$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa File: 323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa (raw, json) Hash identifier: Sh5jhm1XYjDdR3Esldh5oM3YCGJrOrCJzFx+sW51jd4= Subject key identifier: 61:11:19:1A:EA:D0:06:43:15:1A:BA:58:3E:AB:CA:56:21:CC:BB:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E094C7EB4983B9BFA7312C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 396982 IP address blocks: 130.211.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:c7:eb:49:83:b9:bf:a7:31:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=d81bb37b-153b-491e-802b-961705b5ca26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:a3:a7:c4:b2:67:71:c7:e1:11:72:8b:85: 98:dc:18:87:21:d7:39:ba:89:03:9d:fc:9b:0e:d0: 2c:d5:f3:0b:b4:3f:c3:ad:6e:f7:c0:5a:dd:84:26: f0:a1:5a:53:91:56:ee:fa:3d:30:9c:9f:8f:a3:ad: cd:6d:31:25:b3:6d:9b:a6:ff:ca:0a:65:2f:50:8e: ae:cb:2f:d3:0f:92:db:a0:2d:e8:03:5b:4b:a1:7a: 5d:71:7a:e0:dc:ce:53:21:87:98:01:42:07:20:06: ed:9c:59:a4:61:55:44:5a:40:4b:b4:0f:86:ca:21: 05:73:66:2c:33:d4:01:ef:b5:e7:60:a4:6b:33:11: 61:54:80:75:ed:7b:57:cf:68:1b:36:da:2c:1b:8f: 67:d8:6c:01:0b:57:e9:fb:71:81:d6:d7:d6:57:34: ba:c9:90:cf:0e:9f:ca:2f:8a:8d:78:59:7e:c2:72: 9b:0d:3b:a2:72:c1:d2:94:26:0d:2b:13:da:a8:46: b6:a3:cf:f6:43:bf:3b:3f:fa:2f:5c:a6:f7:1a:d1: 6a:b5:23:b4:89:d0:8e:5e:6c:30:75:b5:4c:cd:e4: e1:8d:63:df:ac:26:8e:ae:b5:08:98:f7:d9:9b:a5: 21:07:f2:b7:25:ae:06:f7:31:e2:64:4c:2f:5f:cc: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:11:19:1A:EA:D0:06:43:15:1A:BA:58:3E:AB:CA:56:21:CC:BB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a7:1a:3a:1e:94:28:a5:d7:09:d1:89:33:c2:08:06:b8:2b: 06:b6:e6:68:d1:53:27:63:42:d3:97:cd:c9:90:56:d7:c6:b8: b1:b3:08:9c:1a:ef:df:be:f6:ab:c1:2f:83:b0:57:da:f9:03: 7a:e7:a3:22:4e:f6:18:e1:80:fa:6b:6b:93:07:c6:52:65:25: 0e:eb:75:31:c2:54:d1:d8:3d:04:ba:25:4e:a2:85:12:01:80: 8e:1d:7d:9c:bc:f4:4a:b6:4d:4e:8c:f7:e1:bd:48:31:23:12: d0:91:70:38:59:3e:b3:1d:99:1e:55:db:6f:f2:72:b0:69:7a: c0:63:2f:67:7e:a0:c3:c8:6f:e5:9a:52:f1:aa:29:d5:e8:45: 05:d2:a2:00:dd:26:67:d4:af:14:fe:22:58:49:9c:22:46:8f: cf:9f:d9:a2:71:b2:7c:96:1b:d0:74:77:ba:8a:fd:68:5c:0d: 4c:43:e5:65:af:a1:13:fa:ca:00:31:23:f1:70:b7:41:df:6f: 83:87:65:82:cd:1a:99:d7:65:51:55:d4:d6:6f:17:25:a1:d0: d0:d2:df:81:e6:23:ff:4a:82:b6:af:23:99:b3:b3:9e:5d:f2: 34:8b:a6:c3:4d:ab:38:a6:09:7e:6f:97:4a:32:50:e7:f7:60: 36:b3:61:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMfrSYO5v6cxLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDgxYmIzN2ItMTUzYi00OTFlLTgwMmItOTYxNzA1YjVjYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvOjp8SyZ3HH4RFyi4WY3BiHIdc5uokDnfyb DtAs1fMLtD/DrW73wFrdhCbwoVpTkVbu+j0wnJ+Po63NbTEls22bpv/KCmUvUI6u yy/TD5LboC3oA1tLoXpdcXrg3M5TIYeYAUIHIAbtnFmkYVVEWkBLtA+GyiEFc2Ys M9QB77XnYKRrMxFhVIB17XtXz2gbNtosG49n2GwBC1fp+3GB1tfWVzS6yZDPDp/K L4qNeFl+wnKbDTuicsHSlCYNKxPaqEa2o8/2Q787P/ovXKb3GtFqtSO0idCOXmww dbVMzeThjWPfrCaOrrUImPfZm6UhB/K3Ja4G9zHiZEwvX8xX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGERGRrq0AZDFRq6WD6rylYhzLtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzIzZDNjZmItYjljZS0z NGM5LWJjZTQtMTE5YTMwMGU4YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgtMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGenGjoelCil1wnRiTPCCAa4Kwa25mjRUydjQtOXzcmQVtfGuLGzCJwa 79++9qvBL4OwV9r5A3rnoyJO9hjhgPpra5MHxlJlJQ7rdTHCVNHYPQS6JU6ihRIB gI4dfZy89Eq2TU6M9+G9SDEjEtCRcDhZPrMdmR5V22/ycrBpesBjL2d+oMPIb+Wa UvGqKdXoRQXSogDdJmfUrxT+IlhJnCJGj8+f2aJxsnyWG9B0d7qK/WhcDUxD5WWv oRP6ygAxI/Fwt0Hfb4OHZYLNGpnXZVFV1NZvFyWh0NDS34HmI/9KgravI5mzs55d 8jSLpsNNqzimCX5vl0oyUOf3YDazYSs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:40 2024 by rpki-client on console-ams.rpki-client.org