$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa File: d4b558c6-0f69-344d-b777-07adb5db7399.roa (raw, json) Hash identifier: WWQHIlnnUhY7b/YByWYw5fmVjGS0MIoxgiP11hmFSC0= Subject key identifier: CF:CE:55:0E:FF:8C:E8:64:E5:32:22:58:55:00:83:C6:C1:95:31:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490957C1DC0168E508128280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa Signing time: Thu 21 Mar 2024 21:38:55 +0000 ROA not before: Thu 21 Mar 2024 21:38:55 +0000 ROA not after: Wed 19 Jun 2024 21:38:55 +0000 asID: 396982 IP address blocks: 34.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:09:57:c1:dc:01:68:e5:08:12:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:38:55 2024 GMT Not After : Jun 19 21:38:55 2024 GMT Subject: CN=efdf15cb-bcfd-46b8-84ce-d265909fc236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:e3:25:e6:45:2c:99:5a:65:f2:85:67:e6: a2:54:d5:57:58:80:32:0a:c3:35:56:c3:c6:d0:73: 36:25:d7:67:cb:ee:b0:ec:0c:30:e2:60:32:2d:8f: 29:b6:d3:7b:47:2b:14:71:61:7c:94:99:65:e1:c9: c8:0f:c5:22:1c:53:48:97:ea:13:27:d6:5a:ff:48: 35:f9:45:fe:df:55:01:48:bb:46:84:c2:41:9c:2a: 19:f8:25:da:c1:1a:c5:5d:a7:ec:d6:42:54:17:86: 1c:af:5e:4f:77:c8:f2:7f:7a:78:11:42:e2:05:ab: 83:c7:54:95:5a:33:87:f5:3d:89:f1:92:e8:d6:e3: e6:76:99:a6:9b:7d:c7:25:da:05:1a:07:03:40:d6: 17:22:8a:ae:c1:71:f5:e3:19:3f:a1:48:22:2d:3c: e3:71:b7:cf:3d:b4:af:de:ae:6c:36:77:2d:cc:40: cc:7c:51:30:62:d3:e8:11:2d:e4:5c:bd:49:66:4c: 4e:65:f0:8a:d8:4d:2b:e7:b9:c2:80:88:86:c1:16: 69:ee:48:3a:c2:4e:32:f1:79:02:5f:c6:83:01:a2: de:70:70:63:b1:7b:5d:d7:77:86:6c:d8:99:e7:01: d2:0d:44:db:a1:84:4b:85:f6:64:aa:05:59:34:03: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:55:0E:FF:8C:E8:64:E5:32:22:58:55:00:83:C6:C1:95:31:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8f:10:86:84:61:55:9a:96:18:c7:83:12:b9:ee:9f:71:6b: b9:5c:1e:28:70:b5:7e:67:21:00:2c:20:ea:3e:b6:0c:2b:c6: f3:f7:9b:7b:58:c1:2d:db:38:4e:57:b3:55:de:c2:dd:b9:ee: 97:12:bf:9d:cd:71:14:dc:77:fe:b8:24:ac:c3:97:4d:23:03: 83:52:95:fa:c2:55:0d:08:cd:c2:84:8b:a0:2c:2c:16:bd:62: 24:64:55:71:8e:57:08:1c:d7:15:fd:cb:d4:21:99:54:75:ca: 31:c0:dd:26:40:db:65:b7:54:dd:fe:54:42:39:21:b8:15:89: 14:d9:ab:cf:eb:a5:ac:67:6c:13:b0:60:b1:8e:f9:1c:aa:21: 57:cc:19:d7:56:e7:ad:8a:30:a3:2b:f8:93:5c:6d:79:86:51: a5:45:ff:52:20:f1:50:91:31:c3:94:52:18:d7:af:57:a2:52: 8d:3a:30:55:c8:ba:db:9d:07:e2:ef:57:34:af:d6:6d:a1:63: d5:d5:4d:07:bf:2c:71:25:50:e3:68:80:d6:42:cf:1a:f9:6c: 1d:30:23:ff:79:6f:32:17:a9:7f:d8:7d:81:b5:f3:34:f6:64: c8:88:01:8f:8f:18:33:4e:d6:fe:9e:6c:61:be:33:9e:a1:78: dc:c5:98:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJCVfB3AFo5QgSgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMzg1NVoXDTI0MDYxOTIxMzg1NVowLzEtMCsGA1UEAxMk ZWZkZjE1Y2ItYmNmZC00NmI4LTg0Y2UtZDI2NTkwOWZjMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc3jJeZFLJlaZfKFZ+aiVNVXWIAyCsM1VsPG 0HM2Jddny+6w7Aww4mAyLY8pttN7RysUcWF8lJll4cnID8UiHFNIl+oTJ9Za/0g1 +UX+31UBSLtGhMJBnCoZ+CXawRrFXafs1kJUF4Ycr15Pd8jyf3p4EULiBauDx1SV WjOH9T2J8ZLo1uPmdpmmm33HJdoFGgcDQNYXIoquwXH14xk/oUgiLTzjcbfPPbSv 3q5sNnctzEDMfFEwYtPoES3kXL1JZkxOZfCK2E0r57nCgIiGwRZp7kg6wk4y8XkC X8aDAaLecHBjsXtd13eGbNiZ5wHSDUTboYRLhfZkqgVZNANb5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/OVQ7/jOhk5TIiWFUAg8bBlTE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRiNTU4YzYtMGY2OS0z NDRkLWI3NzctMDdhZGI1ZGI3Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOPEIaEYVWalhjHgxK57p9xa7lcHihwtX5nIQAsIOo+tgwrxvP3m3tY wS3bOE5Xs1Xewt257pcSv53NcRTcd/64JKzDl00jA4NSlfrCVQ0IzcKEi6AsLBa9 YiRkVXGOVwgc1xX9y9QhmVR1yjHA3SZA22W3VN3+VEI5IbgViRTZq8/rpaxnbBOw YLGO+RyqIVfMGddW562KMKMr+JNcbXmGUaVF/1Ig8VCRMcOUUhjXr1eiUo06MFXI utudB+LvVzSv1m2hY9XVTQe/LHElUONogNZCzxr5bB0wI/95bzIXqX/YfYG18zT2 ZMiIAY+PGDNO1v6ebGG+M56heNzFmAA= -----END CERTIFICATE-----Generated at Mon May 6 02:00:17 2024 by rpki-client on console-fra.rpki-client.org