$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa File: 5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa (raw, json) Hash identifier: E87p6L7IREco/Fs69uyAhvxy4fQtfyuF0ow2xtZBZzE= Subject key identifier: 0C:AD:F7:95:72:9E:82:66:6A:9B:C0:C4:8B:13:3A:2B:37:13:8D:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F5061107563A69B301B580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.68.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:06:11:07:56:3a:69:b3:01:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=322d758c-d1c7-46db-83be-d9ebce78194c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:72:5e:32:3a:29:e6:f2:b5:72:57:68:1b: 4b:b6:db:10:1c:7c:b1:23:0f:8a:a3:60:6b:cf:5f: 8e:01:84:06:35:d9:e8:a3:48:e5:53:9d:1f:33:1e: 84:ac:ab:22:47:9a:ce:e0:78:ff:5b:4f:f6:20:d5: b7:96:62:54:06:d7:29:94:53:3e:22:f4:36:33:e4: 1b:39:01:71:cd:8e:75:93:eb:5d:fb:69:d2:93:54: 1a:c1:7b:0d:29:2c:eb:9f:15:de:6d:b2:8c:a7:d6: ba:fe:bf:07:fc:85:de:88:dd:ff:6b:26:4a:1c:1e: 0e:65:1f:68:b0:9d:9f:a3:50:88:24:66:82:9e:ca: a3:34:2b:0e:78:c6:d4:fc:2b:bc:10:8b:6a:47:38: b5:e3:7b:8b:8b:57:ea:7f:90:e4:27:5b:36:3e:34: 23:d1:5c:cb:96:37:92:5b:77:3f:f3:b3:3a:75:94: 70:dc:97:31:e8:5a:5f:ca:f2:00:c0:d4:03:48:e0: 6b:d8:c2:81:94:cd:3c:28:da:aa:b6:fa:7a:02:d5: 2c:d8:c5:05:fa:ad:46:56:1d:7a:d0:f1:34:60:6f: ed:8c:7c:76:5d:9b:3b:f5:92:4a:ab:94:3c:bd:60: 70:15:0e:35:17:3c:4e:01:a1:83:08:49:f0:a7:47: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AD:F7:95:72:9E:82:66:6A:9B:C0:C4:8B:13:3A:2B:37:13:8D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4d:0e:9f:92:98:16:f3:77:8c:21:59:84:94:e6:fe:69:39: 09:be:a7:0c:15:db:27:1f:8f:4b:f2:c5:f9:d2:49:ef:97:21: 69:56:52:47:37:3c:9d:62:a1:77:6d:c4:3b:a8:64:72:72:db: 1a:5d:b4:47:db:0d:83:8b:7d:07:b0:c3:f5:89:2f:fa:47:8c: 88:88:de:75:5e:06:9e:5b:e5:01:35:94:03:07:12:31:b2:a6: 63:3c:a0:cf:c5:bf:df:e6:58:9a:29:b2:2b:71:e1:03:8e:48: a9:4e:0f:0c:64:ac:04:fd:3e:17:b9:bf:b3:5f:99:73:22:8c: 22:26:3a:63:8d:13:a5:a0:14:bc:3d:ab:05:e2:8a:fa:c5:fd: a0:1a:a2:67:06:be:cf:1b:ff:52:9b:b2:e8:3d:67:2b:29:e2: 6e:de:9e:16:dc:e6:a0:12:5c:de:f9:ae:1b:1a:98:76:ff:13: d1:2d:3d:a7:ea:75:ff:5f:7f:66:d5:51:eb:41:86:9d:6b:f5: 0b:9a:06:da:82:1c:31:48:d9:77:f1:fd:f8:c6:07:6f:ec:64: f7:67:26:f8:e5:59:c0:61:8f:a3:85:3a:79:df:bf:bb:d2:31: 8b:51:d6:9f:29:b5:9c:42:35:59:f4:4b:a3:1b:33:cb:d3:e7: 24:c9:81:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QYRB1Y6abMBtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MzIyZDc1OGMtZDFjNy00NmRiLTgzYmUtZDllYmNlNzgxOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJNyXjI6KebytXJXaBtLttsQHHyxIw+Ko2Br z1+OAYQGNdnoo0jlU50fMx6ErKsiR5rO4Hj/W0/2INW3lmJUBtcplFM+IvQ2M+Qb OQFxzY51k+td+2nSk1QawXsNKSzrnxXebbKMp9a6/r8H/IXeiN3/ayZKHB4OZR9o sJ2fo1CIJGaCnsqjNCsOeMbU/Cu8EItqRzi143uLi1fqf5DkJ1s2PjQj0VzLljeS W3c/87M6dZRw3Jcx6FpfyvIAwNQDSOBr2MKBlM08KNqqtvp6AtUs2MUF+q1GVh16 0PE0YG/tjHx2XZs79ZJKq5Q8vWBwFQ41FzxOAaGDCEnwp0fa8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyt95VynoJmapvAxIsTOis3E40TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmYTk3MGItYTUwZS0z Yjk4LWFmMzYtN2E0ODQ1NGNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlNDp+SmBbzd4whWYSU5v5pOQm+pwwV2ycfj0vyxfnSSe+XIWlWUkc3 PJ1ioXdtxDuoZHJy2xpdtEfbDYOLfQeww/WJL/pHjIiI3nVeBp5b5QE1lAMHEjGy pmM8oM/Fv9/mWJopsitx4QOOSKlODwxkrAT9Phe5v7NfmXMijCImOmONE6WgFLw9 qwXiivrF/aAaomcGvs8b/1Kbsug9Zysp4m7enhbc5qASXN75rhsamHb/E9EtPafq df9ff2bVUetBhp1r9QuaBtqCHDFI2Xfx/fjGB2/sZPdnJvjlWcBhj6OFOnnfv7vS MYtR1p8ptZxCNVn0S6MbM8vT5yTJgTc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:08:22 2024 by rpki-client on console-fra.rpki-client.org