$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa File: ca68969c-6bab-3a18-b3f8-70281e402c94.roa (raw, json) Hash identifier: nKS4bK3zQCngP42qREKj+O7SS4UG/9vuZEeZWGeQfpw= Subject key identifier: C5:A1:FF:09:2A:16:14:04:99:61:ED:39:16:06:A8:13:0A:A8:D1:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584549057483C005C81FB80B0FC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa Signing time: Thu 21 Mar 2024 21:31:05 +0000 ROA not before: Thu 21 Mar 2024 21:31:05 +0000 ROA not after: Wed 19 Jun 2024 21:31:05 +0000 asID: 396982 IP address blocks: 34.65.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:05:74:83:c0:05:c8:1f:b8:0b:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:31:05 2024 GMT Not After : Jun 19 21:31:05 2024 GMT Subject: CN=f2a4c41d-f437-4c9e-bc14-8ade88dba234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:e4:ce:32:4c:f7:f9:23:9f:36:8e:af:0c: 22:8f:3d:c5:75:d1:05:74:71:33:90:2d:26:8b:12: 24:68:b7:b9:58:ba:a5:60:4c:c1:ad:d8:41:bb:26: 45:0b:94:7f:bb:3e:57:c6:92:d5:d5:09:de:d3:44: 08:2e:68:03:de:91:40:8c:d1:c8:bc:d7:ac:7b:3c: ef:16:d6:51:d7:44:4d:a8:74:13:76:70:43:d0:af: 33:81:27:0e:92:71:1d:b0:04:d8:b1:e7:40:d6:8b: 28:01:d9:f1:d6:48:c0:f9:c2:70:52:16:5c:da:14: 23:ca:74:e0:ae:a0:3a:92:27:e3:56:83:d6:02:88: f7:e1:a8:96:e2:63:e4:68:d6:b6:7c:b7:1c:1c:a7: c7:50:91:d1:53:59:49:f6:84:d6:8f:d8:1a:2d:43: 9a:a6:6f:a0:3e:ae:b7:b0:0c:99:78:58:ae:80:55: b4:07:6d:cb:ea:20:81:a6:29:a3:70:00:38:de:d0: e6:a5:29:2b:8e:5f:6f:bd:7c:b6:82:59:15:14:4c: 9b:4c:cd:7c:50:8b:eb:f4:51:14:9b:eb:de:1e:4d: 87:36:d1:31:58:16:70:46:bf:11:e7:94:92:ae:8d: dc:80:04:5a:1a:76:54:5f:5c:08:4c:7c:5f:9c:7d: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A1:FF:09:2A:16:14:04:99:61:ED:39:16:06:A8:13:0A:A8:D1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:82:f9:21:ab:a2:4e:68:70:22:dc:44:2d:e6:47:fa:59:79: bc:18:7f:a8:ac:06:d3:fc:f8:1f:f7:e3:8e:64:9e:10:26:c3: 02:69:6e:d8:d5:6c:d8:aa:56:13:35:f8:22:8f:b8:54:ef:76: c6:a4:94:9a:d5:f3:a1:09:61:e6:78:62:90:8b:80:ca:2d:53: 07:8d:8e:45:be:81:37:f3:aa:72:25:49:e7:b5:86:7b:15:98: 55:0e:4b:43:c6:bb:f2:21:72:9b:6c:65:e8:ea:7b:e3:fe:85: 00:c6:26:7a:b1:6d:34:d7:b9:58:04:75:27:c1:7d:08:04:12: 6b:05:09:b2:86:7b:fc:31:73:91:73:f0:8a:0b:b9:97:21:23: b9:1f:b1:13:9c:62:23:4b:52:34:fe:cb:2e:83:36:17:b2:d4: 43:55:e6:e2:97:ce:df:78:89:94:10:da:d5:54:01:f6:5e:16: aa:fe:e1:cf:b5:17:b6:f5:47:26:9f:44:90:db:bc:82:39:d9: 98:6f:21:e7:22:74:f1:8d:f5:30:61:d5:5d:16:42:69:95:60: a5:8f:27:b0:26:88:7e:b8:4d:5d:73:46:1e:53:cb:da:c9:5c: 36:69:b3:f7:2e:c1:6f:60:10:d0:1c:ca:94:89:fa:ce:7e:73: 05:5a:ff:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJBXSDwAXIH7gLD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMzEwNVoXDTI0MDYxOTIxMzEwNVowLzEtMCsGA1UEAxMk ZjJhNGM0MWQtZjQzNy00YzllLWJjMTQtOGFkZTg4ZGJhMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1PkzjJM9/kjnzaOrwwijz3FddEFdHEzkC0m ixIkaLe5WLqlYEzBrdhBuyZFC5R/uz5XxpLV1Qne00QILmgD3pFAjNHIvNesezzv FtZR10RNqHQTdnBD0K8zgScOknEdsATYsedA1osoAdnx1kjA+cJwUhZc2hQjynTg rqA6kifjVoPWAoj34aiW4mPkaNa2fLccHKfHUJHRU1lJ9oTWj9gaLUOapm+gPq63 sAyZeFiugFW0B23L6iCBpimjcAA43tDmpSkrjl9vvXy2glkVFEybTM18UIvr9FEU m+veHk2HNtExWBZwRr8R55SSro3cgARaGnZUX1wITHxfnH3w+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWh/wkqFhQEmWHtORYGqBMKqNGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E2ODk2OWMtNmJhYi0z YTE4LWIzZjgtNzAyODFlNDAyYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSC+SGrok5ocCLcRC3mR/pZebwYf6isBtP8+B/3445knhAmwwJpbtjV bNiqVhM1+CKPuFTvdsaklJrV86EJYeZ4YpCLgMotUweNjkW+gTfzqnIlSee1hnsV mFUOS0PGu/IhcptsZejqe+P+hQDGJnqxbTTXuVgEdSfBfQgEEmsFCbKGe/wxc5Fz 8IoLuZchI7kfsROcYiNLUjT+yy6DNhey1ENV5uKXzt94iZQQ2tVUAfZeFqr+4c+1 F7b1RyafRJDbvII52ZhvIecidPGN9TBh1V0WQmmVYKWPJ7AmiH64TV1zRh5Ty9rJ XDZps/cuwW9gENAcypSJ+s5+cwVa/xM= -----END CERTIFICATE-----Generated at Mon May 6 01:58:12 2024 by rpki-client on console-ams.rpki-client.org