$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa File: a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa (raw, json) Hash identifier: k7+/dIPQ3Jetg4QD/w9oEFkgMYhlaCJN3/tiOntTHEI= Subject key identifier: C9:DF:A5:62:66:DE:32:35:99:42:42:E6:64:7B:B4:76:EA:2C:14:35 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845490AC61586F32596990C3840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa Signing time: Thu 21 Mar 2024 21:41:48 +0000 ROA not before: Thu 21 Mar 2024 21:41:48 +0000 ROA not after: Wed 19 Jun 2024 21:41:48 +0000 asID: 15169 IP address blocks: 34.3.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0a:c6:15:86:f3:25:96:99:0c:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:41:48 2024 GMT Not After : Jun 19 21:41:48 2024 GMT Subject: CN=e9ffe8ef-a660-42c9-8e96-a7e45348caaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:55:04:df:4f:46:ff:4a:5c:87:49:e7:1f: 89:8e:84:14:36:ce:86:c1:22:96:8a:f8:32:76:e8: 12:fd:ba:63:1f:bf:87:79:c0:51:a8:77:90:3d:33: 6a:cc:22:d1:64:0c:bb:f7:f1:48:e2:8b:f9:f0:3d: 6e:ba:b4:c2:c7:58:0f:63:b7:52:8e:ac:6b:30:34: 02:bc:d9:76:fc:62:0f:af:06:54:8d:2f:71:ac:40: f2:76:3e:97:5f:2a:08:58:f1:89:d5:41:78:3e:a6: 93:5e:50:aa:10:e3:1d:7d:4b:11:84:d6:f4:3c:19: c2:3a:f2:b0:88:a0:dc:e0:fa:a1:29:f5:b8:3c:a3: 64:f3:cf:fc:1f:05:d4:d0:ea:d3:1c:72:3c:73:0d: a4:e3:8a:b0:42:d7:64:61:0e:73:e8:cb:5e:9b:e2: f6:f8:e9:3b:5b:dc:49:10:40:47:72:ef:c6:3d:2a: a5:c7:2b:7c:1f:d0:6a:b3:5a:e2:a3:9d:29:9f:2b: 3d:ba:fd:f6:8c:be:7c:b9:02:c0:f2:c3:65:b9:37: 27:dd:ba:29:de:9f:34:8a:77:da:fc:e8:70:03:70: c8:cf:ea:72:32:30:66:34:46:98:59:b3:69:7e:3b: ba:fe:d1:1d:03:14:8b:14:76:bf:5c:df:ab:f1:95: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DF:A5:62:66:DE:32:35:99:42:42:E6:64:7B:B4:76:EA:2C:14:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.3.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2e:e1:3e:1d:b7:ea:01:62:20:19:30:c5:d6:15:22:49:d7: a7:bc:b9:68:2d:66:a0:f7:c5:2a:9a:c2:54:6a:44:c0:6c:d9: c3:61:12:7d:52:9d:7c:71:4a:06:2b:42:af:07:fb:95:62:1b: 64:26:33:c4:21:39:5b:3b:b8:84:9a:b2:f5:b6:74:09:27:2d: 23:3e:65:40:29:21:75:e2:b8:ea:ff:59:c1:60:aa:0f:97:88: dc:50:74:7a:e9:14:89:c0:ef:71:e3:9e:54:4e:97:fe:a3:d0: 4a:38:b5:ee:fc:2a:46:c3:8e:0f:a1:60:74:45:ec:e4:37:59: ce:07:aa:d7:9f:68:28:5f:c7:04:5c:ea:10:3a:3b:ca:33:79: c1:e2:6d:d1:68:d0:e5:07:43:32:05:f5:fc:79:f3:9e:78:db: d5:12:73:20:4a:12:5b:84:0d:3e:a7:58:67:cd:d8:58:4a:bb: 69:c1:df:53:b7:96:9f:b2:ff:74:54:9e:0e:c5:b3:06:dc:6c: d6:66:1e:3a:d3:b0:a8:9e:0c:99:ad:3c:1d:2d:6a:55:54:76: ff:ae:df:0b:34:50:3f:62:79:54:93:52:e0:68:80:f1:26:b9: 84:59:e8:5f:fa:ba:5a:a0:cb:7b:d5:c6:45:23:b3:11:aa:7b: 3d:2d:d5:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJCsYVhvMllpkMOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxNDE0OFoXDTI0MDYxOTIxNDE0OFowLzEtMCsGA1UEAxMk ZTlmZmU4ZWYtYTY2MC00MmM5LThlOTYtYTdlNDUzNDhjYWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom5VBN9PRv9KXIdJ5x+JjoQUNs6GwSKWivgy dugS/bpjH7+HecBRqHeQPTNqzCLRZAy79/FI4ov58D1uurTCx1gPY7dSjqxrMDQC vNl2/GIPrwZUjS9xrEDydj6XXyoIWPGJ1UF4PqaTXlCqEOMdfUsRhNb0PBnCOvKw iKDc4PqhKfW4PKNk88/8HwXU0OrTHHI8cw2k44qwQtdkYQ5z6Mtem+L2+Ok7W9xJ EEBHcu/GPSqlxyt8H9Bqs1rio50pnys9uv32jL58uQLA8sNluTcn3bop3p80infa /OhwA3DIz+pyMjBmNEaYWbNpfju6/tEdAxSLFHa/XN+r8ZVpAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnfpWJm3jI1mUJC5mR7tHbqLBQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5NmUzYmMtZThhNi0z MTk2LWFmYWYtYTIwYWNmNTM3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYu4T4dt+oBYiAZMMXWFSJJ16e8uWgtZqD3xSqawlRqRMBs2cNhEn1S nXxxSgYrQq8H+5ViG2QmM8QhOVs7uISasvW2dAknLSM+ZUApIXXiuOr/WcFgqg+X iNxQdHrpFInA73HjnlROl/6j0Eo4te78KkbDjg+hYHRF7OQ3Wc4HqtefaChfxwRc 6hA6O8ozecHibdFo0OUHQzIF9fx5855429UScyBKEluEDT6nWGfN2FhKu2nB31O3 lp+y/3RUng7FswbcbNZmHjrTsKieDJmtPB0talVUdv+u3ws0UD9ieVSTUuBogPEm uYRZ6F/6ulqgy3vVxkUjsxGqez0t1bI= -----END CERTIFICATE-----Generated at Fri May 17 21:09:44 2024 by rpki-client on console-ams.rpki-client.org