$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f768ed33-88a7-31d3-8560-a3179e78c3c7.roa File: f768ed33-88a7-31d3-8560-a3179e78c3c7.roa (raw, json) Hash identifier: 2QGjyAPN+JJbREFZKZK1WrwiTJ2V8sJSgp7GJNmyPpw= Subject key identifier: BF:C9:67:B5:BA:25:F6:5D:D0:07:21:37:88:B9:36:CC:A0:E7:0C:22 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FE7A0B331D243B200B4080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f768ed33-88a7-31d3-8560-a3179e78c3c7.roa Signing time: Thu 21 Mar 2024 21:17:01 +0000 ROA not before: Thu 21 Mar 2024 21:17:01 +0000 ROA not after: Wed 19 Jun 2024 21:17:01 +0000 asID: 396982 IP address blocks: 34.148.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fe:7a:0b:33:1d:24:3b:20:0b:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:17:01 2024 GMT Not After : Jun 19 21:17:01 2024 GMT Subject: CN=c8f2bf72-4341-4cce-998a-e8e2fe1a1f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:88:21:ef:de:81:38:00:43:ac:4f:d4:01: 45:92:58:6a:1c:e7:96:5c:c6:d9:80:bc:f7:c8:4e: 30:f5:9a:ff:2c:a7:fd:4d:f5:66:a7:1b:41:cc:0b: c9:40:53:60:aa:15:c5:6f:5f:58:98:23:f0:77:f8: c6:00:7e:66:73:4e:4b:a3:fb:f5:68:77:2a:27:d8: df:4e:56:14:6d:e7:71:c8:c9:cb:9d:ab:4c:7b:65: b7:ad:a7:23:5d:61:e8:39:5f:40:08:8f:46:be:81: 92:b3:78:f6:1e:e3:a5:bd:00:9d:5a:48:5e:4b:d3: 3a:98:87:e3:b6:a9:05:55:61:86:47:cc:0f:c4:0a: e9:34:ee:6c:f2:a6:76:17:94:7d:84:26:0c:82:88: 1b:f6:cc:f8:35:a0:d8:c5:64:6d:f2:9e:03:a6:2f: 7f:d7:9e:02:a9:5d:c8:f9:eb:ba:ca:f6:c8:5e:40: 95:1e:cb:9f:71:c4:21:ae:17:56:bd:76:a2:24:89: 87:0f:6d:6e:66:e0:76:fc:95:f2:05:f5:6e:27:60: 76:3f:eb:8e:ee:ba:51:fd:d6:31:c5:f3:66:8e:b4: 2f:2a:17:30:a3:db:3f:29:17:37:47:4b:09:2e:27: 0a:9d:74:4f:99:44:7f:59:8f:e4:31:75:1a:69:57: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C9:67:B5:BA:25:F6:5D:D0:07:21:37:88:B9:36:CC:A0:E7:0C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f768ed33-88a7-31d3-8560-a3179e78c3c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0e:47:95:27:7b:b3:64:1b:5d:28:30:c0:d7:0b:a0:d4:ee: e4:c2:8a:bb:55:32:ec:1f:a5:d0:10:ef:a2:2c:a2:4b:36:34: 5a:48:c5:c8:c1:3e:f8:8d:13:42:83:9b:78:4d:6c:94:ff:38: 4a:63:f9:31:aa:f5:73:be:34:f8:c3:87:b5:6a:9d:94:1f:52: 2c:52:ab:80:56:00:13:b6:df:3d:f0:94:7e:05:4c:4f:1a:e9: 00:b9:11:b6:9d:4e:da:0d:bf:72:02:18:81:5e:85:3b:03:6e: 1d:31:47:f4:f4:81:91:a8:e8:a4:7a:52:6c:22:c2:0a:f4:58: c9:d5:33:f8:87:14:10:cb:46:4f:a6:e5:fc:8b:c0:64:4c:27: 0c:6f:a3:ac:95:4f:25:a5:ed:21:4f:c9:9d:4b:d1:14:87:a7: 5f:20:ab:22:f8:13:81:74:a9:a7:67:e9:a2:04:b0:e6:8c:c6: f7:87:ee:d8:f3:96:d3:a4:f1:0e:05:a9:44:40:62:50:25:62: 50:dd:cd:9d:0f:c2:1b:e9:8a:84:f8:07:a9:88:41:50:d8:61: aa:7c:38:7e:2e:3d:9f:68:a5:4f:5e:f5:26:76:d8:57:f9:9a: 07:3f:6b:93:59:f7:14:87:dd:8b:5a:2e:d9:0d:1e:29:2c:49: 37:b7:d0:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/noLMx0kOyALQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTcwMVoXDTI0MDYxOTIxMTcwMVowLzEtMCsGA1UEAxMk YzhmMmJmNzItNDM0MS00Y2NlLTk5OGEtZThlMmZlMWExZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7aIIe/egTgAQ6xP1AFFklhqHOeWXMbZgLz3 yE4w9Zr/LKf9TfVmpxtBzAvJQFNgqhXFb19YmCPwd/jGAH5mc05Lo/v1aHcqJ9jf TlYUbedxyMnLnatMe2W3racjXWHoOV9ACI9GvoGSs3j2HuOlvQCdWkheS9M6mIfj tqkFVWGGR8wPxArpNO5s8qZ2F5R9hCYMgogb9sz4NaDYxWRt8p4Dpi9/154CqV3I +eu6yvbIXkCVHsufccQhrhdWvXaiJImHD21uZuB2/JXyBfVuJ2B2P+uO7rpR/dYx xfNmjrQvKhcwo9s/KRc3R0sJLicKnXRPmUR/WY/kMXUaaVcLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/JZ7W6JfZd0AchN4i5Nsyg5wwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjc2OGVkMzMtODhhNy0z MWQzLTg1NjAtYTMxNzllNzhjM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkOR5Une7NkG10oMMDXC6DU7uTCirtVMuwfpdAQ76Isoks2NFpIxcjB PviNE0KDm3hNbJT/OEpj+TGq9XO+NPjDh7VqnZQfUixSq4BWABO23z3wlH4FTE8a 6QC5EbadTtoNv3ICGIFehTsDbh0xR/T0gZGo6KR6Umwiwgr0WMnVM/iHFBDLRk+m 5fyLwGRMJwxvo6yVTyWl7SFPyZ1L0RSHp18gqyL4E4F0qadn6aIEsOaMxveH7tjz ltOk8Q4FqURAYlAlYlDdzZ0PwhvpioT4B6mIQVDYYap8OH4uPZ9opU9e9SZ22Ff5 mgc/a5NZ9xSH3YtaLtkNHiksSTe30FQ= -----END CERTIFICATE-----Generated at Mon May 6 08:08:34 2024 by rpki-client on console-ams.rpki-client.org