$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed89b7c5-3e90-3431-bd00-dba5c332885c.roa File: ed89b7c5-3e90-3431-bd00-dba5c332885c.roa (raw, json) Hash identifier: e0oN5CFJZjqX7vob7MVSHTVxgy+rBMCBNGu6zfgHC44= Subject key identifier: BD:0C:81:12:20:78:CE:34:AF:4F:48:AB:46:09:FC:E5:3B:8A:DB:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285845490CF2F6BC06D5788E65C680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed89b7c5-3e90-3431-bd00-dba5c332885c.roa Signing time: Thu 21 Mar 2024 21:46:10 +0000 ROA not before: Thu 21 Mar 2024 21:46:10 +0000 ROA not after: Wed 19 Jun 2024 21:46:10 +0000 asID: 396982 IP address blocks: 35.196.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0c:f2:f6:bc:06:d5:78:8e:65:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:46:10 2024 GMT Not After : Jun 19 21:46:10 2024 GMT Subject: CN=ef5d227f-b0ab-414e-bee3-bae1d96f4633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:e4:08:31:12:9b:33:9a:c0:0f:3e:6b:92: 5d:e9:b7:3e:e0:59:72:09:b3:a0:8a:24:7d:f2:18: 64:ef:d5:65:5c:d8:86:76:99:5c:3b:57:fd:e6:62: 45:6d:c4:66:fd:56:ca:2e:3d:d6:ec:23:a3:24:98: 6a:e4:9d:4c:5b:2a:b5:d0:b9:ff:a6:a9:51:6d:9c: 79:5d:75:a1:0d:f1:91:6c:ce:13:fd:65:36:13:a6: d1:b7:7a:64:83:4b:2a:e6:25:a2:51:f7:cc:fb:78: c7:7a:a3:64:59:2b:7c:5b:b1:8a:f5:9c:80:e2:46: 0f:8c:3c:2e:a0:e2:f4:6a:8f:ed:37:9d:88:f0:6b: 9f:44:95:11:cb:2e:65:3d:37:4c:86:34:ee:57:ca: d8:21:c9:80:77:e6:c4:06:f3:ca:11:70:8d:7b:6a: d3:8f:dd:34:6a:ef:89:5d:15:7e:65:eb:98:e6:4f: 40:55:43:e4:14:dc:9a:b1:6d:30:a2:64:88:fd:4e: a3:4f:e3:b1:f8:9e:ad:08:9f:a3:9f:37:19:1b:1a: 53:51:5c:27:90:d6:6f:3a:b4:22:7e:f1:a8:4c:d3: 09:f9:8e:32:5f:76:33:22:33:be:dc:cc:6a:92:f7: c6:51:74:9b:51:e3:0c:96:1d:77:ba:a1:79:ee:2c: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0C:81:12:20:78:CE:34:AF:4F:48:AB:46:09:FC:E5:3B:8A:DB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed89b7c5-3e90-3431-bd00-dba5c332885c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.196.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:dc:41:d3:68:73:18:50:f5:7e:5d:31:e4:cf:fa:9f:f7:0e: fb:f5:42:13:b7:3a:9b:36:fa:96:a1:48:d2:af:55:00:fc:4d: f2:6e:ae:bd:ed:c5:8d:da:35:b1:68:1e:31:c4:1c:55:06:46: 63:3f:7a:95:7a:ab:eb:7f:fd:65:1b:2f:50:81:35:1a:4a:9c: bc:36:c4:5c:6b:1b:bd:51:cc:54:46:bf:6e:ca:86:0e:ec:af: 11:d8:73:d1:35:2f:c1:dd:d4:7a:2e:ce:20:12:61:ee:2d:2f: 48:69:e0:b3:96:8d:71:5f:9f:ae:7a:60:40:4b:2a:96:12:a6: a1:b0:c7:6a:a3:f3:b9:11:7e:95:a4:db:d5:ad:58:b0:d6:cc: 94:85:62:f9:80:c5:b7:d0:08:18:24:02:c5:d3:6e:09:da:0c: 03:a2:24:00:b7:02:74:31:6b:3c:df:1d:d5:ec:f3:0c:f7:4c: 61:4e:47:de:74:b2:c1:f7:bb:c5:42:12:db:39:16:a4:cc:29: 37:b9:7c:41:73:6c:15:ce:1e:60:de:b8:f1:32:e1:6a:2c:09: ce:b8:cb:b3:d8:23:12:f8:48:1f:4a:ab:c0:4c:27:ad:4c:38: 0b:9b:14:5d:31:ca:8a:8d:d2:db:46:d4:70:69:29:b1:ae:36: 5a:a6:85:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDPL2vAbVeI5lxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxNDYxMFoXDTI0MDYxOTIxNDYxMFowLzEtMCsGA1UEAxMk ZWY1ZDIyN2YtYjBhYi00MTRlLWJlZTMtYmFlMWQ5NmY0NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMnkCDESmzOawA8+a5Jd6bc+4FlyCbOgiiR9 8hhk79VlXNiGdplcO1f95mJFbcRm/VbKLj3W7COjJJhq5J1MWyq10Ln/pqlRbZx5 XXWhDfGRbM4T/WU2E6bRt3pkg0sq5iWiUffM+3jHeqNkWSt8W7GK9ZyA4kYPjDwu oOL0ao/tN52I8GufRJURyy5lPTdMhjTuV8rYIcmAd+bEBvPKEXCNe2rTj900au+J XRV+ZeuY5k9AVUPkFNyasW0womSI/U6jT+Ox+J6tCJ+jnzcZGxpTUVwnkNZvOrQi fvGoTNMJ+Y4yX3YzIjO+3MxqkvfGUXSbUeMMlh13uqF57iy9TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0MgRIgeM40r09Iq0YJ/OU7itv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWQ4OWI3YzUtM2U5MC0z NDMxLWJkMDAtZGJhNWMzMzI4ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvcQdNocxhQ9X5dMeTP+p/3Dvv1QhO3Ops2+pahSNKvVQD8TfJurr3t xY3aNbFoHjHEHFUGRmM/epV6q+t//WUbL1CBNRpKnLw2xFxrG71RzFRGv27Khg7s rxHYc9E1L8Hd1HouziASYe4tL0hp4LOWjXFfn656YEBLKpYSpqGwx2qj87kRfpWk 29WtWLDWzJSFYvmAxbfQCBgkAsXTbgnaDAOiJAC3AnQxazzfHdXs8wz3TGFOR950 ssH3u8VCEts5FqTMKTe5fEFzbBXOHmDeuPEy4WosCc64y7PYIxL4SB9Kq8BMJ61M OAubFF0xyoqN0ttG1HBpKbGuNlqmhQo= -----END CERTIFICATE-----Generated at Mon May 6 08:08:31 2024 by rpki-client on console-ams.rpki-client.org