$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8193ade-2200-38e4-9936-e0c18c3f5571.roa File: f8193ade-2200-38e4-9936-e0c18c3f5571.roa (raw, json) Hash identifier: 0b7Yso55MGlMdgQNgKMzfi4xJtKWnqNhape4yZyEZ24= Subject key identifier: F4:2D:4E:A3:36:F3:A5:F1:6D:DE:16:45:0F:C6:7A:57:B0:84:5D:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FEDD7CCC0495F723FE8750 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8193ade-2200-38e4-9936-e0c18c3f5571.roa Signing time: Thu 21 Mar 2024 21:17:48 +0000 ROA not before: Thu 21 Mar 2024 21:17:48 +0000 ROA not after: Wed 19 Jun 2024 21:17:48 +0000 asID: 396982 IP address blocks: 34.85.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fe:dd:7c:cc:04:95:f7:23:fe:87:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:17:48 2024 GMT Not After : Jun 19 21:17:48 2024 GMT Subject: CN=6dd0f5ab-9d32-4d71-840e-ed00b0ea6445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:76:1a:3f:4d:9f:dc:45:a3:d1:43:1f:c1:a8: 38:a3:ee:1d:5f:ee:d6:4e:97:39:7a:b9:6a:15:ac: 2a:db:c1:99:1e:f1:7e:9f:9f:9e:cb:10:9e:88:20: 26:35:ba:90:a6:b8:8f:09:d3:42:24:a9:5d:bb:35: db:22:97:89:67:06:16:80:aa:7c:4a:0c:09:ec:a0: 0e:5b:1d:7c:96:5e:25:f8:7a:d0:a3:dd:fc:dc:54: 1b:19:8f:06:5d:6e:3d:9e:47:8d:9c:0a:4d:2c:19: 77:31:4d:db:9a:24:c6:d4:e8:20:a9:c8:17:b2:9d: e1:db:7c:da:db:78:74:78:6d:73:cb:f6:cb:aa:35: cb:e7:52:4e:c4:6a:5a:21:c2:37:fa:4c:57:9d:e8: aa:c3:c1:7d:2f:29:f9:46:29:2d:cf:4d:f3:2a:bc: 21:a2:55:78:70:67:52:c9:5d:f7:be:a1:e2:d0:12: 56:22:57:f8:6b:0b:de:5b:1a:4f:39:e1:50:78:63: b1:c3:36:94:40:c3:26:b8:0a:bf:a0:54:7d:09:45: ed:a9:fb:2f:22:bc:1d:a6:37:57:be:25:7b:24:28: 68:2b:d1:ba:aa:5a:a5:f1:44:ce:35:a0:e6:24:bb: 51:fe:74:f9:b6:ce:43:c5:6c:3d:4c:19:da:49:35: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:4E:A3:36:F3:A5:F1:6D:DE:16:45:0F:C6:7A:57:B0:84:5D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8193ade-2200-38e4-9936-e0c18c3f5571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:48:f4:4f:22:e8:80:d3:f5:39:2a:b7:e7:07:ae:eb:91:fb: 50:e4:de:6c:9a:2e:c5:0d:cb:b4:a2:8a:11:dc:84:e4:a6:07: 40:ea:16:07:91:a8:5c:aa:f1:e3:fe:af:35:b3:d5:05:b8:59: f9:9b:60:59:ef:a4:96:39:00:bf:31:93:bc:25:15:2b:50:3e: 9c:5e:02:53:bb:91:d2:e3:e3:d3:3f:42:64:84:f3:9f:6b:41: 80:9d:9a:ea:dc:16:19:0d:e8:84:27:23:8a:02:72:74:eb:14: b9:1c:86:9e:ee:31:38:2d:1b:20:48:e8:33:13:99:bb:48:16: 09:df:1c:64:0f:dc:e3:97:17:cf:23:83:6a:4d:54:ec:b1:45: 9b:e8:ec:de:bc:7e:fa:e8:2b:bf:37:ac:db:2e:d4:39:e6:58: 50:95:ab:c7:fe:71:00:80:f5:e1:40:11:cf:d6:f5:1d:ad:8a: 1e:d7:d6:e8:90:be:9e:24:d3:15:0b:18:ee:5c:ed:e5:87:e5: ba:1d:5c:ab:3a:2e:70:e5:e9:f9:53:1d:d8:3e:f1:db:28:2c: 89:25:6f:80:d7:71:58:db:08:a9:21:2f:dc:29:cf:21:67:d8: e6:c2:b2:c5:63:eb:06:38:d2:f3:70:f0:da:c5:5c:68:d0:1c: b2:0c:76:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/t18zASV9yP+h1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTc0OFoXDTI0MDYxOTIxMTc0OFowLzEtMCsGA1UEAxMk NmRkMGY1YWItOWQzMi00ZDcxLTg0MGUtZWQwMGIwZWE2NDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinYaP02f3EWj0UMfwag4o+4dX+7WTpc5erlq Fawq28GZHvF+n5+eyxCeiCAmNbqQpriPCdNCJKlduzXbIpeJZwYWgKp8SgwJ7KAO Wx18ll4l+HrQo9383FQbGY8GXW49nkeNnApNLBl3MU3bmiTG1OggqcgXsp3h23za 23h0eG1zy/bLqjXL51JOxGpaIcI3+kxXneiqw8F9Lyn5Riktz03zKrwholV4cGdS yV33vqHi0BJWIlf4awveWxpPOeFQeGOxwzaUQMMmuAq/oFR9CUXtqfsvIrwdpjdX viV7JChoK9G6qlql8UTONaDmJLtR/nT5ts5DxWw9TBnaSTUK+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQtTqM286Xxbd4WRQ/GelewhF0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjgxOTNhZGUtMjIwMC0z OGU0LTk5MzYtZTBjMThjM2Y1NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJI9E8i6IDT9Tkqt+cHruuR+1Dk3myaLsUNy7SiihHchOSmB0DqFgeR qFyq8eP+rzWz1QW4WfmbYFnvpJY5AL8xk7wlFStQPpxeAlO7kdLj49M/QmSE859r QYCdmurcFhkN6IQnI4oCcnTrFLkchp7uMTgtGyBI6DMTmbtIFgnfHGQP3OOXF88j g2pNVOyxRZvo7N68fvroK783rNsu1DnmWFCVq8f+cQCA9eFAEc/W9R2tih7X1uiQ vp4k0xULGO5c7eWH5bodXKs6LnDl6flTHdg+8dsoLIklb4DXcVjbCKkhL9wpzyFn 2ObCssVj6wY40vNw8NrFXGjQHLIMdmY= -----END CERTIFICATE-----Generated at Mon May 6 08:08:34 2024 by rpki-client on console-ams.rpki-client.org