$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10007a8f-55d3-30ac-8e50-272565b55ef7.roa File: 10007a8f-55d3-30ac-8e50-272565b55ef7.roa (raw, json) Hash identifier: 4un7OpfKL79+vrTdYgC+VvQiBcJ9RfpBG2FbKEBJf8A= Subject key identifier: 8A:40:1A:51:80:C6:D2:8D:A1:DF:A5:38:91:83:40:2D:11:84:AF:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F5036AD59E849AEDCF2780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10007a8f-55d3-30ac-8e50-272565b55ef7.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.148.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:03:6a:d5:9e:84:9a:ed:cf:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=c17c209a-9e2d-4d2b-bb90-acde2b96ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:93:1d:c4:ee:bb:05:70:ac:7a:9d:6c:fd: 5f:2f:40:11:7b:28:20:fe:d4:63:7d:7a:24:93:8f: 08:d2:e2:c5:03:25:8b:c3:56:24:d3:c1:51:47:2c: ae:4b:be:cb:23:d7:10:4d:26:45:61:4a:da:38:2c: f2:3b:e8:f8:f7:7d:ed:49:c0:ed:92:60:21:ae:0f: 9b:ec:30:4e:c9:3d:3d:cb:4a:d7:a6:9b:8c:2d:d6: 02:ca:82:c3:c3:c0:2b:92:0f:31:e0:83:52:3a:5a: 29:0b:d4:f3:9f:80:83:38:66:2a:a0:3e:08:86:f5: 2c:6c:1d:76:33:d4:0a:01:7d:bb:c5:34:76:cd:df: b9:05:d8:21:f6:e6:a7:33:21:7c:95:ea:42:01:ce: 04:83:2d:06:f4:98:b7:77:25:41:e1:97:1d:71:7e: 2d:a3:9f:8e:44:49:ff:0d:ea:51:41:0d:4f:92:f1: 44:cb:41:4b:c6:38:6b:02:00:cd:62:fc:d2:1d:39: 2f:cc:a9:b3:44:a5:c1:ca:95:5c:8a:49:1c:8e:70: 15:5c:2f:07:75:d9:48:66:37:49:a4:c0:05:3b:48: b5:f5:22:30:ae:72:63:00:eb:da:c2:66:7c:e7:d8: 0e:30:7c:04:96:3b:4e:3c:2a:53:45:6c:9b:fb:c4: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:1A:51:80:C6:D2:8D:A1:DF:A5:38:91:83:40:2D:11:84:AF:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10007a8f-55d3-30ac-8e50-272565b55ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:80:5f:65:87:4c:74:fc:27:41:37:3a:74:94:05:51:1d:db: 5d:51:fe:6a:59:07:85:01:1a:83:4c:fa:9b:8f:72:21:dc:7b: 49:55:df:1f:1a:18:28:50:ff:89:df:45:a2:6b:d3:0c:40:cd: 41:cb:c5:9f:9d:82:a4:12:5a:f5:56:90:0a:f9:5b:85:45:5f: 67:ea:2a:dc:9a:1f:08:fa:a3:51:3c:92:ab:01:3d:bc:9d:d5: f7:0d:22:b4:78:6f:fe:e5:eb:9a:4d:ec:91:c0:93:3e:62:b6: 43:69:cc:d0:73:2c:3e:7b:43:69:2e:a0:c6:43:78:7f:62:5f: d1:a8:b3:1c:4c:d9:8a:03:ce:45:85:8a:94:08:67:cb:29:1a: d4:65:4b:20:87:93:94:10:2d:4e:13:36:9c:1b:fa:46:66:d2: 91:4e:ea:95:ab:71:e9:3a:da:dc:cc:ea:ca:1a:e1:0a:49:51: 04:53:f2:dc:4e:18:0d:87:e6:4b:fe:7c:ef:96:c2:10:9a:18: 1b:bd:78:69:18:63:6b:ee:f0:45:cf:3d:96:b8:d9:54:ba:7e: 66:17:56:51:a7:87:d9:f7:f5:93:4e:5a:f8:76:da:1d:80:71: 03:c1:05:74:79:cd:12:a8:a6:e4:27:bf:d9:95:45:a2:95:cd: fa:30:82:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QNq1Z6Emu3PJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YzE3YzIwOWEtOWUyZC00ZDJiLWJiOTAtYWNkZTJiOTZkZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbaTHcTuuwVwrHqdbP1fL0AReygg/tRjfXok k48I0uLFAyWLw1Yk08FRRyyuS77LI9cQTSZFYUraOCzyO+j4933tScDtkmAhrg+b 7DBOyT09y0rXppuMLdYCyoLDw8Arkg8x4INSOlopC9Tzn4CDOGYqoD4IhvUsbB12 M9QKAX27xTR2zd+5Bdgh9uanMyF8lepCAc4Egy0G9Ji3dyVB4ZcdcX4to5+OREn/ DepRQQ1PkvFEy0FLxjhrAgDNYvzSHTkvzKmzRKXBypVcikkcjnAVXC8HddlIZjdJ pMAFO0i19SIwrnJjAOvawmZ859gOMHwEljtOPCpTRWyb+8TVVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpAGlGAxtKNod+lOJGDQC0RhK8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTAwMDdhOGYtNTVkMy0z MGFjLThlNTAtMjcyNTY1YjU1ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKAX2WHTHT8J0E3OnSUBVEd211R/mpZB4UBGoNM+puPciHce0lV3x8a GChQ/4nfRaJr0wxAzUHLxZ+dgqQSWvVWkAr5W4VFX2fqKtyaHwj6o1E8kqsBPbyd 1fcNIrR4b/7l65pN7JHAkz5itkNpzNBzLD57Q2kuoMZDeH9iX9GosxxM2YoDzkWF ipQIZ8spGtRlSyCHk5QQLU4TNpwb+kZm0pFO6pWrcek62tzM6soa4QpJUQRT8txO GA2H5kv+fO+WwhCaGBu9eGkYY2vu8EXPPZa42VS6fmYXVlGnh9n39ZNOWvh22h2A cQPBBXR5zRKopuQnv9mVRaKVzfowgrs= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:04 2024 by rpki-client on console-fra.rpki-client.org