$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa File: ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa (raw, json) Hash identifier: jvI5eWeIFX5T0GBJ8bmTFTUsJ9sSJikA0FpvHRESsWs= Subject key identifier: 11:0D:90:65:72:21:5F:9E:EA:9F:46:65:89:B6:35:0C:63:39:C3:64 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FC51FF15146A5FAFF08D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa Signing time: Thu 21 Mar 2024 21:12:40 +0000 ROA not before: Thu 21 Mar 2024 21:12:40 +0000 ROA not after: Wed 19 Jun 2024 21:12:40 +0000 asID: 396982 IP address blocks: 35.243.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fc:51:ff:15:14:6a:5f:af:f0:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:12:40 2024 GMT Not After : Jun 19 21:12:40 2024 GMT Subject: CN=e6138e40-4480-40ce-a803-5dd29e82429a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:0d:f2:84:37:8f:f9:96:ec:e4:d2:27:34: 0d:06:a4:ab:75:47:80:1e:f4:a3:8a:6b:92:cf:e6: 41:f6:ab:fb:9e:9e:8d:fc:01:a4:e1:e9:12:55:57: 13:f8:10:91:a4:13:86:fb:2c:4f:e1:f5:5b:61:3a: ff:41:af:a4:f2:81:55:e0:0f:1f:51:1b:f8:cd:ea: 1f:56:41:1b:55:ba:ca:b4:78:5a:ab:21:7d:99:1a: df:36:93:1e:ad:03:40:41:ce:6f:9c:42:ed:6e:dc: 25:12:33:a6:fd:c1:ec:b8:a4:ed:a2:4f:8e:b1:f0: 52:6f:57:5a:12:75:20:1b:0d:26:61:ad:b9:e7:64: e7:c3:82:82:df:bb:b9:21:bc:42:e0:95:ad:c6:db: 99:a9:af:93:d6:d6:57:03:32:91:d7:92:df:5d:9e: 97:73:74:05:71:db:ed:c9:72:08:e0:6b:c6:72:21: 74:72:88:5c:69:88:d7:ad:96:d7:74:d1:3f:74:3d: 6a:09:fe:88:df:47:d7:1d:5f:12:dc:a3:56:fc:81: c9:3b:90:55:47:66:12:ea:73:99:6b:a2:b5:7b:e4: 83:2f:56:1c:42:92:9c:3a:5b:85:30:32:0e:53:e2: 50:1f:e8:41:95:c9:53:85:86:4f:cd:ea:9a:01:5f: 8a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0D:90:65:72:21:5F:9E:EA:9F:46:65:89:B6:35:0C:63:39:C3:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9a:44:0f:56:ca:a2:92:02:63:64:10:45:3f:d8:8d:ce:22: d2:6b:f0:0f:0c:03:31:96:33:40:db:ed:11:11:4e:c4:1b:8f: 75:8d:e7:b7:37:63:85:0d:52:36:6f:ad:a2:05:a1:84:45:95: a6:0f:25:90:2e:d8:7d:e7:db:a7:69:8a:d2:e6:a5:70:19:37: 16:7f:bd:c3:4e:83:d3:5c:f2:b4:e7:44:e4:79:e4:3c:c1:ce: 20:85:4f:db:02:da:e0:6e:e4:c3:17:32:43:23:28:23:a1:8f: de:a9:62:63:12:1a:0a:bf:f5:48:69:e8:eb:46:2f:2e:4b:05: af:ce:c5:bc:c3:f7:31:0c:7d:ec:43:81:de:e0:0d:1c:9e:0d: 51:ce:24:d9:6d:6c:1a:d2:7d:b1:56:23:14:d0:eb:dd:69:ef: 68:24:4a:73:32:0a:1b:1a:ac:dc:d6:fa:e1:ea:9d:a1:dc:7c: fc:fa:ac:7d:5d:8d:29:c4:ec:a1:3a:6a:83:df:9f:82:d5:d8: 7e:58:36:ae:cc:6b:6b:89:74:fb:a3:c7:76:58:8d:d4:32:2b: b7:02:12:de:a1:20:8e:59:b5:63:07:25:7f:4d:f8:8c:49:43: 6a:80:c4:55:02:b3:77:b9:2f:4a:80:15:0f:59:5c:f1:54:42: 54:c6:d5:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/FH/FRRqX6/wjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTI0MFoXDTI0MDYxOTIxMTI0MFowLzEtMCsGA1UEAxMk ZTYxMzhlNDAtNDQ4MC00MGNlLWE4MDMtNWRkMjllODI0MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNMN8oQ3j/mW7OTSJzQNBqSrdUeAHvSjimuS z+ZB9qv7np6N/AGk4ekSVVcT+BCRpBOG+yxP4fVbYTr/Qa+k8oFV4A8fURv4zeof VkEbVbrKtHhaqyF9mRrfNpMerQNAQc5vnELtbtwlEjOm/cHsuKTtok+OsfBSb1da EnUgGw0mYa2552Tnw4KC37u5IbxC4JWtxtuZqa+T1tZXAzKR15LfXZ6Xc3QFcdvt yXII4GvGciF0cohcaYjXrZbXdNE/dD1qCf6I30fXHV8S3KNW/IHJO5BVR2YS6nOZ a6K1e+SDL1YcQpKcOluFMDIOU+JQH+hBlclThYZPzeqaAV+K6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBENkGVyIV+e6p9GZYm2NQxjOcNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmYzZDkzNWQtNmFlNS0z M2Y4LWI2Y2YtMGY2MzAwNjQzN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiaRA9WyqKSAmNkEEU/2I3OItJr8A8MAzGWM0Db7RERTsQbj3WN57c3 Y4UNUjZvraIFoYRFlaYPJZAu2H3n26dpitLmpXAZNxZ/vcNOg9Nc8rTnROR55DzB ziCFT9sC2uBu5MMXMkMjKCOhj96pYmMSGgq/9Uhp6OtGLy5LBa/OxbzD9zEMfexD gd7gDRyeDVHOJNltbBrSfbFWIxTQ691p72gkSnMyChsarNzW+uHqnaHcfPz6rH1d jSnE7KE6aoPfn4LV2H5YNq7Ma2uJdPujx3ZYjdQyK7cCEt6hII5ZtWMHJX9N+IxJ Q2qAxFUCs3e5L0qAFQ9ZXPFUQlTG1QA= -----END CERTIFICATE-----Generated at Mon May 6 08:08:36 2024 by rpki-client on console-ams.rpki-client.org