$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42559ff2-4f78-35f9-ba30-fc2c0d214986.roa File: 42559ff2-4f78-35f9-ba30-fc2c0d214986.roa (raw, json) Hash identifier: 357qdulfz7II+7m4mDiQNHNazSeupCRmuC9FtnUeWqE= Subject key identifier: D8:44:AB:DE:D2:1D:9D:75:BE:0F:C8:31:1C:4D:B6:89:C6:A2:1D:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F51D4700844B537CF83F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42559ff2-4f78-35f9-ba30-fc2c0d214986.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.125.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:1d:47:00:84:4b:53:7c:f8:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=3d9b39c0-85b0-4ebc-820c-0b7e5cfee7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:ac:54:63:4d:1b:09:13:e5:dc:ff:67:25: a8:da:f3:1f:96:27:9f:5d:99:70:4d:9e:d5:99:e0: d5:a6:bd:e5:e3:2b:1d:84:44:5a:b4:20:10:26:b1: 8c:4e:70:10:78:5f:ea:33:be:a9:98:89:f0:51:2c: 29:e4:a8:ab:79:ff:0f:53:7e:29:83:dc:0f:03:7f: 43:5e:96:79:32:b5:8b:b6:99:c6:e1:45:ce:cd:9d: 26:5c:36:3e:55:10:20:39:12:09:51:d1:5b:d4:9e: 2a:e8:03:d4:ad:63:db:61:b8:88:ff:a5:9e:cf:89: bb:aa:12:32:b1:20:68:7a:1a:43:03:56:e6:50:10: 1b:8d:fe:ab:30:48:ed:e4:f7:24:90:9b:4b:d5:6a: 6e:5e:5c:0e:59:e8:6e:d5:e1:39:40:68:12:c8:43: 17:ef:b1:1b:ee:c3:dc:38:b4:53:9f:3a:c0:6f:e5: 51:ae:cd:e1:60:86:54:cc:77:28:07:e4:ff:23:4d: 08:cf:98:16:49:89:09:94:59:cb:d3:31:01:6c:87: bf:1e:ef:7c:88:c5:de:29:5d:c5:46:b4:57:20:1e: 1b:92:73:29:e5:7a:42:1c:03:c6:01:0e:b1:f5:78: 0c:91:ff:50:1d:89:0b:c0:6f:47:dd:48:7e:9e:65: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:44:AB:DE:D2:1D:9D:75:BE:0F:C8:31:1C:4D:B6:89:C6:A2:1D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42559ff2-4f78-35f9-ba30-fc2c0d214986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a0:6e:95:a0:64:9a:d1:93:ea:bc:72:43:1f:7d:c0:40:7a: b9:7c:fc:a5:95:87:5b:2c:7c:bc:e3:d7:45:5c:d2:9b:7e:cd: ba:33:59:52:68:f3:f2:7e:d9:7f:8f:8d:ab:9c:b0:ac:47:e0: fa:85:ff:a2:9a:16:83:4b:34:34:4f:a5:13:9f:ab:61:b0:bc: f8:da:62:dc:be:96:81:bb:b4:bc:45:a5:0d:22:b6:f4:88:a2: 6b:56:6b:16:a3:79:2d:9a:5d:24:47:ec:7e:e6:68:83:dd:97: 0c:c3:57:c8:41:59:08:af:e2:08:53:fb:c3:7a:6f:20:74:a9: 22:87:7f:7a:5e:cd:67:b9:57:3f:2b:a2:9d:5d:e2:d8:57:ec: fb:22:a2:e5:e0:53:4f:99:5f:2c:e7:4b:ec:fa:4a:f2:74:4c: d5:81:e2:e9:23:23:e4:4f:be:15:98:82:f7:d5:27:78:f4:5b: 45:2c:3c:aa:99:9a:db:b4:69:2a:3c:23:21:05:30:0f:88:2d: 9b:53:e2:5f:7d:3d:ae:b4:d0:a0:7c:4f:a3:5d:81:bd:22:da: c0:cf:20:86:c9:af:40:79:f6:29:ef:92:ad:93:4e:cf:e7:9a: c8:b2:22:d6:4c:d2:74:36:d9:17:2b:e8:18:c1:2e:f5:1e:7d: 83:71:fb:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9R1HAIRLU3z4P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk M2Q5YjM5YzAtODViMC00ZWJjLTgyMGMtMGI3ZTVjZmVlN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIKsVGNNGwkT5dz/ZyWo2vMfliefXZlwTZ7V meDVpr3l4ysdhERatCAQJrGMTnAQeF/qM76pmInwUSwp5Kiref8PU34pg9wPA39D XpZ5MrWLtpnG4UXOzZ0mXDY+VRAgORIJUdFb1J4q6APUrWPbYbiI/6Wez4m7qhIy sSBoehpDA1bmUBAbjf6rMEjt5PckkJtL1WpuXlwOWehu1eE5QGgSyEMX77Eb7sPc OLRTnzrAb+VRrs3hYIZUzHcoB+T/I00Iz5gWSYkJlFnL0zEBbIe/Hu98iMXeKV3F RrRXIB4bknMp5XpCHAPGAQ6x9XgMkf9QHYkLwG9H3Uh+nmXF1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhEq97SHZ11vg/IMRxNtonGoh3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDI1NTlmZjItNGY3OC0z NWY5LWJhMzAtZmMyYzBkMjE0OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmgbpWgZJrRk+q8ckMffcBAerl8/KWVh1ssfLzj10Vc0pt+zbozWVJo 8/J+2X+PjaucsKxH4PqF/6KaFoNLNDRPpROfq2GwvPjaYty+loG7tLxFpQ0itvSI omtWaxajeS2aXSRH7H7maIPdlwzDV8hBWQiv4ghT+8N6byB0qSKHf3pezWe5Vz8r op1d4thX7PsiouXgU0+ZXyznS+z6SvJ0TNWB4ukjI+RPvhWYgvfVJ3j0W0UsPKqZ mtu0aSo8IyEFMA+ILZtT4l99Pa600KB8T6Ndgb0i2sDPIIbJr0B59invkq2TTs/n msiyItZM0nQ22Rcr6BjBLvUefYNx++0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:44 2024 by rpki-client on console-ams.rpki-client.org