$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa File: 628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa (raw, json) Hash identifier: TRIC6+3Ptj22d/NBE1EscOcXM1t2aDpadIASqE9ACD8= Subject key identifier: 36:64:CD:4C:56:21:BD:EE:D9:14:41:6E:E1:FB:84:90:EF:6F:56:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4CE3947C4679AE82D1380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 34.98.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:ce:39:47:c4:67:9a:e8:2d:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=2f71a84d-e3ef-483b-8978-97091b44e14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:1f:89:74:84:a2:7e:f3:fa:44:26:b5:7d: 4e:41:db:24:e4:53:3a:b6:6f:0c:34:ee:20:16:92: be:1b:68:40:8d:d9:ea:b9:8a:48:f2:36:d7:28:cc: bc:e2:33:1e:cb:87:84:70:d7:15:c8:13:98:c7:d0: 4f:84:eb:43:e3:99:af:2a:8f:38:f8:b3:bc:b4:01: b6:ca:3f:01:28:16:26:22:65:e9:95:41:2d:52:c9: af:30:97:86:22:1f:9c:e9:3c:eb:c4:b0:29:49:35: 76:37:7c:64:ea:0b:d9:a3:8f:39:87:29:d0:c3:4d: 10:fb:e0:ed:a1:a2:3f:7d:6d:ba:29:76:a1:5b:28: d9:62:98:18:1c:f7:2b:af:80:87:09:13:fd:0e:d4: a3:07:71:ac:46:da:16:2b:11:83:ad:9f:19:05:d1: e2:1d:bd:f3:b2:c9:17:3e:d4:7b:7e:b1:a4:0e:01: 5a:4c:ed:1b:ec:51:8a:c8:e1:c6:26:32:ef:d6:c3: cc:ea:c4:e9:41:eb:b5:ef:4d:9d:09:e1:4a:70:26: 80:a8:1e:15:38:d1:97:8e:95:ff:7d:ac:d8:0a:d2: 7b:36:74:d2:28:87:8c:87:c8:4c:d7:21:ca:78:5a: 70:fb:14:eb:81:2d:9a:a5:b2:94:62:6a:aa:41:27: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:CD:4C:56:21:BD:EE:D9:14:41:6E:E1:FB:84:90:EF:6F:56:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:48:05:4f:01:d0:c3:7a:51:3c:63:69:b3:eb:7b:34:4d:1f: b3:93:4e:36:b6:9d:3f:ac:2b:57:6c:1b:7a:ce:00:a0:58:c3: db:45:c3:27:4f:9f:2e:c8:0d:43:0e:51:f4:e0:65:d5:c0:65: 1a:b0:38:c1:9e:49:d5:86:a4:bc:07:2f:53:82:ec:db:ea:9a: cb:0f:31:81:c1:aa:48:98:52:1d:b7:5d:6f:b5:86:62:0d:7c: e8:38:f8:28:c8:1a:22:9d:7b:69:3d:79:a3:73:b3:c1:94:11: d3:66:68:6f:16:d6:3c:d9:12:b9:3b:30:02:b5:b8:ea:64:b5: d8:46:26:f1:ba:33:25:5e:f8:15:25:96:f7:a4:39:43:4a:dc: 89:15:4f:e8:fb:50:78:48:7e:7c:1d:d2:fb:28:4e:a6:d4:38: 02:86:df:1a:d6:c6:01:fc:27:df:fd:d3:3b:ff:6c:52:de:26: 64:ee:83:5e:c2:ab:e4:85:6f:0a:09:3e:3e:93:5b:2f:f6:3a: ff:40:e1:c7:af:55:eb:37:15:a7:20:77:a8:a3:41:0a:81:0d: be:4c:59:21:3b:95:f7:27:d1:11:2a:02:46:44:5b:bd:30:cb: c7:8e:28:66:d2:7f:06:be:04:a1:36:fe:86:ab:bf:35:d9:19: 74:6d:c4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9M45R8RnmugtE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MmY3MWE4NGQtZTNlZi00ODNiLTg5NzgtOTcwOTFiNDRlMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXYfiXSEon7z+kQmtX1OQdsk5FM6tm8MNO4g FpK+G2hAjdnquYpI8jbXKMy84jMey4eEcNcVyBOYx9BPhOtD45mvKo84+LO8tAG2 yj8BKBYmImXplUEtUsmvMJeGIh+c6TzrxLApSTV2N3xk6gvZo485hynQw00Q++Dt oaI/fW26KXahWyjZYpgYHPcrr4CHCRP9DtSjB3GsRtoWKxGDrZ8ZBdHiHb3zsskX PtR7frGkDgFaTO0b7FGKyOHGJjLv1sPM6sTpQeu1702dCeFKcCaAqB4VONGXjpX/ fazYCtJ7NnTSKIeMh8hM1yHKeFpw+xTrgS2apbKUYmqqQSeS/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZkzUxWIb3u2RRBbuH7hJDvb1YTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjI4ZjhlNGUtMWExZi0z ZGU4LWIyZjAtOTljMGY2MTljMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINIBU8B0MN6UTxjabPrezRNH7OTTja2nT+sK1dsG3rOAKBYw9tFwydP ny7IDUMOUfTgZdXAZRqwOMGeSdWGpLwHL1OC7NvqmssPMYHBqkiYUh23XW+1hmIN fOg4+CjIGiKde2k9eaNzs8GUEdNmaG8W1jzZErk7MAK1uOpktdhGJvG6MyVe+BUl lvekOUNK3IkVT+j7UHhIfnwd0vsoTqbUOAKG3xrWxgH8J9/90zv/bFLeJmTug17C q+SFbwoJPj6TWy/2Ov9A4cevVes3Facgd6ijQQqBDb5MWSE7lfcn0REqAkZEW70w y8eOKGbSfwa+BKE2/oarvzXZGXRtxGE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:08:24 2024 by rpki-client on console-fra.rpki-client.org