$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c6bbab6-d653-3dc5-83e0-0020704eb558.roa File: 3c6bbab6-d653-3dc5-83e0-0020704eb558.roa (raw, json) Hash identifier: MHgKtYu6IJZSZXkmNXoj/3bhlc1+WhmEqjXfmXbbzJM= Subject key identifier: 5B:0F:B7:D9:64:92:1B:88:11:26:B4:EE:11:BD:7D:0B:DF:F3:13:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4EF87F395A4C6AEA60B20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c6bbab6-d653-3dc5-83e0-0020704eb558.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 19527 IP address blocks: 35.207.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:ef:87:f3:95:a4:c6:ae:a6:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=7b9427e6-1ef4-4cb0-91cc-30fe5a19b4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:b9:40:bb:7f:42:3e:35:50:56:2f:67:7a: 28:00:76:30:0f:0c:76:8e:fb:cf:86:70:d9:47:76: fa:ef:27:68:2e:9f:42:f4:d1:f4:5e:3c:42:ea:ec: c4:a4:3c:b8:9b:c8:e4:d0:26:15:59:65:9e:38:48: 4a:3f:1b:33:36:a3:92:64:89:79:ca:3c:68:34:94: de:ce:04:29:b6:d5:c6:f4:43:64:15:cb:35:f2:b5: 0e:bb:58:ca:ae:da:c5:bc:a1:99:ff:11:ad:37:0a: 46:4d:40:a8:1b:74:e2:ac:c7:55:3b:2a:eb:3e:37: ab:d9:f2:ec:17:ae:c0:e2:7f:ae:a3:b1:b9:b2:91: a1:a5:6d:ea:8a:d2:a6:c1:bb:7f:5c:7d:ff:e3:24: dd:8d:67:66:36:53:80:fa:a2:ae:c5:84:1e:33:84: 90:c4:b1:4b:02:c9:95:12:41:5b:69:2a:84:02:b3: 96:d5:76:0f:2c:f9:f6:74:19:1f:ba:fb:8f:6e:86: e5:cd:7b:7d:a5:f1:67:16:73:ba:4b:b9:8b:a0:73: 5d:ed:d3:70:60:c5:a0:ab:d6:30:37:77:20:af:43: 22:c5:72:b7:e8:c1:4d:fc:67:6c:a0:4e:ef:43:02: bd:70:67:4b:92:04:5f:6c:d2:3c:c7:56:16:ee:41: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:B7:D9:64:92:1B:88:11:26:B4:EE:11:BD:7D:0B:DF:F3:13:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c6bbab6-d653-3dc5-83e0-0020704eb558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.207.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cb:8c:83:9b:75:0d:5a:3b:8b:25:0f:f2:af:ea:ff:b4:f2: 6c:bf:c5:9a:b1:3f:39:99:40:9b:30:16:85:d5:e1:e2:4c:d9: f8:88:7e:46:06:e5:49:e1:80:4f:99:ef:12:99:a1:67:d7:4c: 40:14:7e:ca:60:5a:30:0f:8f:60:f5:2c:2b:ce:88:49:4b:cd: 3a:b4:9f:cf:82:fc:cd:b4:52:ef:b7:c1:4f:67:74:b8:a5:19: 04:cd:18:36:5e:e2:e6:58:47:6b:91:af:48:b1:75:7e:32:0d: e7:d9:e1:95:82:47:7c:34:54:55:fd:93:8a:01:13:63:84:8e: 59:55:d9:4e:b3:05:5d:14:6a:13:c5:85:0b:95:85:a0:6a:f8: 1e:9e:60:40:9b:71:4c:b7:29:95:7e:25:e4:f1:91:67:bc:62: 85:fd:02:0f:4d:4c:b6:29:2b:51:92:c2:3f:4a:ad:d1:f0:ba: b0:b7:d1:a1:f9:70:a8:57:7a:80:e7:b0:02:f3:f2:b4:3a:70: 25:6f:94:f0:61:7d:6a:03:d5:dc:b5:ac:d6:67:93:6e:6b:49: b1:9d:d5:48:0b:04:c4:3f:44:59:85:5e:5a:17:e6:4d:ab:52: ac:32:78:08:02:d5:7b:26:c7:1c:e5:36:fe:85:d8:8c:ed:8d: ba:b6:e1:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9O+H85Wkxq6mCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk N2I5NDI3ZTYtMWVmNC00Y2IwLTkxY2MtMzBmZTVhMTliNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsS5QLt/Qj41UFYvZ3ooAHYwDwx2jvvPhnDZ R3b67ydoLp9C9NH0XjxC6uzEpDy4m8jk0CYVWWWeOEhKPxszNqOSZIl5yjxoNJTe zgQpttXG9ENkFcs18rUOu1jKrtrFvKGZ/xGtNwpGTUCoG3TirMdVOyrrPjer2fLs F67A4n+uo7G5spGhpW3qitKmwbt/XH3/4yTdjWdmNlOA+qKuxYQeM4SQxLFLAsmV EkFbaSqEArOW1XYPLPn2dBkfuvuPboblzXt9pfFnFnO6S7mLoHNd7dNwYMWgq9Yw N3cgr0MixXK36MFN/GdsoE7vQwK9cGdLkgRfbNI8x1YW7kFFAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsPt9lkkhuIESa07hG9fQvf8xNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2M2YmJhYjYtZDY1My0z ZGM1LTgzZTAtMDAyMDcwNGViNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI8/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHLjIObdQ1aO4slD/Kv6v+08my/xZqxPzmZQJswFoXV4eJM2fiIfkYG 5UnhgE+Z7xKZoWfXTEAUfspgWjAPj2D1LCvOiElLzTq0n8+C/M20Uu+3wU9ndLil GQTNGDZe4uZYR2uRr0ixdX4yDefZ4ZWCR3w0VFX9k4oBE2OEjllV2U6zBV0UahPF hQuVhaBq+B6eYECbcUy3KZV+JeTxkWe8YoX9Ag9NTLYpK1GSwj9KrdHwurC30aH5 cKhXeoDnsALz8rQ6cCVvlPBhfWoD1dy1rNZnk25rSbGd1UgLBMQ/RFmFXloX5k2r UqwyeAgC1XsmxxzlNv6F2Iztjbq24Z4= -----END CERTIFICATE-----