$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a952c2-fa95-3fe0-a70f-168e302d4702.roa File: 37a952c2-fa95-3fe0-a70f-168e302d4702.roa (raw, json) Hash identifier: QavZWbzrc+YC3pRrRK2DD8eYOUzIKdZBTINyKP+Mq2o= Subject key identifier: 1B:E2:CF:53:10:5A:99:C4:06:D5:F9:11:FE:E9:BA:71:1D:C6:54:BD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F52F968366183810F9D240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a952c2-fa95-3fe0-a70f-168e302d4702.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.140.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:2f:96:83:66:18:38:10:f9:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=52b86927-e14b-48a7-9b72-4bf4660208e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:c2:f6:d1:b0:f3:32:74:d6:71:d7:fc:e8: da:cd:b0:ee:18:29:25:ab:de:e7:f4:90:3d:ed:41: ec:9e:3a:74:fa:f3:0c:9f:85:2f:4c:cc:b8:27:9e: cf:3d:de:a9:aa:03:98:43:5e:d6:8d:73:0c:12:e4: 1b:1d:53:a3:58:66:ca:cd:69:d5:bd:7c:ad:ab:2d: 53:cb:06:8d:90:54:e6:2d:3b:aa:76:f5:fb:00:f6: 98:a1:1f:75:e6:d5:31:d1:ed:e0:bd:b7:eb:13:99: c2:75:f0:1c:f0:58:0a:ff:0e:5b:0c:ec:0a:c1:32: 70:ff:60:90:e1:9f:6d:1e:17:10:d3:b1:34:fc:d5: 6a:1d:f5:eb:48:82:11:25:af:c1:2b:91:35:94:5c: bc:0e:a4:eb:ff:be:81:6b:ba:1b:2e:23:73:d0:1d: 89:2e:9f:26:62:0e:a1:fc:06:f7:96:a2:eb:2a:60: 4a:c3:b9:78:7f:93:82:8f:75:46:96:bd:2f:81:da: 98:a6:43:d4:62:63:62:09:28:e0:6d:50:85:78:95: 94:e6:0e:1d:c3:6f:3b:7f:57:18:98:74:5c:78:16: 0c:51:12:41:88:ab:77:1c:23:d4:25:e8:c3:a9:bc: 2b:3c:ce:99:aa:eb:d6:ba:59:24:3d:3e:39:71:b0: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E2:CF:53:10:5A:99:C4:06:D5:F9:11:FE:E9:BA:71:1D:C6:54:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a952c2-fa95-3fe0-a70f-168e302d4702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:57:7e:99:38:1f:f0:2e:4b:26:40:4b:dd:8d:28:8b:70:78: 63:fd:86:a0:a6:80:20:81:94:25:44:e5:d8:fa:01:8e:fb:56: 17:05:b9:f0:dc:73:a8:62:90:d5:bd:1e:7b:15:df:44:80:a8: 37:ad:3e:1e:14:75:fa:25:24:eb:46:02:df:fd:ff:e5:40:ca: c0:ef:ea:d6:5b:c2:6d:c8:04:be:06:08:9c:5f:51:1d:f9:85: 9f:57:4d:22:f6:f2:34:91:25:dc:98:75:75:b1:0b:46:4c:13: 3e:a4:e2:82:26:bc:74:66:c4:e0:c7:28:30:95:77:ef:32:e3: 36:cc:a7:87:c6:6f:23:3b:b4:77:e1:41:4e:bd:6b:9f:15:f1: f5:37:27:f2:7d:3b:d6:f1:ff:47:da:28:e5:be:70:f8:c3:5b: c1:74:52:c7:f4:6c:d2:2b:22:20:22:9d:3b:11:ca:c7:9f:70: 4c:76:f5:12:58:c1:2b:49:e8:75:31:5c:41:9c:44:f9:3c:8b: da:d8:a9:e4:a9:20:3d:83:c1:d8:96:46:a7:37:92:9a:22:52: 20:ab:b9:75:11:c4:b8:19:c8:c1:dd:fe:02:8d:d3:81:68:2d: eb:14:ae:2a:25:a8:f7:1f:84:c3:f5:2b:e7:a2:f8:63:5d:49: 14:fb:be:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9S+Wg2YYOBD50kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk NTJiODY5MjctZTE0Yi00OGE3LTliNzItNGJmNDY2MDIwOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXLC9tGw8zJ01nHX/OjazbDuGCklq97n9JA9 7UHsnjp0+vMMn4UvTMy4J57PPd6pqgOYQ17WjXMMEuQbHVOjWGbKzWnVvXytqy1T ywaNkFTmLTuqdvX7APaYoR915tUx0e3gvbfrE5nCdfAc8FgK/w5bDOwKwTJw/2CQ 4Z9tHhcQ07E0/NVqHfXrSIIRJa/BK5E1lFy8DqTr/76Ba7obLiNz0B2JLp8mYg6h /Ab3lqLrKmBKw7l4f5OCj3VGlr0vgdqYpkPUYmNiCSjgbVCFeJWU5g4dw287f1cY mHRceBYMURJBiKt3HCPUJejDqbwrPM6ZquvWulkkPT45cbBm9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBviz1MQWpnEBtX5Ef7punEdxlS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzdhOTUyYzItZmE5NS0z ZmUwLWE3MGYtMTY4ZTMwMmQ0NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBXfpk4H/AuSyZAS92NKItweGP9hqCmgCCBlCVE5dj6AY77VhcFufDc c6hikNW9HnsV30SAqDetPh4UdfolJOtGAt/9/+VAysDv6tZbwm3IBL4GCJxfUR35 hZ9XTSL28jSRJdyYdXWxC0ZMEz6k4oImvHRmxODHKDCVd+8y4zbMp4fGbyM7tHfh QU69a58V8fU3J/J9O9bx/0faKOW+cPjDW8F0Usf0bNIrIiAinTsRysefcEx29RJY wStJ6HUxXEGcRPk8i9rYqeSpID2DwdiWRqc3kpoiUiCruXURxLgZyMHd/gKN04Fo LesUriolqPcfhMP1K+ei+GNdSRT7voE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:08:11 2024 by rpki-client on console-fra.rpki-client.org