$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa File: e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa (raw, json) Hash identifier: ESOY55aIidsf6Yxuse1ZvJXyWL+2df3j2uie6ComJ9Y= Subject key identifier: 09:D3:4A:9E:99:35:C6:E3:7C:E9:9E:5B:72:61:AC:33:96:AC:14:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858454900B247B72462E25A6B1780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa Signing time: Thu 21 Mar 2024 21:21:29 +0000 ROA not before: Thu 21 Mar 2024 21:21:29 +0000 ROA not after: Wed 19 Jun 2024 21:21:29 +0000 asID: 396982 IP address blocks: 35.201.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:00:b2:47:b7:24:62:e2:5a:6b:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:21:29 2024 GMT Not After : Jun 19 21:21:29 2024 GMT Subject: CN=013b2f1a-5fbe-4aa0-b62c-d2e7d5f0be13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:e1:e6:66:a1:d6:6c:f1:b3:04:27:09:db: e0:12:dc:4f:23:98:5a:05:2d:ba:2a:ec:51:59:50: ac:7c:08:5d:c2:d0:66:5a:4d:fc:85:8a:05:c2:e5: 82:4b:95:af:d3:04:86:1e:fd:da:cb:a1:02:58:62: 72:27:19:4a:52:45:9a:0d:1e:18:3f:66:56:cb:f6: be:89:40:36:2e:d5:c9:e8:d9:e6:f7:ed:a8:8b:43: b9:04:85:9b:23:e5:07:d2:d1:01:ac:d8:c1:19:29: 71:bf:4c:c7:59:ad:b8:e7:4e:96:b8:75:0e:87:14: 15:37:51:7c:a9:d4:70:b8:12:1a:10:cb:f8:ae:9f: 20:a0:5c:b9:65:d8:52:0b:5c:69:33:04:9f:eb:89: 9f:f6:c7:8e:7d:8f:88:37:c9:7c:31:91:c0:fb:77: 94:7d:ba:05:a1:a8:56:02:aa:4b:2a:00:e1:fd:73: e7:77:4f:fc:c7:08:2f:83:24:2b:72:88:96:e4:18: e9:85:d2:0c:a5:ce:49:ca:cd:87:16:cd:f0:d3:8f: c2:b1:c9:b9:51:8e:97:37:2c:50:31:64:8f:d3:7d: 0f:4c:fa:a3:7f:21:89:58:55:a0:5c:cd:9a:62:59: a9:fb:e2:71:06:ab:77:82:a6:24:c3:c8:e4:a9:36: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:4A:9E:99:35:C6:E3:7C:E9:9E:5B:72:61:AC:33:96:AC:14:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:17:29:a1:f4:a1:b0:c5:b6:82:9f:2a:04:a5:aa:ca:40:eb: 98:ca:55:65:8b:b4:8c:13:0a:ad:3d:b2:29:ef:69:66:86:14: 3b:68:d8:ff:d7:f2:fd:14:e5:c1:4f:ae:54:a7:42:d3:6b:2f: 0d:58:a7:33:ab:9f:9a:65:34:9b:b9:af:5f:dd:58:1c:86:3b: d8:8b:75:22:77:54:af:0c:d9:0d:f8:55:2f:35:16:fa:2c:83: 73:91:a7:a7:23:dc:14:88:a4:a3:6f:7e:00:3d:4a:7e:08:fe: 38:86:b5:2a:cd:92:93:12:86:aa:3a:82:e6:54:45:0a:95:b2: 8a:ba:1c:4f:ba:c9:d4:f0:43:36:5f:bb:87:17:85:84:90:1b: 6d:b9:f2:2b:c1:72:52:41:8b:c7:42:f9:f6:cc:c3:d2:55:d0: af:e8:2d:70:d7:f6:69:1b:bd:2c:7b:7c:90:aa:af:e0:32:a5: 26:80:fb:f4:ab:43:c4:4e:e4:b8:33:f5:e0:3f:21:28:9c:0e: 3d:23:90:99:80:c6:2e:67:e0:5d:77:1e:fe:f4:78:a7:d3:a3: 87:28:a2:ba:d6:91:21:43:61:bb:92:08:6c:4c:35:69:f4:71: d6:be:d7:a7:aa:9a:62:9d:b6:58:be:b9:74:4d:45:b9:79:53: 7f:3c:80:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJALJHtyRi4lprF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMjEyOVoXDTI0MDYxOTIxMjEyOVowLzEtMCsGA1UEAxMk MDEzYjJmMWEtNWZiZS00YWEwLWI2MmMtZDJlN2Q1ZjBiZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogHh5mah1mzxswQnCdvgEtxPI5haBS26KuxR WVCsfAhdwtBmWk38hYoFwuWCS5Wv0wSGHv3ay6ECWGJyJxlKUkWaDR4YP2ZWy/a+ iUA2LtXJ6Nnm9+2oi0O5BIWbI+UH0tEBrNjBGSlxv0zHWa24506WuHUOhxQVN1F8 qdRwuBIaEMv4rp8goFy5ZdhSC1xpMwSf64mf9seOfY+IN8l8MZHA+3eUfboFoahW AqpLKgDh/XPnd0/8xwgvgyQrcoiW5BjphdIMpc5Jys2HFs3w04/Cscm5UY6XNyxQ MWSP030PTPqjfyGJWFWgXM2aYlmp++JxBqt3gqYkw8jkqTZ67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnTSp6ZNcbjfOmeW3JhrDOWrBQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTNmM2FhYjAtMzUyNi0z YjdlLWFhZjgtZWQyNTA0ZDdmMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8khMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgXKaH0obDFtoKfKgSlqspA65jKVWWLtIwTCq09sinvaWaGFDto2P/X 8v0U5cFPrlSnQtNrLw1YpzOrn5plNJu5r1/dWByGO9iLdSJ3VK8M2Q34VS81Fvos g3ORp6cj3BSIpKNvfgA9Sn4I/jiGtSrNkpMShqo6guZURQqVsoq6HE+6ydTwQzZf u4cXhYSQG2258ivBclJBi8dC+fbMw9JV0K/oLXDX9mkbvSx7fJCqr+AypSaA+/Sr Q8RO5Lgz9eA/ISicDj0jkJmAxi5n4F13Hv70eKfTo4coorrWkSFDYbuSCGxMNWn0 cda+16eqmmKdtli+uXRNRbl5U388gEc= -----END CERTIFICATE-----Generated at Sun May 5 15:50:15 2024 by rpki-client on console-ams.rpki-client.org