$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa File: 6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa (raw, json) Hash identifier: 7S0FonyuXpz40vqjRpQhOzNcZIBrwwoU+TblbJiiWUw= Subject key identifier: 35:94:2D:05:3E:45:34:FF:B3:36:57:1E:51:E1:72:2A:0A:1C:EB:7A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4DD6B631DEFB2A508A300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.151.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:dd:6b:63:1d:ef:b2:a5:08:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=a5c0be46-56f6-436e-841b-9e590b48d5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:08:62:f5:d8:77:ef:25:01:ef:d6:6c:a3: 18:67:dd:4c:b0:6d:d8:50:3a:4a:39:44:2c:4b:75: cf:6a:96:2e:e4:19:0e:2d:09:b3:8a:2c:b8:ed:4b: ad:a5:ad:86:1f:55:7f:1f:c8:06:f7:50:57:91:44: b9:c1:48:ed:7e:6d:4e:62:b2:dc:64:32:a2:80:c0: 4d:d1:78:35:10:4f:11:38:f6:98:3c:25:19:a9:1a: 19:f9:6e:15:83:a1:f9:a7:da:fd:bc:33:43:3f:17: 57:c9:11:cf:69:a7:d5:ed:d2:5c:4a:64:ad:1f:13: 2f:e6:3d:ab:ef:28:4f:e8:d0:92:c9:9e:ac:17:9f: 27:b2:d6:7a:00:a3:32:5d:6e:7a:74:b9:65:3a:cb: 5d:02:67:89:16:8a:92:98:58:a6:57:87:14:bd:a2: 11:0c:15:b8:89:8c:14:c3:9f:18:32:01:e1:f5:c1: 12:4c:9b:77:73:9c:1e:4a:fb:38:48:7f:c1:88:e8: d2:d1:ff:0d:e7:6a:9e:b6:0b:9b:cc:40:bc:ce:43: 6b:3b:df:35:c2:bb:f3:ef:37:d5:ce:7a:e1:35:17: 5b:f3:a9:b7:19:21:12:7d:6f:ed:5c:15:d7:42:45: 6b:59:8e:de:9e:5a:5a:d2:78:dd:08:b9:7b:27:7b: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:94:2D:05:3E:45:34:FF:B3:36:57:1E:51:E1:72:2A:0A:1C:EB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:44:64:c7:79:4b:54:4f:83:4d:3d:f0:3b:5e:a8:32:88:c5: d7:49:dd:a4:b0:85:07:de:74:b9:9a:2d:6c:fd:1c:a3:7a:5b: 0e:37:cd:71:f9:bc:42:07:13:4a:1b:77:a8:78:a8:15:bb:ed: 6c:8d:06:e6:a8:9b:da:d7:8a:52:ee:91:5b:a2:c1:0e:dd:9c: 46:b7:4e:17:83:bf:ca:92:6a:da:bb:65:2f:d2:dc:d7:df:7a: 57:04:79:e6:0e:16:de:6a:15:5f:f6:2d:8c:e8:dc:de:81:85: 41:79:5f:eb:e3:52:ef:8c:99:f5:8b:9a:50:63:31:05:80:8a: 85:ae:28:b4:79:26:17:95:03:45:52:26:ea:62:a6:7f:3e:ee: 7c:72:a6:39:0c:82:59:1e:54:d9:a9:31:39:a2:d3:08:6e:ed: c0:d2:1b:1a:b5:5f:ad:2d:e6:2d:fb:25:51:e0:96:72:1b:b9: d0:5e:55:f5:6b:ba:ba:4a:cf:34:a1:e0:1f:d3:4b:d2:ad:d6: 23:96:d5:25:fe:4a:32:d2:68:70:40:5b:0a:53:d1:06:cc:84: da:fc:6c:37:be:43:62:95:da:9d:af:3b:21:6c:87:7a:de:31: 30:fd:2a:5f:fa:a8:dc:b5:ce:dc:12:58:f2:93:ca:8b:ee:89: 5e:b6:9b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9N1rYx3vsqUIowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YTVjMGJlNDYtNTZmNi00MzZlLTg0MWItOWU1OTBiNDhkNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv60IYvXYd+8lAe/WbKMYZ91MsG3YUDpKOUQs S3XPapYu5BkOLQmziiy47Uutpa2GH1V/H8gG91BXkUS5wUjtfm1OYrLcZDKigMBN 0Xg1EE8ROPaYPCUZqRoZ+W4Vg6H5p9r9vDNDPxdXyRHPaafV7dJcSmStHxMv5j2r 7yhP6NCSyZ6sF58nstZ6AKMyXW56dLllOstdAmeJFoqSmFimV4cUvaIRDBW4iYwU w58YMgHh9cESTJt3c5weSvs4SH/BiOjS0f8N52qetgubzEC8zkNrO981wrvz7zfV znrhNRdb86m3GSESfW/tXBXXQkVrWY7enlpa0njdCLl7J3uX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWULQU+RTT/szZXHlHhcioKHOt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmM4YTllZWUtOWI2MC0z YWFjLThiOGItMGFkNDc5ZGMxMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFEZMd5S1RPg0098DteqDKIxddJ3aSwhQfedLmaLWz9HKN6Ww43zXH5 vEIHE0obd6h4qBW77WyNBuaom9rXilLukVuiwQ7dnEa3TheDv8qSatq7ZS/S3Nff elcEeeYOFt5qFV/2LYzo3N6BhUF5X+vjUu+MmfWLmlBjMQWAioWuKLR5JheVA0VS Jupipn8+7nxypjkMglkeVNmpMTmi0whu7cDSGxq1X60t5i37JVHglnIbudBeVfVr urpKzzSh4B/TS9Kt1iOW1SX+SjLSaHBAWwpT0QbMhNr8bDe+Q2KV2p2vOyFsh3re MTD9Kl/6qNy1ztwSWPKTyovuiV62m5M= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:29 2024 by rpki-client on console-fra.rpki-client.org