$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa File: 48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa (raw, json) Hash identifier: 6HU/Bpd1uKi4Esar9BoojIhU3JiOENwN7hvhkrVpAf4= Subject key identifier: D3:79:38:95:D5:CA:02:22:03:4E:FF:27:E5:40:E9:2A:2E:A0:FC:EF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4EBCBB1EA9D09E4E06F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.128.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:eb:cb:b1:ea:9d:09:e4:e0:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=027ac87c-ed86-4493-9a58-bb3e7a7d26b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:9a:8f:fb:bf:d8:77:1f:b9:0f:e6:21:f8: 95:00:f8:28:bc:d1:4c:10:a5:5d:b8:5d:66:f5:fd: 4a:03:9b:29:4d:d3:1e:79:b5:14:e3:9f:e5:b5:9c: 7a:35:7d:b8:f0:9c:9b:aa:e3:22:35:9d:bd:f8:fa: 66:3a:81:bb:c1:bc:af:81:a7:d9:eb:66:db:82:1e: 5d:79:d3:f7:34:20:3f:e8:3e:be:98:47:8a:7d:ac: a2:60:0d:89:86:45:ba:95:5f:51:2f:a4:c0:13:4a: 0c:0b:0d:92:e9:c2:30:cc:c3:86:c1:6e:fa:f9:26: 52:bc:a6:4c:c9:98:1f:52:fc:3b:d5:8f:cd:b9:d6: 4d:5d:17:3b:18:dd:80:b0:2a:07:67:02:21:c5:80: fe:e3:b4:35:61:79:e4:fa:33:fc:8a:f0:21:5a:df: 26:48:3e:da:1a:07:d0:5a:38:07:8c:43:40:40:92: 4b:44:39:68:3c:9a:70:2d:cd:7d:dd:7d:0e:05:e7: b7:d0:52:06:b2:3e:76:ca:61:46:bf:ea:e4:7a:fa: e0:e5:14:d1:4e:21:0d:94:e4:e4:ed:24:1f:b7:f5: 41:16:ee:d0:38:62:89:24:32:04:8c:ed:57:06:cc: df:1e:bc:b9:62:ef:c2:63:b2:6c:40:4c:c6:3d:b0: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:79:38:95:D5:CA:02:22:03:4E:FF:27:E5:40:E9:2A:2E:A0:FC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48ac1b20-ea2f-38cd-bf15-91685f2c86c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b2:4a:8e:a5:f2:6a:5c:14:05:33:17:d9:26:2b:65:ec:24: 48:3e:e0:ab:d3:83:72:b0:de:66:ee:26:10:14:30:8c:4a:d5: e8:14:61:78:97:2c:a1:a2:04:68:fd:32:35:99:be:c0:ed:2f: 11:d2:9f:c8:b4:64:ed:7c:6a:fd:76:e4:5f:83:16:d7:55:fc: 84:53:ed:dd:0c:7c:68:e9:fa:c3:52:af:79:22:e1:e7:9b:e6: 37:d7:b9:69:a4:53:66:5c:6a:44:f4:ed:cb:50:66:ec:41:6a: 62:83:c8:f4:ab:a0:f6:2f:5e:4e:78:b9:27:19:59:f5:2b:ab: 12:5b:76:ef:23:17:f2:5c:c5:26:9d:7f:a4:29:e0:c3:02:3c: e1:0a:71:1a:7b:90:a6:a3:a0:b6:75:d4:11:a7:67:9e:da:40: 66:b1:b1:c8:91:bc:83:44:36:20:cb:3c:3e:0f:a3:34:7c:4e: 97:3c:82:07:ba:71:1a:05:f0:4b:7f:98:4f:d5:aa:62:6c:85: 62:11:97:7a:28:52:3b:48:c4:06:90:03:fd:ab:b9:95:b2:bd: 49:df:05:6e:ba:e9:64:6c:52:51:80:85:0c:b6:e6:d5:22:b5: b0:25:0a:73:cd:8a:c1:2c:da:d3:4e:21:45:cc:43:21:f0:0d: 96:3c:ff:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9OvLseqdCeTgb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MDI3YWM4N2MtZWQ4Ni00NDkzLTlhNTgtYmIzZTdhN2QyNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLGaj/u/2HcfuQ/mIfiVAPgovNFMEKVduF1m 9f1KA5spTdMeebUU45/ltZx6NX248JybquMiNZ29+PpmOoG7wbyvgafZ62bbgh5d edP3NCA/6D6+mEeKfayiYA2JhkW6lV9RL6TAE0oMCw2S6cIwzMOGwW76+SZSvKZM yZgfUvw71Y/NudZNXRc7GN2AsCoHZwIhxYD+47Q1YXnk+jP8ivAhWt8mSD7aGgfQ WjgHjENAQJJLRDloPJpwLc193X0OBee30FIGsj52ymFGv+rkevrg5RTRTiENlOTk 7SQft/VBFu7QOGKJJDIEjO1XBszfHry5Yu/CY7JsQEzGPbBSKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNN5OJXVygIiA07/J+VA6SouoPzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDhhYzFiMjAtZWEyZi0z OGNkLWJmMTUtOTE2ODVmMmM4NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIoCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKySo6l8mpcFAUzF9kmK2XsJEg+4KvTg3Kw3mbuJhAUMIxK1egUYXiX LKGiBGj9MjWZvsDtLxHSn8i0ZO18av125F+DFtdV/IRT7d0MfGjp+sNSr3ki4eeb 5jfXuWmkU2ZcakT07ctQZuxBamKDyPSroPYvXk54uScZWfUrqxJbdu8jF/JcxSad f6Qp4MMCPOEKcRp7kKajoLZ11BGnZ57aQGaxsciRvINENiDLPD4PozR8Tpc8gge6 cRoF8Et/mE/VqmJshWIRl3ooUjtIxAaQA/2ruZWyvUnfBW666WRsUlGAhQy25tUi tbAlCnPNisEs2tNOIUXMQyHwDZY8/90= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:49 2024 by rpki-client on console-ams.rpki-client.org