$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa File: cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa (raw, json) Hash identifier: JgvUFhziKIrw9en/Y7vl/qXK+lXRumPJ7fCqttUUECw= Subject key identifier: 36:8F:A0:7D:F0:61:DE:58:92:38:63:74:C8:AC:F1:1C:83:E1:6E:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858454627C06C8C8BA6CDC9E21A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa Signing time: Wed 20 Mar 2024 20:52:45 +0000 ROA not before: Wed 20 Mar 2024 20:52:45 +0000 ROA not after: Tue 18 Jun 2024 20:52:45 +0000 asID: 396982 IP address blocks: 34.121.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:27:c0:6c:8c:8b:a6:cd:c9:e2:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 20 20:52:45 2024 GMT Not After : Jun 18 20:52:45 2024 GMT Subject: CN=db96434c-de6a-45bc-95e1-92868e9c0008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:e8:db:a3:73:cc:cb:06:49:4b:2d:ba:30: 4f:8c:ce:ed:79:ca:af:a7:28:17:25:a3:a5:15:0d: 1e:4c:b9:26:fa:04:28:3a:cd:0c:bb:ad:6a:87:65: ea:9d:94:67:2f:5b:01:42:88:c9:df:0d:d7:df:bf: ed:cf:cc:a8:b5:79:49:23:0a:f0:1b:42:b9:4a:93: da:7a:be:0a:78:a7:db:92:73:51:f0:3e:17:5f:32: 96:3a:5c:b8:78:c7:f0:63:35:75:df:04:55:6d:74: 61:f2:48:78:d9:14:b8:d7:34:ed:51:d6:63:37:eb: 4c:73:51:db:0f:35:c2:ff:4c:f4:b2:6c:09:14:2e: 39:2d:32:96:39:54:f6:a4:f9:90:46:0a:18:29:06: ff:41:ec:93:dc:fd:9b:bf:b6:8c:42:c1:73:90:d9: 2c:96:83:57:87:7f:ad:33:6b:13:01:9e:84:3d:d3: c7:33:1e:ef:8d:ee:41:ac:f6:db:33:a8:2f:ce:fd: 69:93:18:8c:74:d0:fc:1c:c7:f9:66:9e:06:60:5e: fc:ce:b5:40:31:e1:f4:0a:b5:ad:1c:c8:2f:b0:05: ac:22:cf:e6:16:e3:57:4e:17:63:10:90:1c:ee:e2: 2e:91:6f:91:cd:c3:75:b0:24:ce:bc:cd:5f:c3:43: 6b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8F:A0:7D:F0:61:DE:58:92:38:63:74:C8:AC:F1:1C:83:E1:6E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5c:d1:7b:ca:d9:c0:ce:8e:fe:2b:5d:1f:80:0f:a7:96:00: 36:f5:82:12:10:9d:b3:19:db:e1:cd:ad:9e:ff:64:1b:2c:5b: 13:f9:32:be:d0:c5:3a:73:90:cb:9b:b9:89:64:9e:0b:7c:0a: ce:08:b0:cd:e0:fa:08:64:81:c8:b6:ae:16:34:90:d8:b3:ab: c4:83:87:12:0d:16:5a:39:a2:d5:6f:e3:9b:29:7f:69:a1:1a: 2d:66:01:78:ed:54:05:20:2f:72:01:fd:bd:85:9c:71:ef:e8: d2:3e:95:d1:ef:8d:de:15:88:65:8c:1e:74:9d:c4:df:59:fc: ab:15:9a:03:4d:2d:a7:6b:e0:20:17:cb:fb:f0:40:cd:fc:79: ce:aa:2a:d4:b7:e1:7c:ab:c3:5b:d3:54:39:11:bd:95:8f:03: fe:91:56:98:78:82:93:84:a6:e1:7e:39:6a:4d:24:7a:2c:fe: f7:e2:68:6e:66:f0:a0:d6:10:bf:6b:67:7e:7a:3f:1b:4d:9d: b9:f3:1c:88:f2:a6:19:a3:e0:96:7a:2b:c7:a2:a3:bf:ad:f5: 58:be:2d:86:07:df:d1:d6:0f:76:e3:0b:16:f8:86:37:43:ff: cc:33:d8:36:01:79:13:c3:c0:bc:26:a8:d8:a5:b6:b1:89:70: 87:a1:7c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJ8BsjIumzcniGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMDIwNTI0NVoXDTI0MDYxODIwNTI0NVowLzEtMCsGA1UEAxMk ZGI5NjQzNGMtZGU2YS00NWJjLTk1ZTEtOTI4NjhlOWMwMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgno26NzzMsGSUstujBPjM7tecqvpygXJaOl FQ0eTLkm+gQoOs0Mu61qh2XqnZRnL1sBQojJ3w3X37/tz8yotXlJIwrwG0K5SpPa er4KeKfbknNR8D4XXzKWOly4eMfwYzV13wRVbXRh8kh42RS41zTtUdZjN+tMc1Hb DzXC/0z0smwJFC45LTKWOVT2pPmQRgoYKQb/QeyT3P2bv7aMQsFzkNksloNXh3+t M2sTAZ6EPdPHMx7vje5BrPbbM6gvzv1pkxiMdND8HMf5Zp4GYF78zrVAMeH0CrWt HMgvsAWsIs/mFuNXThdjEJAc7uIukW+RzcN1sCTOvM1fw0NreQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaPoH3wYd5YkjhjdMis8RyD4W7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y4MmU5YzMtNTFiNS0z ZDNkLTg0ZDEtYzNlNDdjOTYwYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxc0XvK2cDOjv4rXR+AD6eWADb1ghIQnbMZ2+HNrZ7/ZBssWxP5Mr7Q xTpzkMubuYlkngt8Cs4IsM3g+ghkgci2rhY0kNizq8SDhxINFlo5otVv45spf2mh Gi1mAXjtVAUgL3IB/b2FnHHv6NI+ldHvjd4ViGWMHnSdxN9Z/KsVmgNNLadr4CAX y/vwQM38ec6qKtS34Xyrw1vTVDkRvZWPA/6RVph4gpOEpuF+OWpNJHos/vfiaG5m 8KDWEL9rZ356PxtNnbnzHIjyphmj4JZ6K8eio7+t9Vi+LYYH39HWD3bjCxb4hjdD /8wz2DYBeRPDwLwmqNiltrGJcIehfAQ= -----END CERTIFICATE-----Generated at Mon May 6 02:00:14 2024 by rpki-client on console-fra.rpki-client.org