$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70f05f77-5ec1-3773-819c-b31c5d51a1db.roa File: 70f05f77-5ec1-3773-819c-b31c5d51a1db.roa (raw, json) Hash identifier: uBrZHony6uiTSA0c9lM2R6Ze3Tg2l9CrOWWHTzHVqQo= Subject key identifier: EE:8A:DD:38:F1:A1:8A:08:D3:4E:F8:C4:7E:AB:6F:F4:81:2B:10:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F53B65CF173B9A1D0BF180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70f05f77-5ec1-3773-819c-b31c5d51a1db.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:3b:65:cf:17:3b:9a:1d:0b:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=18fbbd5c-a5c7-4cc3-8aef-e17da42dab6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:df:7b:89:19:d0:a4:78:91:b8:ca:22:e7: 49:d8:f5:5c:6a:d3:12:df:aa:87:4a:e1:77:63:3f: 84:d1:45:28:16:2d:7d:a1:7d:b7:7f:93:42:98:3e: 11:17:1c:c9:f9:7f:1c:34:12:6c:51:0b:1c:3b:1c: 0a:6c:0f:d9:64:d6:8c:a6:06:85:31:a5:df:c0:a3: 65:80:11:e1:73:db:60:d3:12:fa:34:03:1b:04:01: 5a:08:21:bf:b6:61:1f:97:e4:ab:10:5f:f1:9a:4b: b1:6a:1c:b5:ed:2d:66:9e:5e:4f:63:34:33:ed:80: 99:fb:f9:06:2d:5f:7c:32:25:e9:8a:c4:8e:34:e7: 3b:ff:b5:09:96:66:f8:7b:1f:42:a1:cf:3c:64:54: d2:4c:45:a3:b2:e8:e4:2c:82:2e:aa:3e:87:bd:6f: 98:e7:e6:46:02:5f:d0:f1:45:c0:97:f3:c7:7f:c3: 7d:b6:e0:f7:35:22:2d:ef:2e:8c:c0:a1:56:0e:38: 4c:ff:2e:4a:ad:9c:3f:8e:25:a3:b2:bb:21:83:2d: ad:70:3e:95:26:e3:03:94:e9:1e:29:09:54:89:e9: c0:57:3c:e5:8a:08:04:23:73:a0:b7:ea:83:aa:97: 14:14:0e:ee:98:e6:0e:e4:ac:9b:2a:07:dc:f6:05: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8A:DD:38:F1:A1:8A:08:D3:4E:F8:C4:7E:AB:6F:F4:81:2B:10:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70f05f77-5ec1-3773-819c-b31c5d51a1db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:17:d2:f3:78:29:cb:19:80:f8:56:4c:d5:04:13:f3:8e:37: dc:46:9d:f2:bf:94:b8:8d:ef:d5:22:cf:f1:67:10:58:95:90: 17:39:5e:25:9d:09:19:55:aa:d4:24:d0:ff:31:fe:3c:e7:e9: 18:a1:02:24:2c:69:4c:11:13:fc:36:00:72:4f:4e:bc:70:27: 1b:5c:d1:74:ea:c0:bd:50:ce:6a:d8:7a:96:79:c9:69:2d:3d: c7:01:dc:e1:ac:95:10:4c:46:0c:d0:2a:82:b3:bd:f7:60:f6: 44:c6:eb:e8:a1:d7:3b:10:82:37:df:1a:f5:98:6e:29:ce:e8: 29:e8:2c:5b:0a:27:ec:50:38:a4:4f:0f:91:00:ca:91:45:93: 65:01:d6:71:a2:29:31:91:d9:36:96:9b:e5:cb:b4:95:d7:ff: 99:f1:3b:cb:92:e8:21:70:02:a1:d0:f4:73:88:cf:df:77:e5: 91:ee:2b:e6:47:ce:bc:ed:e8:7c:ee:b1:51:be:ba:b0:15:91: 85:50:93:9a:cd:04:6d:72:ed:90:66:d8:c8:4b:0a:1c:85:58: 57:c7:ef:ee:81:d1:d8:d9:d6:25:f4:be:eb:0c:b1:25:14:78: 84:7a:31:cc:42:b8:ad:5a:a5:79:44:61:84:ea:58:01:70:d0: 7e:68:50:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Ttlzxc7mh0L8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MThmYmJkNWMtYTVjNy00Y2MzLThhZWYtZTE3ZGE0MmRhYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7fe4kZ0KR4kbjKIudJ2PVcatMS36qHSuF3 Yz+E0UUoFi19oX23f5NCmD4RFxzJ+X8cNBJsUQscOxwKbA/ZZNaMpgaFMaXfwKNl gBHhc9tg0xL6NAMbBAFaCCG/tmEfl+SrEF/xmkuxahy17S1mnl5PYzQz7YCZ+/kG LV98MiXpisSONOc7/7UJlmb4ex9Coc88ZFTSTEWjsujkLIIuqj6HvW+Y5+ZGAl/Q 8UXAl/PHf8N9tuD3NSIt7y6MwKFWDjhM/y5KrZw/jiWjsrshgy2tcD6VJuMDlOke KQlUienAVzzliggEI3Ogt+qDqpcUFA7umOYO5KybKgfc9gVIgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6K3TjxoYoI0074xH6rb/SBKxBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzBmMDVmNzctNWVjMS0z NzczLTgxOWMtYjMxYzVkNTFhMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkX0vN4KcsZgPhWTNUEE/OON9xGnfK/lLiN79Uiz/FnEFiVkBc5XiWd CRlVqtQk0P8x/jzn6RihAiQsaUwRE/w2AHJPTrxwJxtc0XTqwL1QzmrYepZ5yWkt PccB3OGslRBMRgzQKoKzvfdg9kTG6+ih1zsQgjffGvWYbinO6CnoLFsKJ+xQOKRP D5EAypFFk2UB1nGiKTGR2TaWm+XLtJXX/5nxO8uS6CFwAqHQ9HOIz9935ZHuK+ZH zrzt6HzusVG+urAVkYVQk5rNBG1y7ZBm2MhLChyFWFfH7+6B0djZ1iX0vusMsSUU eIR6McxCuK1apXlEYYTqWAFw0H5oUPM= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:30 2024 by rpki-client on console-fra.rpki-client.org