6:e4:02:b5:b2:00:a8: f6:08:2e:96:94:58:62:c4:d3:94:76:09:a9:29:ec: 97:0a:12:4e:45:0e:0f:43:11:94:78:2d:c6:4d:59: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AA:72:C1:10:C7:91:C4:A5:1A:85:43:9F:E4:1C:12:95:D3:61:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9de16116-a453-36b8-a6d2-189f2f7a0484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.184.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a6:74:e7:41:fb:80:81:43:3f:54:31:32:db:ad:25:67:8e: a9:f6:34:9f:a8:5c:77:4c:ef:db:62:7d:2c:f9:e4:67:cf:8b: 97:d0:74:43:d9:b8:d8:76:7f:a4:b2:5f:f2:cf:f2:cd:46:be: af:03:7e:ca:26:91:69:92:5e:93:10:5d:72:65:7c:b5:41:cd: 29:a3:3b:8e:d2:c1:61:af:c9:cc:d3:1d:1e:36:ff:95:5c:76: d6:cf:c5:c8:63:32:fd:a2:f9:27:b1:7a:63:c8:da:bf:de:ac: 29:07:11:02:70:af:73:8e:70:85:3f:69:3b:aa:f4:58:0e:56: 1b:2c:be:37:cd:5a:64:2d:fd:d5:81:e0:30:3e:17:74:4b:76: 60:fb:e4:e1:51:4b:64:6d:31:10:66:34:b9:04:24:62:3d:5b: 09:fa:d8:5a:9b:4d:e1:f5:c4:b7:96:24:fa:35:e4:3b:92:28: ee:d2:d5:12:13:8d:34:d5:52:73:e6:3c:7b:03:49:e5:b5:de: f1:77:c2:90:67:d3:70:58:07:d6:4a:12:b8:74:12:14:80:64: 69:dd:ce:a2:1f:18:e6:7e:04:38:c4:78:30:a1:72:26:27:75: 16:f0:90:82:7b:d8:13:a3:4a:b0:96:7a:a5:e5:cc:c3:e8:25: 57:a9:fc:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJD7dNtTsIWVmk/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNTE0NVoXDTI0MDYxOTIxNTE0NVowLzEtMCsGA1UEAxMk MzZiMWNiMjMtYmE1Mi00MmUzLWJjYzctY2Q4ODhlN2ExODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5GjwFDj1QN/hNBnUeHQlOpSSXcrNvdOr8x9 MlQLCbzhSNv2JEfe5KiOIJBDvfhIboLFvibFOy74cA0jCFkUsz8S+CosiwoUALCW n2jffJcPXljkfx4WTjPHIbE5Hbxt+6hm0559zTNh63RekXIDG/VsGja5NRIgvwdh bGYnuxrFQ5GhuVFWpsxd6anH9pw3polp6QRug663BEBcnJhvsrEjjkajoNuZcMKQ 5N+6AwgN55aah6B8ObO6IdZW0KjhVgRo4vb1DF12I4SFXtCWgeJH35CJ6oCnxPbk ArWyAKj2CC6WlFhixNOUdgmpKeyXChJORQ4PQxGUeC3GTVkK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeqcsEQx5HEpRqFQ5/kHBKV02EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWRlMTYxMTYtYTQ1My0z NmI4LWE2ZDItMTg5ZjJmN2EwNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+mdOdB+4CBQz9UMTLbrSVnjqn2NJ+oXHdM79tifSz55GfPi5fQdEPZ uNh2f6SyX/LP8s1Gvq8DfsomkWmSXpMQXXJlfLVBzSmjO47SwWGvyczTHR42/5Vc dtbPxchjMv2i+SexemPI2r/erCkHEQJwr3OOcIU/aTuq9FgOVhssvjfNWmQt/dWB 4DA+F3RLdmD75OFRS2RtMRBmNLkEJGI9Wwn62FqbTeH1xLeWJPo15DuSKO7S1RIT jTTVUnPmPHsDSeW13vF3wpBn03BYB9ZKErh0EhSAZGndzqIfGOZ+BDjEeDChciYn dRbwkIJ72BOjSrCWeqXlzMPoJVep/DY= -----END CERTIFICATE-----Generated at Sun May 5 15:49:41 2024 by rpki-client on console-ams.rpki-client.org