$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: ov0V4WixQxrlCNNpBULTLITrGel2QFiz2+uDTtTs8Ic= Subject key identifier: C5:0B:63:13:56:80:A6:8B:60:7A:CE:FE:BE:D7:86:34:B9:61:31:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490E9A92CF573AF915D0E080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Thu 21 Mar 2024 21:49:31 +0000 ROA not before: Thu 21 Mar 2024 21:49:31 +0000 ROA not after: Wed 19 Jun 2024 21:49:31 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0e:9a:92:cf:57:3a:f9:15:d0:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:49:31 2024 GMT Not After : Jun 19 21:49:31 2024 GMT Subject: CN=cdcb4b33-a55a-4dcd-a046-f83dc04123ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:24:bb:25:ba:65:a2:a6:de:59:6e:23:48:ad: 06:91:d1:03:43:0d:6c:b5:38:86:3d:53:e2:b6:f1: 7d:36:55:c1:6b:b7:ec:da:98:e5:62:34:e5:e3:9c: d2:73:df:16:77:86:30:3d:76:09:d3:39:97:75:a9: 6e:0e:c4:ac:67:3d:d1:46:81:8a:10:f3:ef:0c:df: 04:e9:d2:1a:17:bf:2d:bd:94:59:72:3b:b9:97:98: 5b:6b:62:12:5d:b1:04:27:14:42:63:19:86:6b:e8: cf:4e:8e:93:38:c2:05:b4:05:a1:75:77:0f:5b:0a: 6e:3d:b1:1b:dc:fb:28:eb:a4:82:9c:fd:9d:70:84: 9a:aa:37:b5:79:1e:b9:a2:df:0f:3c:a8:21:d6:30: 6b:22:4e:9e:f2:58:f7:db:31:f6:16:e9:65:65:13: 44:53:bb:f8:e7:ac:10:de:4e:cb:e9:c3:fa:84:f8: 2c:7b:51:47:c2:1e:ff:f8:53:2b:42:47:f8:3d:3a: df:f4:c2:bb:fd:80:75:bf:db:e4:09:43:19:f7:ba: 25:8d:90:9b:25:3d:c3:d2:5c:bc:a3:2b:7d:4d:24: 04:21:15:78:c1:f7:a1:cb:13:38:10:e2:51:e0:61: d1:de:60:23:f3:86:fc:e6:bf:5c:1d:44:79:46:20: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:63:13:56:80:A6:8B:60:7A:CE:FE:BE:D7:86:34:B9:61:31:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ae:10:0e:00:31:dc:12:4f:13:41:32:db:50:a1:7d:7a:b9: fd:7d:49:86:3a:a0:c2:13:e8:b5:0a:f8:1f:5b:ae:ff:e2:48: 7a:3e:47:1a:5f:69:ef:61:17:58:85:ab:d7:05:e2:71:c6:ad: 17:cb:5b:8a:2f:3a:ae:32:d9:82:0d:6a:5d:9a:fd:58:35:6f: 15:56:d7:38:22:f9:c5:7d:f7:c1:1c:5e:ba:f3:08:06:b9:1b: cf:a8:e4:00:d6:7f:79:93:a6:56:23:aa:bc:0c:8b:10:e2:9b: e8:1d:40:43:3b:c5:1c:73:0b:3f:04:93:79:dc:e2:94:53:a9: a7:a7:4f:73:b2:86:71:56:57:f7:fc:68:08:92:40:d7:df:4f: ce:df:12:10:00:ea:d7:25:db:fe:a8:6c:95:3a:db:07:b4:b1: b8:d7:89:a7:ad:a6:a5:d0:39:79:d6:4f:d1:a2:c2:b0:ee:25: 50:42:51:db:b7:84:75:2f:23:45:59:b0:45:89:ab:2e:3d:c8: 6b:b0:d1:57:f0:28:4a:ac:72:70:3b:48:98:25:02:d3:d0:42: 78:e2:65:d2:e1:65:07:4a:72:77:79:b9:66:b6:65:b8:a9:ef: 94:b1:42:7d:1a:df:ae:da:72:b6:bc:82:fa:63:d8:98:02:83: 22:dc:f2:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDpqSz1c6+RXQ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDkzMVoXDTI0MDYxOTIxNDkzMVowLzEtMCsGA1UEAxMk Y2RjYjRiMzMtYTU1YS00ZGNkLWEwNDYtZjgzZGMwNDEyM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCS7JbploqbeWW4jSK0GkdEDQw1stTiGPVPi tvF9NlXBa7fs2pjlYjTl45zSc98Wd4YwPXYJ0zmXdaluDsSsZz3RRoGKEPPvDN8E 6dIaF78tvZRZcju5l5hba2ISXbEEJxRCYxmGa+jPTo6TOMIFtAWhdXcPWwpuPbEb 3Pso66SCnP2dcISaqje1eR65ot8PPKgh1jBrIk6e8lj32zH2FullZRNEU7v456wQ 3k7L6cP6hPgse1FHwh7/+FMrQkf4PTrf9MK7/YB1v9vkCUMZ97oljZCbJT3D0ly8 oyt9TSQEIRV4wfehyxM4EOJR4GHR3mAj84b85r9cHUR5RiAvuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMULYxNWgKaLYHrO/r7XhjS5YTE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKuEA4AMdwSTxNBMttQoX16uf19SYY6oMIT6LUK+B9brv/iSHo+Rxpf ae9hF1iFq9cF4nHGrRfLW4ovOq4y2YINal2a/Vg1bxVW1zgi+cV998EcXrrzCAa5 G8+o5ADWf3mTplYjqrwMixDim+gdQEM7xRxzCz8Ek3nc4pRTqaenT3OyhnFWV/f8 aAiSQNffT87fEhAA6tcl2/6obJU62we0sbjXiaetpqXQOXnWT9GiwrDuJVBCUdu3 hHUvI0VZsEWJqy49yGuw0VfwKEqscnA7SJglAtPQQnjiZdLhZQdKcnd5uWa2Zbip 75SxQn0a367acra8gvpj2JgCgyLc8iM= -----END CERTIFICATE-----Generated at Mon May 6 01:58:07 2024 by rpki-client on console-ams.rpki-client.org