$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa File: 4867dc89-6f52-3a23-9d9c-4e26531651da.roa (raw, json) Hash identifier: d8xfUbLLcxmQvrZKEzdEdbzxbXbE/GN+ARKFe2Ecmxk= Subject key identifier: 71:1C:27:01:3D:C6:40:54:40:49:6D:4F:BC:8E:A7:2A:76:B9:93:6C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4FCA53285C0179D0D5940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 35.235.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:fc:a5:32:85:c0:17:9d:0d:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=5e6e13f1-0aa2-4f4e-8988-0427679278be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:46:36:b9:2b:d0:41:55:46:33:af:8f:5d: d6:d8:94:97:b2:15:93:fa:4c:c1:f5:9c:d8:a7:be: 92:d2:5e:6e:bc:14:d8:2c:fc:0f:7d:f4:e1:72:88: a9:12:cd:b3:39:0a:bc:51:7d:a8:47:f2:55:32:53: 1b:57:05:5d:ba:6f:4f:be:07:5a:94:31:41:9d:bc: 8a:c1:df:5c:d3:7e:08:89:4a:ca:e9:90:5e:77:3f: e9:39:de:3f:f2:25:af:b2:df:80:9c:3c:41:37:02: 14:9c:39:2e:de:05:4d:ae:34:0a:86:92:a3:6c:f7: 20:43:38:b8:2e:db:e6:34:5e:80:19:a9:d2:4e:ad: 38:62:e8:3b:3e:81:d8:9b:10:33:4c:a1:24:07:a6: 96:f8:ed:da:48:df:3a:c3:9f:60:28:6a:12:bc:63: 07:f2:d1:7e:76:48:7b:93:5c:0e:f4:a0:f6:a9:10: 34:b4:32:e5:a0:90:56:b3:75:55:51:cc:2f:67:50: 0d:27:84:e7:8c:40:12:0d:e4:63:b9:cf:45:d3:47: c0:c5:1d:0e:c8:17:77:d9:ef:84:0a:e0:84:c4:c5: a8:56:28:8f:01:a2:35:14:a9:4e:db:c4:e9:b6:fe: 44:2a:d7:af:e7:15:16:2d:52:98:e0:16:8f:7d:52: 20:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1C:27:01:3D:C6:40:54:40:49:6D:4F:BC:8E:A7:2A:76:B9:93:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ea:c1:fc:30:b2:d1:63:bb:ac:66:1b:52:6d:c8:40:ed:d5: 36:29:7a:72:33:57:3a:ad:21:eb:66:1f:bd:ee:f2:6c:80:b6: f7:5e:18:1c:52:a8:46:c7:bd:2f:4d:64:d8:78:a0:a9:e5:fe: 10:4b:b3:03:ec:41:76:79:28:bd:6f:91:42:12:5d:ba:8b:1e: 77:65:f8:fd:94:bf:bd:8a:43:9f:aa:eb:52:5e:39:5f:b9:c8: 6e:b2:53:a5:92:e8:1b:7e:52:74:6b:b2:ab:cb:89:82:60:50: ea:55:ad:ff:7a:93:7d:06:ee:9c:9f:e1:cf:d9:e9:ac:84:21: da:72:30:46:fb:1a:02:88:ef:37:29:99:d8:4e:4d:a8:66:97: d0:01:82:ab:7b:3f:08:f6:e8:4f:de:b8:30:3d:9c:95:b7:35: 72:c9:15:54:79:ab:7e:20:f9:77:04:9f:b2:b7:ac:9a:bf:6d: 8a:d7:d7:8c:55:97:50:62:b6:a6:47:52:32:67:ad:bc:33:c8: 0f:99:df:6b:b3:c0:16:78:b9:7f:6a:05:4a:ab:7e:99:0f:97: db:fc:47:fd:c1:49:4a:03:20:57:5d:4e:b1:4d:d0:eb:22:0b: bb:36:b3:46:54:66:d4:a7:8e:41:74:75:16:90:fc:9e:58:12: 94:f0:14:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9PylMoXAF50NWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk NWU2ZTEzZjEtMGFhMi00ZjRlLTg5ODgtMDQyNzY3OTI3OGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlulGNrkr0EFVRjOvj13W2JSXshWT+kzB9ZzY p76S0l5uvBTYLPwPffThcoipEs2zOQq8UX2oR/JVMlMbVwVdum9PvgdalDFBnbyK wd9c034IiUrK6ZBedz/pOd4/8iWvst+AnDxBNwIUnDku3gVNrjQKhpKjbPcgQzi4 LtvmNF6AGanSTq04Yug7PoHYmxAzTKEkB6aW+O3aSN86w59gKGoSvGMH8tF+dkh7 k1wO9KD2qRA0tDLloJBWs3VVUcwvZ1ANJ4TnjEASDeRjuc9F00fAxR0OyBd32e+E CuCExMWoViiPAaI1FKlO28Tptv5EKtev5xUWLVKY4BaPfVIg4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEcJwE9xkBUQEltT7yOpyp2uZNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDg2N2RjODktNmY1Mi0z YTIzLTlkOWMtNGUyNjUzMTY1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzqwfwwstFju6xmG1JtyEDt1TYpenIzVzqtIetmH73u8myAtvdeGBxS qEbHvS9NZNh4oKnl/hBLswPsQXZ5KL1vkUISXbqLHndl+P2Uv72KQ5+q61JeOV+5 yG6yU6WS6Bt+UnRrsqvLiYJgUOpVrf96k30G7pyf4c/Z6ayEIdpyMEb7GgKI7zcp mdhOTahml9ABgqt7Pwj26E/euDA9nJW3NXLJFVR5q34g+XcEn7K3rJq/bYrX14xV l1BitqZHUjJnrbwzyA+Z32uzwBZ4uX9qBUqrfpkPl9v8R/3BSUoDIFddTrFN0Osi C7s2s0ZUZtSnjkF0dRaQ/J5YEpTwFIM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:49 2024 by rpki-client on console-ams.rpki-client.org