$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d857c896-6af3-3851-9278-6cd9824f90d6.roa File: d857c896-6af3-3851-9278-6cd9824f90d6.roa (raw, json) Hash identifier: ikR7EadbyDcn9/B5GJas2ROh1j9YxJ0T0wLFZneMPRY= Subject key identifier: 7D:E4:4D:B2:30:0A:E9:E1:33:F0:EF:CF:9C:AC:29:C1:D2:A1:9D:21 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858455F04A57D7259CB90F4401F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d857c896-6af3-3851-9278-6cd9824f90d6.roa Signing time: Fri 29 Mar 2024 18:37:14 +0000 ROA not before: Fri 29 Mar 2024 18:37:14 +0000 ROA not after: Thu 27 Jun 2024 18:37:14 +0000 asID: 396982 IP address blocks: 34.100.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:04:a5:7d:72:59:cb:90:f4:40:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 29 18:37:14 2024 GMT Not After : Jun 27 18:37:14 2024 GMT Subject: CN=34fd8564-0e64-43a9-9943-d668b2dd757b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:62:ba:36:8a:19:dc:a4:ff:ed:80:02:05: d1:6c:d0:5e:2b:6e:d0:08:1a:88:c4:f2:2b:61:8a: 87:97:c2:c4:ae:93:f6:73:ed:f2:49:0e:30:70:60: 2a:0d:c1:fd:66:e0:d1:59:83:2d:d8:2d:5c:45:47: 86:2d:7b:6f:83:c1:b0:dc:65:84:8f:52:2f:42:c7: 46:39:a9:da:02:75:28:cd:98:3e:92:72:16:ee:b5: a8:83:dd:51:69:9d:ed:1c:e9:be:ab:c5:d9:47:26: 78:2c:87:75:4e:ad:07:93:a1:49:e0:77:da:29:2c: ab:ed:90:94:68:17:66:64:b3:30:30:21:e8:4a:da: 85:d5:50:7f:9f:4d:2b:5d:22:fb:36:98:54:6f:0a: e9:c3:9d:3d:93:9e:d4:8f:e5:33:88:ad:d6:9c:41: 13:db:f8:11:ee:e7:d1:46:93:c0:d2:ba:90:0a:82: b5:3c:83:cc:87:36:1d:60:6d:47:62:22:4e:7d:15: 0b:17:9e:5d:8e:ea:30:e3:5c:95:8a:98:b1:9c:37: 3d:58:2d:24:21:09:ef:40:41:8c:11:e0:69:41:e6: 81:32:40:16:a0:4e:02:1d:52:aa:6b:4f:b5:98:60: 82:4d:8d:67:46:82:58:67:a1:8b:dc:d8:7f:77:9e: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E4:4D:B2:30:0A:E9:E1:33:F0:EF:CF:9C:AC:29:C1:D2:A1:9D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d857c896-6af3-3851-9278-6cd9824f90d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cc:df:d7:0b:6e:07:79:9b:91:5e:fd:e8:a3:45:8f:6e:11: be:95:39:d5:c6:d6:23:76:1e:73:28:af:3e:3c:e1:ae:10:62: ca:d3:1a:50:00:1f:82:f3:75:25:cf:ff:95:52:83:25:dc:bb: 6d:75:d9:37:47:04:a2:0b:55:65:e9:7a:d7:df:81:2c:03:32: f4:64:ae:5b:96:a8:c6:7f:10:c1:01:fe:bb:5b:0e:0c:54:62: 5b:cb:df:b9:a2:6a:c0:b8:b1:f0:d1:5d:d6:d5:fa:d9:7c:50: 65:8e:ee:ea:9a:e3:55:93:5c:68:c9:85:93:bc:56:b9:d6:ae: 0c:88:83:4d:7a:01:9e:14:c4:4f:c6:f5:ee:55:9f:3d:1a:5d: 9b:f5:0d:dc:1b:99:ac:8d:19:c7:62:1f:3e:cb:d4:81:73:65: 6a:40:5b:5a:fe:9e:ec:20:30:3c:9f:93:78:23:1c:f6:08:c7: 51:92:12:77:0d:26:f5:e2:00:81:8f:07:78:33:56:d4:df:25: 50:2b:4a:4c:e1:a3:1f:a2:b1:44:75:9f:89:6e:72:f4:24:ca: 80:45:d2:ee:1e:13:a0:b6:d1:b1:5f:7b:88:bd:c4:b1:0b:67: c8:1c:b8:79:14:39:d8:80:38:f5:73:9d:c3:ed:9f:37:ef:53: 88:5c:13:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBKV9clnLkPRAH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyOTE4MzcxNFoXDTI0MDYyNzE4MzcxNFowLzEtMCsGA1UEAxMk MzRmZDg1NjQtMGU2NC00M2E5LTk5NDMtZDY2OGIyZGQ3NTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodZiujaKGdyk/+2AAgXRbNBeK27QCBqIxPIr YYqHl8LErpP2c+3ySQ4wcGAqDcH9ZuDRWYMt2C1cRUeGLXtvg8Gw3GWEj1IvQsdG OanaAnUozZg+knIW7rWog91RaZ3tHOm+q8XZRyZ4LId1Tq0Hk6FJ4HfaKSyr7ZCU aBdmZLMwMCHoStqF1VB/n00rXSL7NphUbwrpw509k57Uj+UziK3WnEET2/gR7ufR RpPA0rqQCoK1PIPMhzYdYG1HYiJOfRULF55djuow41yVipixnDc9WC0kIQnvQEGM EeBpQeaBMkAWoE4CHVKqa0+1mGCCTY1nRoJYZ6GL3Nh/d54TEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3kTbIwCunhM/Dvz5ysKcHSoZ0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDg1N2M4OTYtNmFmMy0z ODUxLTkyNzgtNmNkOTgyNGY5MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHImSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvM39cLbgd5m5Fe/eijRY9uEb6VOdXG1iN2HnMorz484a4QYsrTGlAA H4LzdSXP/5VSgyXcu2112TdHBKILVWXpetffgSwDMvRkrluWqMZ/EMEB/rtbDgxU YlvL37miasC4sfDRXdbV+tl8UGWO7uqa41WTXGjJhZO8VrnWrgyIg016AZ4UxE/G 9e5Vnz0aXZv1DdwbmayNGcdiHz7L1IFzZWpAW1r+nuwgMDyfk3gjHPYIx1GSEncN JvXiAIGPB3gzVtTfJVArSkzhox+isUR1n4lucvQkyoBF0u4eE6C20bFfe4i9xLEL Z8gcuHkUOdiAOPVzncPtnzfvU4hcEy0= -----END CERTIFICATE-----Generated at Sun May 5 15:36:05 2024 by rpki-client on console-fra.rpki-client.org