$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa File: afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa (raw, json) Hash identifier: QwmaVv5R6TF9QiJun8urTPLhjqa6DQ7CHQQH1dx4v6s= Subject key identifier: DA:88:3D:BE:8C:ED:8B:C5:E4:74:BC:D2:12:98:D0:2E:2B:A3:A7:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490F4230D2A5055353A00700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa Signing time: Thu 21 Mar 2024 21:50:50 +0000 ROA not before: Thu 21 Mar 2024 21:50:50 +0000 ROA not after: Wed 19 Jun 2024 21:50:50 +0000 asID: 396982 IP address blocks: 34.136.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0f:42:30:d2:a5:05:53:53:a0:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:50:50 2024 GMT Not After : Jun 19 21:50:50 2024 GMT Subject: CN=25ae23d7-aa71-4c1f-ba96-ba6c4179d7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:b5:be:a0:32:3a:05:90:5e:98:73:ab:5c: 58:cb:da:c0:43:29:a6:9b:f3:ca:5c:f7:49:01:aa: 93:26:52:2d:8b:5a:30:54:4b:79:a8:45:93:38:f4: 9f:3e:3f:85:10:3f:c7:ce:dd:41:7f:8e:8b:68:fa: 67:0f:3e:aa:66:c3:f5:b9:49:8e:02:30:02:f2:f5: dc:d3:e9:9c:e2:34:ce:26:71:f6:f8:8f:76:e2:a8: 64:b9:09:5f:af:1e:03:51:e4:fd:e4:db:1c:55:7b: 8d:4d:eb:d2:66:e4:8c:ac:3e:b2:92:5e:5b:f1:ea: ae:91:0f:f2:89:8d:0e:d0:b7:c2:32:3d:68:29:5b: fb:04:2b:09:6a:b0:ba:bf:72:6b:ef:1a:2a:70:8d: 6a:9d:e3:99:4c:05:5a:54:9a:2b:34:1b:30:3d:05: 0c:04:48:8c:d5:05:96:d4:f3:cd:d5:95:94:3a:d7: 7f:24:f5:1c:2a:26:e3:87:89:0f:ce:68:fe:76:1d: 9d:35:c7:b1:c4:3d:e4:f2:bc:67:ab:69:a5:e8:0c: 4f:2b:73:23:df:07:f1:11:3b:d5:e3:6c:c3:52:61: 17:b2:41:7c:8d:96:10:b1:e8:99:c4:3f:f5:cc:2d: af:64:8a:4f:b0:49:39:0c:25:86:d5:c4:a7:2c:6a: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:3D:BE:8C:ED:8B:C5:E4:74:BC:D2:12:98:D0:2E:2B:A3:A7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a3:db:89:46:bb:9a:87:f3:bd:42:ba:7f:61:75:50:e6:0e: 6c:fb:e5:fe:19:fc:53:1b:89:d3:94:ae:ee:91:a5:88:a0:be: 83:5e:11:79:c3:34:21:98:48:90:c2:10:81:e4:38:1a:db:2b: 3f:68:42:3f:5e:f2:b6:64:1d:41:cc:d7:be:69:4a:5d:11:95: 33:d3:36:94:d9:2c:ba:78:39:da:82:5d:ac:38:d2:4e:3d:33: 6d:68:93:4d:ec:60:77:00:b6:7e:88:3b:55:65:16:67:2f:d9: 07:82:35:97:e2:7d:65:14:da:d2:cb:22:d6:5f:73:a5:ed:15: f7:93:6d:9e:a0:84:b3:86:56:15:54:f2:84:b4:76:fe:3f:30: 72:49:a5:95:db:cf:f3:16:2d:5d:c9:9b:22:76:74:be:a3:48: e4:0c:98:8c:d4:36:c7:24:ca:09:01:b1:15:04:3b:8c:c4:be: a4:c0:61:70:a9:1f:b5:da:f3:ae:e2:24:31:e2:e5:bc:1b:00: c3:a4:da:99:e8:7b:73:3a:09:ad:eb:c8:d7:97:d0:c6:6a:18: 58:f3:46:0e:18:8b:86:ea:92:57:93:0b:2b:7f:44:9c:cc:40: 9f:bf:56:12:5e:ec:2d:3b:26:fd:00:ed:64:d0:7d:8e:3a:f3: db:21:6b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJD0Iw0qUFU1OgBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNTA1MFoXDTI0MDYxOTIxNTA1MFowLzEtMCsGA1UEAxMk MjVhZTIzZDctYWE3MS00YzFmLWJhOTYtYmE2YzQxNzlkN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlES1vqAyOgWQXphzq1xYy9rAQymmm/PKXPdJ AaqTJlIti1owVEt5qEWTOPSfPj+FED/Hzt1Bf46LaPpnDz6qZsP1uUmOAjAC8vXc 0+mc4jTOJnH2+I924qhkuQlfrx4DUeT95NscVXuNTevSZuSMrD6ykl5b8equkQ/y iY0O0LfCMj1oKVv7BCsJarC6v3Jr7xoqcI1qneOZTAVaVJorNBswPQUMBEiM1QWW 1PPN1ZWUOtd/JPUcKibjh4kPzmj+dh2dNcexxD3k8rxnq2ml6AxPK3Mj3wfxETvV 42zDUmEXskF8jZYQseiZxD/1zC2vZIpPsEk5DCWG1cSnLGrVjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqIPb6M7YvF5HS80hKY0C4ro6dhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZlMmFmZWItYTcxYi0z ZWZmLTg3NWQtMzk0ZTRiMWE5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIogQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqj24lGu5qH871Cun9hdVDmDmz75f4Z/FMbidOUru6RpYigvoNeEXnD NCGYSJDCEIHkOBrbKz9oQj9e8rZkHUHM175pSl0RlTPTNpTZLLp4OdqCXaw40k49 M21ok03sYHcAtn6IO1VlFmcv2QeCNZfifWUU2tLLItZfc6XtFfeTbZ6ghLOGVhVU 8oS0dv4/MHJJpZXbz/MWLV3JmyJ2dL6jSOQMmIzUNsckygkBsRUEO4zEvqTAYXCp H7Xa867iJDHi5bwbAMOk2pnoe3M6Ca3ryNeX0MZqGFjzRg4Yi4bqkleTCyt/RJzM QJ+/VhJe7C07Jv0A7WTQfY4689sha10= -----END CERTIFICATE-----Generated at Mon May 6 01:58:01 2024 by rpki-client on console-ams.rpki-client.org