$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa File: 588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa (raw, json) Hash identifier: VwFurWE0DT/9yarfsHWDDQ/hJur3dcM/mjnR2+TJKxY= Subject key identifier: C2:5A:B4:37:29:8A:29:E1:3D:1D:95:70:AE:F8:C6:DC:23:62:B6:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4DF45BB72493DDF3FB000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.131.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:df:45:bb:72:49:3d:df:3f:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=030cb4e8-70bd-4aaf-9049-6894bcde3005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:f9:e0:d1:4f:f6:90:93:57:a5:85:21:7a: a4:dd:38:b3:4e:70:b3:a3:54:4d:69:f5:95:b6:92: f8:26:de:e2:5f:8f:66:68:8a:a3:db:04:ef:e7:e5: 1a:77:01:93:f4:ca:07:e0:90:f5:72:9e:ed:b8:61: f7:6e:b6:c4:c3:76:70:dd:0b:f8:f4:1c:2e:ef:a7: 91:bf:c2:bf:d0:bd:37:04:2a:38:d9:9b:12:04:89: 72:e2:ad:bb:fa:e9:56:67:a2:0d:7b:e0:de:a6:4a: 4d:04:69:04:90:f4:8c:dc:07:9d:88:15:0b:40:f9: 4b:ed:51:aa:b4:32:fd:e7:2a:a3:b1:73:39:ce:c8: d4:1c:a8:0a:6c:ba:c5:68:b8:3e:47:fd:38:96:7b: 06:f4:87:ba:2d:7a:76:31:e9:85:24:d2:2f:a7:5c: db:81:98:4e:1c:0a:43:e2:c5:7f:78:9f:51:cb:71: 05:35:27:d5:5f:de:ec:fb:53:07:36:bb:b7:91:52: 6f:9e:19:2e:5c:d0:f1:f0:e5:e0:44:be:0f:60:6b: 31:33:81:2b:4a:31:7d:25:18:c5:9d:78:02:ad:c7: 9b:89:39:59:dd:8b:69:0d:08:40:7d:30:65:5d:db: 55:4a:af:29:74:7a:0e:f4:b8:39:b9:da:07:83:02: 71:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5A:B4:37:29:8A:29:E1:3D:1D:95:70:AE:F8:C6:DC:23:62:B6:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3a:14:ef:ca:6f:6c:0a:32:5c:4e:eb:e6:a1:91:03:c5:06: ef:88:f1:c4:34:7f:bf:2f:16:39:19:57:a9:8b:f6:6c:0b:18: 86:28:37:0f:ac:7f:59:0e:61:6f:19:0a:8e:d4:06:d0:f1:b0: b4:e7:41:b5:2e:d6:fb:41:a9:80:09:54:c3:72:a0:4a:ca:cd: d4:3f:8e:36:cb:19:85:9f:e0:33:4b:9a:ae:86:9f:33:23:5c: 38:3a:a9:94:8f:43:1b:4b:30:ca:c4:7e:78:d3:d2:65:90:95: 96:b0:3d:a8:bf:97:91:69:c3:78:85:72:c5:75:f3:00:fd:d8: 21:36:af:d0:63:9e:34:a4:24:6e:72:a4:3f:f3:41:3c:73:f8: 64:00:dc:eb:f5:f9:0c:fb:1a:6f:bf:8d:88:f0:b8:bd:31:49: 3b:22:74:65:e7:03:6e:2b:f0:6e:0a:4a:fa:72:e5:c0:84:ec: f7:22:ae:64:4a:79:b7:2f:2b:00:ab:fd:65:7b:96:74:80:77: ef:e9:71:45:40:8d:ca:09:db:f5:b4:e1:a3:9b:79:24:73:07: 36:ef:3f:2c:8a:3a:07:c6:c3:3c:21:3e:f5:20:8f:ee:b5:a6: a3:0b:bd:ca:5b:b3:2d:39:15:37:e9:d7:52:96:cc:4c:90:cc: 3c:fb:08:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9N9Fu3JJPd8/sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MDMwY2I0ZTgtNzBiZC00YWFmLTkwNDktNjg5NGJjZGUzMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYr54NFP9pCTV6WFIXqk3TizTnCzo1RNafWV tpL4Jt7iX49maIqj2wTv5+UadwGT9MoH4JD1cp7tuGH3brbEw3Zw3Qv49Bwu76eR v8K/0L03BCo42ZsSBIly4q27+ulWZ6INe+DepkpNBGkEkPSM3AediBULQPlL7VGq tDL95yqjsXM5zsjUHKgKbLrFaLg+R/04lnsG9Ie6LXp2MemFJNIvp1zbgZhOHApD 4sV/eJ9Ry3EFNSfVX97s+1MHNru3kVJvnhkuXNDx8OXgRL4PYGsxM4ErSjF9JRjF nXgCrcebiTlZ3YtpDQhAfTBlXdtVSq8pdHoO9Lg5udoHgwJxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJatDcpiinhPR2VcK74xtwjYrb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg4Nzc2ZWItZjljNi0z ZjQxLThjZTgtNGI2NWUwNDA3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI6FO/Kb2wKMlxO6+ahkQPFBu+I8cQ0f78vFjkZV6mL9mwLGIYoNw+s f1kOYW8ZCo7UBtDxsLTnQbUu1vtBqYAJVMNyoErKzdQ/jjbLGYWf4DNLmq6GnzMj XDg6qZSPQxtLMMrEfnjT0mWQlZawPai/l5Fpw3iFcsV18wD92CE2r9BjnjSkJG5y pD/zQTxz+GQA3Ov1+Qz7Gm+/jYjwuL0xSTsidGXnA24r8G4KSvpy5cCE7PcirmRK ebcvKwCr/WV7lnSAd+/pcUVAjcoJ2/W04aObeSRzBzbvPyyKOgfGwzwhPvUgj+61 pqMLvcpbsy05FTfp11KWzEyQzDz7CJ0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:55 2024 by rpki-client on console-ams.rpki-client.org