$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa File: bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa (raw, json) Hash identifier: KJbh7FQaHT5GLVZaIU3PVBj0CR8EJjCD0aXVOQERtjY= Subject key identifier: 46:D0:58:46:C0:17:31:07:32:1F:7F:75:2D:46:0F:F2:25:B1:DB:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490F443D0B7315B6494B5E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa Signing time: Thu 21 Mar 2024 21:50:51 +0000 ROA not before: Thu 21 Mar 2024 21:50:51 +0000 ROA not after: Wed 19 Jun 2024 21:50:51 +0000 asID: 396982 IP address blocks: 34.158.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0f:44:3d:0b:73:15:b6:49:4b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:50:51 2024 GMT Not After : Jun 19 21:50:51 2024 GMT Subject: CN=421829d5-296f-4947-b097-51455bb3c146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:7e:5d:aa:aa:ab:3a:3d:9c:14:db:c7:65: 84:3e:1a:2d:de:0b:43:bf:dd:64:f3:1b:a4:9e:b2: 8d:66:43:1a:2e:f4:42:a4:61:d7:ff:b6:b1:bf:66: 8c:3e:16:47:e3:33:b2:2c:6f:5a:20:00:9f:72:49: 03:43:bd:c2:8b:90:1e:6e:63:7f:06:7e:d6:8a:bf: cb:50:7d:f3:2b:56:ad:82:d5:59:80:c2:4c:18:b4: 6e:a7:56:c7:d2:06:4e:19:e3:55:24:69:60:80:01: 36:f1:3d:c6:2b:30:a6:3d:86:78:c6:c2:26:05:9f: bd:dc:8e:1b:34:ed:88:13:55:ce:08:b7:ae:10:f2: 09:9f:39:e6:f7:13:40:3e:69:96:87:f7:f9:dd:89: 26:50:6a:ec:ee:3b:40:48:f8:78:81:12:6a:9b:40: 62:1c:b3:1b:c8:9f:04:91:32:66:7f:0b:40:58:ee: 1f:c5:3a:a9:04:9d:5a:91:57:9d:0c:c0:79:fa:f9: 5e:11:8a:cf:97:6d:05:f3:f2:c4:a8:ce:08:d6:35: 56:8c:2a:94:f1:ec:d5:4f:0d:ae:5f:d0:5f:85:7a: b1:c9:00:3a:d3:6a:4d:4b:44:15:0f:48:e2:c4:51: f9:7a:19:0d:e1:36:49:80:66:8c:7f:51:15:3c:08: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D0:58:46:C0:17:31:07:32:1F:7F:75:2D:46:0F:F2:25:B1:DB:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:85:ff:75:93:38:a1:ec:03:1e:38:63:c8:be:a9:6f:d2:54: e9:f0:de:3b:91:e8:cf:2d:61:8b:a6:9a:02:51:17:e2:e6:c1: 57:68:f3:75:c5:5e:1b:6a:a2:a8:8f:c3:d7:ba:dd:e7:b3:1d: 32:d9:bc:db:98:ac:68:01:15:c3:f4:61:bc:10:15:5d:1f:ae: 13:16:9d:7c:cb:4e:32:97:89:3e:19:a7:f4:a0:34:27:bf:44: 31:3e:12:32:60:e4:80:d3:87:96:c8:dd:5f:a5:99:59:f1:77: c8:8c:cf:d5:b4:56:3a:2a:69:2e:86:e8:a9:f5:46:60:09:f0: 21:55:91:05:2e:d9:86:61:1b:7b:8b:5a:ff:7b:68:86:16:0a: 4a:bd:00:c8:28:05:18:b3:ec:67:e8:14:67:20:ea:94:ae:e7: bd:34:90:6f:91:8b:d9:d9:e2:ff:db:e7:36:e8:bd:8a:d3:0b: 69:9e:82:d6:84:52:7e:a2:74:6a:49:33:c3:aa:b1:89:be:05: 1f:58:7a:e3:a0:84:b0:c2:57:ff:9e:cd:3e:a6:3d:25:b7:ef: 12:91:2c:eb:43:9a:1b:e4:9f:e4:97:63:47:20:49:ed:5e:be: f8:f7:71:db:57:28:78:6b:b6:7f:23:5a:d4:f2:c8:c1:57:7f: 4d:0f:c6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJD0Q9C3MVtklLXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNTA1MVoXDTI0MDYxOTIxNTA1MVowLzEtMCsGA1UEAxMk NDIxODI5ZDUtMjk2Zi00OTQ3LWIwOTctNTE0NTViYjNjMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjN+Xaqqqzo9nBTbx2WEPhot3gtDv91k8xuk nrKNZkMaLvRCpGHX/7axv2aMPhZH4zOyLG9aIACfckkDQ73Ci5AebmN/Bn7Wir/L UH3zK1atgtVZgMJMGLRup1bH0gZOGeNVJGlggAE28T3GKzCmPYZ4xsImBZ+93I4b NO2IE1XOCLeuEPIJnznm9xNAPmmWh/f53YkmUGrs7jtASPh4gRJqm0BiHLMbyJ8E kTJmfwtAWO4fxTqpBJ1akVedDMB5+vleEYrPl20F8/LEqM4I1jVWjCqU8ezVTw2u X9BfhXqxyQA602pNS0QVD0jixFH5ehkN4TZJgGaMf1EVPAjBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbQWEbAFzEHMh9/dS1GD/IlsdtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYwMjRhNjQtN2RjYS0z ZmQ0LWI5YjQtYzRkOTQ5NGZjMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIp78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuF/3WTOKHsAx44Y8i+qW/SVOnw3juR6M8tYYummgJRF+LmwVdo83XF XhtqoqiPw9e63eezHTLZvNuYrGgBFcP0YbwQFV0frhMWnXzLTjKXiT4Zp/SgNCe/ RDE+EjJg5IDTh5bI3V+lmVnxd8iMz9W0VjoqaS6G6Kn1RmAJ8CFVkQUu2YZhG3uL Wv97aIYWCkq9AMgoBRiz7GfoFGcg6pSu5700kG+Ri9nZ4v/b5zbovYrTC2megtaE Un6idGpJM8OqsYm+BR9YeuOghLDCV/+ezT6mPSW37xKRLOtDmhvkn+SXY0cgSe1e vvj3cdtXKHhrtn8jWtTyyMFXf00Pxps= -----END CERTIFICATE-----Generated at Sun May 5 15:49:59 2024 by rpki-client on console-ams.rpki-client.org