$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8f60a9-0caa-3ebf-95aa-97d6d55b3c9e.roa File: ae8f60a9-0caa-3ebf-95aa-97d6d55b3c9e.roa (raw, json) Hash identifier: vgtWlnWjvG2KgExOTHdmHdcGSDfMNfXCID9QmD7WHV0= Subject key identifier: A0:1E:04:4D:57:A4:C1:A6:3B:A8:13:7D:FC:A0:B8:C2:4C:A3:7B:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584549041ADA6FC3883B0AEA2D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8f60a9-0caa-3ebf-95aa-97d6d55b3c9e.roa Signing time: Thu 21 Mar 2024 21:28:21 +0000 ROA not before: Thu 21 Mar 2024 21:28:21 +0000 ROA not after: Wed 19 Jun 2024 21:28:21 +0000 asID: 396982 IP address blocks: 34.76.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:04:1a:da:6f:c3:88:3b:0a:ea:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:28:21 2024 GMT Not After : Jun 19 21:28:21 2024 GMT Subject: CN=82405380-c441-4dc2-9144-4eae1ebd9f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:60:35:a6:c7:8a:59:ba:c3:0a:35:fe:08: f4:b9:db:45:33:dc:75:fd:a4:14:1c:71:c6:56:f5: 7b:af:40:ce:a1:51:20:37:cc:45:7f:48:34:84:c4: 60:24:01:67:71:88:f2:59:80:56:48:17:b8:77:55: ba:7b:82:62:8f:a5:4d:a7:5e:a2:0a:0d:7b:09:61: f2:83:d8:e8:30:b4:07:ba:5f:38:71:4c:4b:64:13: 1f:97:97:ad:6c:68:30:e7:ba:e5:2b:7c:65:cb:f4: b2:ec:f6:4e:84:7d:b9:5a:25:94:df:9a:bf:0b:c7: dd:72:a8:a0:26:94:9d:99:f2:56:98:dc:ef:4f:47: 14:7a:3e:29:6e:2b:89:0d:e9:24:74:55:4a:1e:77: 1b:50:a2:e5:de:e2:9c:a7:a3:6c:7f:87:2c:a2:63: 06:45:03:d2:fc:fa:ab:80:1f:f0:18:76:f6:9f:b2: bf:0f:12:50:9c:d4:d5:2b:bb:9b:f9:10:6f:11:7d: 29:7b:d6:dd:89:28:94:63:14:d1:b4:c8:5a:c9:c8: 22:b8:cf:8d:de:ac:cb:1f:45:a9:8b:93:ba:91:c6: 22:46:8b:c4:b6:f0:23:9a:06:64:b2:34:34:11:77: fe:58:da:84:b4:6e:21:b3:b8:f9:4a:4d:5a:df:b5: be:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1E:04:4D:57:A4:C1:A6:3B:A8:13:7D:FC:A0:B8:C2:4C:A3:7B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8f60a9-0caa-3ebf-95aa-97d6d55b3c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d2:23:12:36:10:4e:63:f6:75:d8:03:34:9b:03:ab:65:f5: 98:f2:55:d2:02:87:38:f7:a9:28:67:44:80:25:c0:ad:d0:3f: 09:d0:72:6f:a3:63:d6:bd:bb:85:9f:22:ae:8e:f3:da:59:99: cc:aa:31:e5:59:f3:bc:3a:bb:e8:80:72:60:25:4f:c0:fe:34: 29:f6:b4:11:1b:10:04:6c:6e:db:46:dd:64:88:b7:2e:e2:ac: 48:96:50:32:54:37:59:42:45:aa:54:67:85:3b:37:a8:a0:b2: 24:ce:50:20:0b:2a:30:2b:f7:95:84:55:9f:a8:0a:34:82:ab: d3:c3:52:3f:60:9c:e2:eb:7f:fe:fb:b0:4d:45:20:26:6a:fa: 20:37:eb:35:08:77:5a:8a:d0:de:7c:fc:c6:a3:c8:ab:d2:fb: 87:33:04:c0:e1:ba:63:01:20:65:96:f5:34:47:c8:ce:36:6b: 55:e1:e3:15:60:52:97:ad:e7:d8:14:b0:e8:39:70:20:cf:1d: 52:a9:e5:06:0b:bb:6a:8f:2a:b1:02:7d:f0:e7:8f:eb:87:ee: 66:41:6a:30:db:43:d6:52:5c:24:31:09:94:94:6a:f6:a3:37: 32:45:e0:04:c3:df:d4:c7:9f:1f:69:49:53:17:73:fd:b5:1e: 84:d9:dc:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJBBrab8OIOwrqLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMjgyMVoXDTI0MDYxOTIxMjgyMVowLzEtMCsGA1UEAxMk ODI0MDUzODAtYzQ0MS00ZGMyLTkxNDQtNGVhZTFlYmQ5Zjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoZgNabHilm6wwo1/gj0udtFM9x1/aQUHHHG VvV7r0DOoVEgN8xFf0g0hMRgJAFncYjyWYBWSBe4d1W6e4Jij6VNp16iCg17CWHy g9joMLQHul84cUxLZBMfl5etbGgw57rlK3xly/Sy7PZOhH25WiWU35q/C8fdcqig JpSdmfJWmNzvT0cUej4pbiuJDekkdFVKHncbUKLl3uKcp6Nsf4csomMGRQPS/Pqr gB/wGHb2n7K/DxJQnNTVK7ub+RBvEX0pe9bdiSiUYxTRtMhaycgiuM+N3qzLH0Wp i5O6kcYiRovEtvAjmgZksjQ0EXf+WNqEtG4hs7j5Sk1a37W+HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAeBE1XpMGmO6gTffyguMJMo3thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWU4ZjYwYTktMGNhYS0z ZWJmLTk1YWEtOTdkNmQ1NWIzYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbSIxI2EE5j9nXYAzSbA6tl9ZjyVdIChzj3qShnRIAlwK3QPwnQcm+j Y9a9u4WfIq6O89pZmcyqMeVZ87w6u+iAcmAlT8D+NCn2tBEbEARsbttG3WSIty7i rEiWUDJUN1lCRapUZ4U7N6igsiTOUCALKjAr95WEVZ+oCjSCq9PDUj9gnOLrf/77 sE1FICZq+iA36zUId1qK0N58/MajyKvS+4czBMDhumMBIGWW9TRHyM42a1Xh4xVg Upet59gUsOg5cCDPHVKp5QYLu2qPKrECffDnj+uH7mZBajDbQ9ZSXCQxCZSUavaj NzJF4ATD39THnx9pSVMXc/21HoTZ3M0= -----END CERTIFICATE-----Generated at Mon May 6 09:12:59 2024 by rpki-client on console-fra.rpki-client.org