$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa File: a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa (raw, json) Hash identifier: qLRkLlA/WciLp8D7AywqYEtKi/GhwPtQo+W72uiFeRo= Subject key identifier: F5:83:7C:7A:FA:3B:C2:62:28:A1:3E:FD:0F:66:EB:81:D4:88:E4:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490A2C3534B19FD433D65580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa Signing time: Thu 21 Mar 2024 21:40:35 +0000 ROA not before: Thu 21 Mar 2024 21:40:35 +0000 ROA not after: Wed 19 Jun 2024 21:40:35 +0000 asID: 396982 IP address blocks: 34.85.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0a:2c:35:34:b1:9f:d4:33:d6:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:40:35 2024 GMT Not After : Jun 19 21:40:35 2024 GMT Subject: CN=68813820-9989-40ed-ba16-a5283e324142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f0:b9:f7:e2:c4:53:43:57:0b:4f:34:50:52: 22:aa:6a:48:58:92:e2:5d:1d:e8:a2:2f:82:21:43: 9a:f1:e0:ae:d6:b4:7f:89:c1:11:23:fe:5c:e5:f8: 2a:84:40:77:66:f2:89:06:56:cf:4b:b4:5f:e4:ec: 5b:c3:71:45:af:55:3c:3c:d1:15:19:ba:04:66:a1: 24:ec:87:c9:cc:e7:a5:3d:7c:94:c7:ca:fb:21:03: 98:66:a4:4e:11:d0:61:79:54:de:36:66:69:12:93: 42:aa:47:7c:91:b4:49:30:cb:3f:d4:ac:50:9c:ef: 1b:eb:0b:9e:83:ab:77:80:3e:87:14:b6:51:7c:d8: 3b:00:03:b0:80:3f:8e:ae:67:91:27:99:9b:41:d5: 43:29:6f:0e:16:73:8a:e1:a0:4c:1a:cf:28:a4:ab: 59:61:b8:59:5a:07:67:42:c7:14:3e:ec:e8:85:fe: 3e:6b:59:70:ad:99:e2:1d:03:6d:4a:39:e4:ae:08: ea:c1:2b:a9:f0:58:26:84:0c:ac:10:9e:75:eb:24: 9d:64:d3:26:56:72:3f:9c:dd:3c:54:10:7c:8c:6a: a0:54:cc:7d:5d:26:2d:3d:3a:ac:e5:2b:3d:63:c7: b1:72:9d:cf:f7:4f:cb:43:f4:0c:5e:5d:8c:dc:85: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:83:7C:7A:FA:3B:C2:62:28:A1:3E:FD:0F:66:EB:81:D4:88:E4:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:94:8a:01:b1:6d:4e:c9:e0:1d:6e:b2:31:7a:f3:a6:cc:14: 58:da:58:c3:e4:2b:98:fd:30:51:c5:1f:4e:8a:8d:9e:62:21: de:1b:f6:62:c3:e4:36:ed:07:16:81:51:83:0b:e8:58:22:a7: 30:ab:dc:5b:1b:59:87:fc:ac:1e:39:e0:f3:97:30:17:36:70: 67:32:fe:19:ab:d2:98:99:d6:19:92:56:a3:a9:35:a6:15:22: 65:d5:5c:a2:6e:df:27:9b:34:3d:38:69:c4:48:f0:0f:a3:ba: 56:7a:88:81:e8:f4:30:da:ef:db:61:d2:cb:da:6f:f2:c2:a7: a2:fe:08:dc:0f:84:f3:ab:da:c0:9f:9a:9d:7c:1d:11:54:de: c4:39:b4:4e:6f:ef:4e:c7:51:82:43:00:1b:7e:3f:04:01:fe: 22:64:cb:fe:a3:20:44:eb:d9:38:81:7c:92:4c:48:66:ff:1b: 97:87:2a:a3:3e:69:88:47:52:f1:f4:47:0d:96:7e:8b:09:d6: 9f:97:12:de:78:a8:ba:46:b2:b6:3e:39:e1:13:ed:8e:70:f9: 6f:0c:ed:26:cb:a7:27:63:af:ad:f5:ce:79:4d:ee:68:db:57: 59:f3:dc:91:9f:03:04:33:4e:66:b1:2e:8e:70:ca:ed:9c:cf: 23:93:78:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJCiw1NLGf1DPWVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDAzNVoXDTI0MDYxOTIxNDAzNVowLzEtMCsGA1UEAxMk Njg4MTM4MjAtOTk4OS00MGVkLWJhMTYtYTUyODNlMzI0MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPC59+LEU0NXC080UFIiqmpIWJLiXR3ooi+C IUOa8eCu1rR/icERI/5c5fgqhEB3ZvKJBlbPS7Rf5Oxbw3FFr1U8PNEVGboEZqEk 7IfJzOelPXyUx8r7IQOYZqROEdBheVTeNmZpEpNCqkd8kbRJMMs/1KxQnO8b6wue g6t3gD6HFLZRfNg7AAOwgD+OrmeRJ5mbQdVDKW8OFnOK4aBMGs8opKtZYbhZWgdn QscUPuzohf4+a1lwrZniHQNtSjnkrgjqwSup8FgmhAysEJ516ySdZNMmVnI/nN08 VBB8jGqgVMx9XSYtPTqs5Ss9Y8excp3P90/LQ/QMXl2M3IXlWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWDfHr6O8JiKKE+/Q9m64HUiOT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTJjZmM2YTctMGNlMS0z ODE2LTg4ODAtZDQ1MGNiNGEzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWUigGxbU7J4B1usjF686bMFFjaWMPkK5j9MFHFH06KjZ5iId4b9mLD 5DbtBxaBUYML6FgipzCr3FsbWYf8rB454POXMBc2cGcy/hmr0piZ1hmSVqOpNaYV ImXVXKJu3yebND04acRI8A+julZ6iIHo9DDa79th0svab/LCp6L+CNwPhPOr2sCf mp18HRFU3sQ5tE5v707HUYJDABt+PwQB/iJky/6jIETr2TiBfJJMSGb/G5eHKqM+ aYhHUvH0Rw2WfosJ1p+XEt54qLpGsrY+OeET7Y5w+W8M7SbLpydjr631znlN7mjb V1nz3JGfAwQzTmaxLo5wyu2czyOTeJA= -----END CERTIFICATE-----Generated at Sun May 5 15:35:41 2024 by rpki-client on console-fra.rpki-client.org