$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef3bb416-b6b0-300f-af7f-7e66af803399.roa File: ef3bb416-b6b0-300f-af7f-7e66af803399.roa (raw, json) Hash identifier: hdBtHsd7mVfkSWbhpMzt6Q6afPQnX+vj7SyNCP+Hdog= Subject key identifier: 32:80:66:00:09:12:A9:AA:3A:B0:31:DE:65:DA:59:BF:1B:33:60:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858454905CB4DBE47BF60410723C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef3bb416-b6b0-300f-af7f-7e66af803399.roa Signing time: Thu 21 Mar 2024 21:31:46 +0000 ROA not before: Thu 21 Mar 2024 21:31:46 +0000 ROA not after: Wed 19 Jun 2024 21:31:46 +0000 asID: 396982 IP address blocks: 34.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:05:cb:4d:be:47:bf:60:41:07:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:31:46 2024 GMT Not After : Jun 19 21:31:46 2024 GMT Subject: CN=d50540e7-6038-4ced-aebc-5e5a6f0cacda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:f2:16:79:15:7b:ec:60:c9:3a:37:5a:8f: 38:fa:a0:d7:0e:0a:0b:a3:60:f2:58:e7:64:28:4b: d1:1a:f0:72:09:b8:3b:8a:8e:ad:ae:1b:2f:e1:21: ba:c5:54:b3:7d:47:ab:bd:ca:ef:db:75:f4:f1:e6: 30:57:81:7e:22:23:f8:57:7d:da:0b:82:db:35:09: 3a:df:38:e7:36:36:54:2c:1f:4b:ab:41:cb:3a:1c: 06:52:fc:40:d7:e3:e4:b7:9f:73:e0:5f:de:a4:30: ac:bb:7b:23:07:05:74:bd:34:ac:8d:4f:7a:31:41: c4:60:b3:10:9d:be:09:86:a7:da:c1:38:1f:9c:3e: 9b:80:36:9d:af:b9:3e:81:b6:1e:5f:5d:ca:30:02: b7:78:41:5d:f3:f5:33:ad:9c:32:52:4e:6e:53:3c: 96:e5:98:71:ce:72:f0:8a:37:47:06:c2:a2:52:93: b0:10:b8:82:44:4d:43:f8:75:59:e6:16:fd:8e:55: cd:37:75:f1:23:2d:76:6f:15:ff:65:1a:11:1f:8b: 88:4c:33:7e:c5:ba:47:cd:44:60:e3:cb:29:7a:5a: 5d:d8:00:3b:f0:33:1f:ac:7a:07:65:bb:6d:93:e1: 74:d0:1a:a4:00:21:33:91:24:34:83:da:c7:58:ca: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:80:66:00:09:12:A9:AA:3A:B0:31:DE:65:DA:59:BF:1B:33:60:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef3bb416-b6b0-300f-af7f-7e66af803399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8a:1a:6b:8a:c5:9f:19:41:0f:53:83:98:ec:1a:e1:6c:f3: 30:ca:08:22:f7:69:1a:97:62:5d:dd:b3:61:e3:c0:88:75:ed: 6a:14:e9:4f:09:f8:58:bd:1b:2f:b2:b9:5d:b8:91:a4:41:67: 93:20:02:c0:d8:68:aa:36:bc:a8:9f:9e:1a:bb:7c:89:5a:21: 00:b7:32:c1:b3:71:6e:bd:13:ec:a6:fa:9d:95:21:37:62:d2: ca:20:ba:d3:74:50:43:ce:4e:4d:c6:a1:b7:cd:2b:01:c7:89: 02:76:92:9c:1d:6c:d0:42:e5:68:3c:c5:0d:fc:c8:72:74:fb: 30:7a:1a:19:6b:82:4c:20:e5:66:e3:dc:6f:59:56:a0:69:e5: d0:ad:d2:22:f8:68:9a:3d:ac:62:fc:50:cc:43:59:29:b7:c2: 40:57:8b:ec:66:1b:75:54:18:12:c0:91:df:ee:12:28:a3:b5: 7b:be:21:ec:01:aa:ee:3f:4c:47:11:8d:d2:4a:e6:fd:e2:17: 2f:d5:59:94:cb:f6:8b:46:0c:10:1c:50:bc:8f:54:5b:bb:1a: 4a:11:c0:25:3b:58:ec:ec:3c:84:71:76:c0:f2:14:85:8b:38: 28:c2:b5:3e:56:31:f4:c3:cd:65:93:43:8b:83:00:23:11:9b: a6:f1:6a:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJBctNvke/YEEHI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMzE0NloXDTI0MDYxOTIxMzE0NlowLzEtMCsGA1UEAxMk ZDUwNTQwZTctNjAzOC00Y2VkLWFlYmMtNWU1YTZmMGNhY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwozyFnkVe+xgyTo3Wo84+qDXDgoLo2DyWOdk KEvRGvByCbg7io6trhsv4SG6xVSzfUervcrv23X08eYwV4F+IiP4V33aC4LbNQk6 3zjnNjZULB9Lq0HLOhwGUvxA1+Pkt59z4F/epDCsu3sjBwV0vTSsjU96MUHEYLMQ nb4JhqfawTgfnD6bgDadr7k+gbYeX13KMAK3eEFd8/UzrZwyUk5uUzyW5ZhxznLw ijdHBsKiUpOwELiCRE1D+HVZ5hb9jlXNN3XxIy12bxX/ZRoRH4uITDN+xbpHzURg 48spelpd2AA78DMfrHoHZbttk+F00BqkACEzkSQ0g9rHWMpozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKAZgAJEqmqOrAx3mXaWb8bM2BHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWYzYmI0MTYtYjZiMC0z MDBmLWFmN2YtN2U2NmFmODAzMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6KGmuKxZ8ZQQ9Tg5jsGuFs8zDKCCL3aRqXYl3ds2HjwIh17WoU6U8J +Fi9Gy+yuV24kaRBZ5MgAsDYaKo2vKifnhq7fIlaIQC3MsGzcW69E+ym+p2VITdi 0sogutN0UEPOTk3GobfNKwHHiQJ2kpwdbNBC5Wg8xQ38yHJ0+zB6Ghlrgkwg5Wbj 3G9ZVqBp5dCt0iL4aJo9rGL8UMxDWSm3wkBXi+xmG3VUGBLAkd/uEiijtXu+IewB qu4/TEcRjdJK5v3iFy/VWZTL9otGDBAcULyPVFu7GkoRwCU7WOzsPIRxdsDyFIWL OCjCtT5WMfTDzWWTQ4uDACMRm6bxalI= -----END CERTIFICATE-----Generated at Mon May 6 02:00:29 2024 by rpki-client on console-fra.rpki-client.org