$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa File: aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa (raw, json) Hash identifier: R0afc7HDg/5MHqoKdkO9OZZbck89ude6Stg/bbkE8ws= Subject key identifier: 58:DB:B7:D0:E5:E0:D4:7F:38:67:54:60:7A:13:96:D2:E8:FD:86:DE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490A58BB6B37CDA83482CD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa Signing time: Thu 21 Mar 2024 21:40:56 +0000 ROA not before: Thu 21 Mar 2024 21:40:56 +0000 ROA not after: Wed 19 Jun 2024 21:40:56 +0000 asID: 396982 IP address blocks: 34.66.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0a:58:bb:6b:37:cd:a8:34:82:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:40:56 2024 GMT Not After : Jun 19 21:40:56 2024 GMT Subject: CN=73a94cdd-2c03-4f4e-a454-56ffb4b7e840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:e4:ed:8e:90:5b:50:1f:32:e5:98:17:fc: a8:cd:a4:bc:32:03:1e:61:d3:f6:30:f8:ea:54:c9: 06:9e:6e:19:cb:ae:84:73:89:a3:c7:03:91:0a:5e: 41:13:e4:e2:1e:37:76:2d:7a:bc:65:8f:49:fe:92: 5b:19:fb:2c:1c:fd:4f:02:6d:01:64:bd:19:f3:1c: b3:8f:2f:c4:aa:29:43:c5:d2:45:b3:f3:ab:f3:1a: 89:88:bc:e3:1c:e6:26:da:b6:41:b2:65:39:d8:78: 50:e8:f0:b9:1d:5f:f2:c3:64:6e:63:9f:dd:9f:f7: bb:20:15:c1:db:ca:18:04:87:99:da:11:f9:8d:f9: bf:63:cf:02:16:ab:a7:4d:05:98:65:9d:3a:82:2d: 2c:05:ec:da:8a:55:81:87:be:1d:8c:d6:a7:07:a4: 06:ff:1c:6e:17:07:70:d1:fc:c6:5b:3d:91:1e:dd: de:05:ec:ec:1b:b5:bd:ab:ee:c3:08:2e:cb:1c:09: 49:3c:0d:43:d3:a3:d3:ea:5d:9b:1e:15:ed:b1:6b: ab:19:f5:89:1e:f9:80:d5:3a:c4:b1:75:7a:76:e7: ba:0c:35:79:12:ae:5a:d9:bb:1f:a9:84:13:f7:f5: 16:18:6a:65:73:1d:dc:af:02:45:ae:5c:d5:a4:17: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:B7:D0:E5:E0:D4:7F:38:67:54:60:7A:13:96:D2:E8:FD:86:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5e:a3:bf:c2:8a:7d:62:a5:6f:78:28:c3:1d:67:73:14:36: 10:35:c8:f4:71:80:7e:51:06:8e:72:11:11:ee:02:54:eb:56: 7e:8b:7e:8e:f1:6c:67:22:4e:5a:3b:3f:55:c9:f6:00:5e:a1: c6:7d:37:53:44:ac:99:e3:27:f6:3a:36:ca:df:69:01:51:5a: b4:aa:39:64:84:aa:26:d5:6f:bf:cb:5c:03:98:7c:3d:e5:02: 25:82:32:5a:38:4c:a9:bd:d9:0a:64:d3:ec:ca:06:c1:17:dc: 1d:46:12:3a:24:50:98:cc:ad:98:7f:4a:31:f5:e3:6c:3f:9a: e3:db:dd:bd:26:1a:86:63:2e:e1:6d:d8:6e:ea:45:2e:2a:2c: 1e:61:aa:8a:3a:94:c9:53:2d:f9:dd:d2:1d:5f:2a:2d:87:4d: d3:04:5a:51:48:07:aa:bb:0a:eb:4a:d8:db:82:27:0c:6b:0a: 9e:2b:e3:29:63:6d:bc:75:ab:4d:96:f2:bf:0d:56:92:25:98: 87:10:66:d2:1a:0d:e0:b8:2b:5f:2d:65:c3:dc:ef:61:cc:16: d1:47:d4:bf:2c:73:32:2e:66:b3:d2:60:21:8a:17:19:8d:ee: 33:8f:b4:73:14:fe:31:0c:c7:99:19:f4:20:c0:fc:3f:16:b9: 6c:e3:13:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJCli7azfNqDSCzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDA1NloXDTI0MDYxOTIxNDA1NlowLzEtMCsGA1UEAxMk NzNhOTRjZGQtMmMwMy00ZjRlLWE0NTQtNTZmZmI0YjdlODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPHk7Y6QW1AfMuWYF/yozaS8MgMeYdP2MPjq VMkGnm4Zy66Ec4mjxwORCl5BE+TiHjd2LXq8ZY9J/pJbGfssHP1PAm0BZL0Z8xyz jy/EqilDxdJFs/Or8xqJiLzjHOYm2rZBsmU52HhQ6PC5HV/yw2RuY5/dn/e7IBXB 28oYBIeZ2hH5jfm/Y88CFqunTQWYZZ06gi0sBezailWBh74djNanB6QG/xxuFwdw 0fzGWz2RHt3eBezsG7W9q+7DCC7LHAlJPA1D06PT6l2bHhXtsWurGfWJHvmA1TrE sXV6due6DDV5Eq5a2bsfqYQT9/UWGGplcx3crwJFrlzVpBfIsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjbt9Dl4NR/OGdUYHoTltLo/YbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzZjcyOGMtMmI1Zi0z M2NjLWE3ODYtZjVhOTMzM2FjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxeo7/Cin1ipW94KMMdZ3MUNhA1yPRxgH5RBo5yERHuAlTrVn6Lfo7x bGciTlo7P1XJ9gBeocZ9N1NErJnjJ/Y6NsrfaQFRWrSqOWSEqibVb7/LXAOYfD3l AiWCMlo4TKm92Qpk0+zKBsEX3B1GEjokUJjMrZh/SjH142w/muPb3b0mGoZjLuFt 2G7qRS4qLB5hqoo6lMlTLfnd0h1fKi2HTdMEWlFIB6q7CutK2NuCJwxrCp4r4ylj bbx1q02W8r8NVpIlmIcQZtIaDeC4K18tZcPc72HMFtFH1L8sczIuZrPSYCGKFxmN 7jOPtHMU/jEMx5kZ9CDA/D8WuWzjE2w= -----END CERTIFICATE-----Generated at Sun May 5 15:49:48 2024 by rpki-client on console-ams.rpki-client.org