$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa File: 2ab519a8-30a7-3662-b133-9a4028e98d2d.roa (raw, json) Hash identifier: OcDOAdJ9t6xi1Qe4a0H8SbaXu7+/p15eqidyJ7I/6os= Subject key identifier: F4:7E:1A:5D:95:C6:AB:76:EE:20:17:45:79:B5:1C:33:DE:DF:4A:91 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4E23FEDDCFCFD3C481200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.99.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:e2:3f:ed:dc:fc:fd:3c:48:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=7ed2d8e2-fa98-48f6-9eb1-b54b5100094a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:65:6a:70:d9:e1:cf:e5:e6:a4:a8:c0:ed: d0:e2:72:f7:ac:00:25:93:36:7d:87:9b:f8:0a:06: 42:13:bc:79:04:9d:eb:eb:5b:04:33:83:f8:f9:29: ec:66:82:31:d7:67:ba:81:70:4d:23:e1:47:64:01: bc:c6:c4:ce:3e:3e:31:5e:64:0f:a5:96:8d:25:84: c7:1a:ce:93:28:28:10:42:a9:18:d7:f9:23:ab:24: ac:24:03:8a:f8:33:f0:a0:42:41:6f:df:70:6f:a9: c8:1e:cb:aa:12:fc:c5:37:46:b0:4a:27:82:44:03: 0f:f2:c9:dc:8d:37:0f:9f:29:38:65:a7:6e:98:70: bf:c1:3a:64:8e:bb:e8:a1:6e:ec:18:83:c3:24:37: 6f:7c:64:23:c6:70:ca:fc:bb:23:0d:86:ee:ca:e1: 04:2d:47:7e:83:8b:dd:cf:7c:8d:2d:df:fe:ef:93: da:aa:a1:1b:92:94:3c:cc:b7:f6:4b:2f:af:9f:71: ce:65:7c:49:6e:85:e5:11:ba:1e:b3:53:72:21:ac: b5:cd:1e:ab:b6:90:a6:2f:17:92:52:f6:98:ed:dd: 0b:9b:19:ca:ba:00:b7:e6:b3:1b:93:a9:40:bb:47: 47:fa:74:d2:45:1d:61:5e:7a:47:a3:97:b7:68:ac: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:1A:5D:95:C6:AB:76:EE:20:17:45:79:B5:1C:33:DE:DF:4A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:93:b8:de:49:5f:db:96:87:56:ff:15:3b:94:84:c3:2a:4e: e6:08:4d:8d:d1:ac:45:2d:e0:72:b1:c7:32:e3:07:10:19:86: 92:11:e7:1d:9e:f2:dc:e8:bc:85:2b:bb:01:61:00:4b:55:2b: 80:42:b6:2e:93:50:1f:5b:16:d6:66:3c:17:a8:4c:6e:66:a1: ba:04:a4:87:4d:0a:2e:96:3b:11:3d:16:fe:1e:fb:0a:b3:2d: f9:84:12:1e:26:1d:c9:23:91:e9:21:fc:06:de:22:c1:22:2d: f9:e4:37:3e:a2:91:28:82:df:c1:93:6b:93:8e:2b:69:23:d8: f1:17:1c:b6:6c:b2:29:b9:53:6d:2f:c2:c5:18:48:72:9f:31: 3f:ea:a0:db:1c:19:c3:19:86:a4:8b:ee:9b:91:da:5b:f6:d4: ed:10:52:b4:4a:55:d8:c5:83:ea:bd:d8:48:50:b2:fe:8a:d6: 7a:1d:69:bf:0b:04:8f:90:68:f6:0f:64:3d:0e:f5:5d:be:49: b7:e3:cb:65:1c:3f:32:0b:49:15:fe:24:4a:b4:5b:d0:17:f3: b1:5c:2a:e2:2f:80:9a:47:36:9f:28:a8:fe:07:cc:60:d1:64: c0:5b:3b:16:5d:ea:5d:b3:d2:d2:0d:ab:e1:47:f0:2b:f0:5a: 83:16:b3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9OI/7dz8/TxIEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk N2VkMmQ4ZTItZmE5OC00OGY2LTllYjEtYjU0YjUxMDAwOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFxlanDZ4c/l5qSowO3Q4nL3rAAlkzZ9h5v4 CgZCE7x5BJ3r61sEM4P4+SnsZoIx12e6gXBNI+FHZAG8xsTOPj4xXmQPpZaNJYTH Gs6TKCgQQqkY1/kjqySsJAOK+DPwoEJBb99wb6nIHsuqEvzFN0awSieCRAMP8snc jTcPnyk4ZadumHC/wTpkjrvooW7sGIPDJDdvfGQjxnDK/LsjDYbuyuEELUd+g4vd z3yNLd/+75PaqqEbkpQ8zLf2Sy+vn3HOZXxJboXlEboes1NyIay1zR6rtpCmLxeS UvaY7d0LmxnKugC35rMbk6lAu0dH+nTSRR1hXnpHo5e3aKzlYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR+Gl2Vxqt27iAXRXm1HDPe30qRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmFiNTE5YTgtMzBhNy0z NjYyLWIxMzMtOWE0MDI4ZTk4ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiTuN5JX9uWh1b/FTuUhMMqTuYITY3RrEUt4HKxxzLjBxAZhpIR5x2e 8tzovIUruwFhAEtVK4BCti6TUB9bFtZmPBeoTG5moboEpIdNCi6WOxE9Fv4e+wqz LfmEEh4mHckjkekh/AbeIsEiLfnkNz6ikSiC38GTa5OOK2kj2PEXHLZssim5U20v wsUYSHKfMT/qoNscGcMZhqSL7puR2lv21O0QUrRKVdjFg+q92EhQsv6K1nodab8L BI+QaPYPZD0O9V2+Sbfjy2UcPzILSRX+JEq0W9AX87FcKuIvgJpHNp8oqP4HzGDR ZMBbOxZd6l2z0tINq+FH8CvwWoMWszU= -----END CERTIFICATE-----Generated at Mon Nov 25 03:32:48 2024 by rpki-client on console-fra.rpki-client.org