$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fa84132-ea7a-3a05-91d6-491db27c19f7.roa File: 7fa84132-ea7a-3a05-91d6-491db27c19f7.roa (raw, json) Hash identifier: Nw0aiNkR3JrQvc6wrK1gB3kbZme4PGe+JU2vFSzl+E0= Subject key identifier: 60:92:68:C0:49:B9:83:AB:65:FF:1F:8F:D6:A4:78:EF:81:CC:3A:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F53A04EF5AB5E4A0A56780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fa84132-ea7a-3a05-91d6-491db27c19f7.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.71.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:3a:04:ef:5a:b5:e4:a0:a5:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=20ec0764-41c7-4df4-bf2f-7bc0f020b70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7d:51:01:ad:a7:19:8a:27:47:db:97:ff:1a: 93:d3:16:41:f7:60:de:7a:ca:cd:2d:f4:49:b0:8d: 64:de:57:a7:1c:ed:74:ba:c4:eb:b5:ff:c6:97:1e: ca:58:7a:ff:f5:1a:85:91:da:5b:65:4b:27:47:dc: a1:06:c0:dd:48:36:b3:8d:12:b9:5a:40:7a:e8:3e: d6:95:cb:5d:ff:4f:10:bd:31:c4:b8:42:56:72:e2: e1:8e:00:98:65:93:2f:44:5a:64:b2:8a:d1:12:c1: a9:35:02:1e:87:be:f3:c7:55:ed:13:56:df:22:4a: dd:85:db:df:ff:86:a1:29:48:11:9b:59:8e:7e:de: f8:f8:92:83:f3:04:c3:02:71:42:18:d6:4d:bb:b0: 58:f5:1d:30:69:0d:56:c5:0c:dc:44:c3:57:59:07: 04:2c:14:ff:fa:e3:f2:d3:81:c9:29:62:6c:b8:1d: 81:ae:cf:b0:b8:84:4f:0f:43:1c:1b:13:22:ab:b4: 37:92:a3:e9:f6:a3:3d:ff:5b:4c:72:2b:21:f0:f9: 9b:37:ef:fb:a2:ca:48:ec:dc:33:a5:38:6c:2a:fe: 1f:3c:13:71:34:ca:42:1b:10:98:f2:dc:94:34:d6: ec:b4:ac:a4:a2:5f:4a:da:ce:e9:78:3f:fb:d8:34: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:92:68:C0:49:B9:83:AB:65:FF:1F:8F:D6:A4:78:EF:81:CC:3A:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fa84132-ea7a-3a05-91d6-491db27c19f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:da:6c:b6:68:58:28:6d:e4:f3:2c:4c:08:d7:62:bb:95:b9: 5d:5e:5b:db:26:9b:93:20:8f:47:11:2d:97:3a:2e:6b:9e:a2: 77:97:4d:3d:3e:fc:a7:dc:ee:7c:2f:49:1c:bf:24:66:46:94: 7b:c2:7b:0e:01:42:b1:c9:33:9c:be:17:59:4c:81:a7:c2:71: ce:d0:32:c2:06:55:32:5b:c0:2d:2d:38:2b:d2:04:4d:c0:53: 5a:c4:8f:11:30:3d:f9:9c:23:cd:b1:5d:91:2e:99:61:a6:2b: b2:2c:31:56:62:49:37:d3:43:d3:55:0f:00:f9:fd:45:3b:b2: 50:ea:c9:37:a1:42:f0:fb:64:29:80:26:b9:e3:74:11:f3:35: 62:ed:85:3f:36:b1:9b:70:be:e2:4b:43:71:bb:09:27:32:7a: 17:87:a5:47:bf:aa:50:05:11:c6:54:3d:80:a6:01:99:0a:5c: 1f:d9:81:bd:d6:2d:91:a1:55:d2:d0:cb:76:b1:6e:a9:4b:0b: 69:0c:7e:64:87:d0:00:b4:87:47:6c:9d:e3:5e:72:9d:c2:a9: f6:7b:aa:6e:e8:59:ca:48:7d:a8:b6:a0:f1:5d:27:f3:c6:d2: 8f:0d:e4:28:96:fa:31:d2:f7:49:12:95:cd:45:66:c4:e8:ce: 32:5e:fb:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9ToE71q15KClZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MjBlYzA3NjQtNDFjNy00ZGY0LWJmMmYtN2JjMGYwMjBiNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX1RAa2nGYonR9uX/xqT0xZB92DeesrNLfRJ sI1k3lenHO10usTrtf/Glx7KWHr/9RqFkdpbZUsnR9yhBsDdSDazjRK5WkB66D7W lctd/08QvTHEuEJWcuLhjgCYZZMvRFpksorREsGpNQIeh77zx1XtE1bfIkrdhdvf /4ahKUgRm1mOft74+JKD8wTDAnFCGNZNu7BY9R0waQ1WxQzcRMNXWQcELBT/+uPy 04HJKWJsuB2Brs+wuIRPD0McGxMiq7Q3kqPp9qM9/1tMcish8PmbN+/7ospI7Nwz pThsKv4fPBNxNMpCGxCY8tyUNNbstKykol9K2s7peD/72DSkMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCSaMBJuYOrZf8fj9akeO+BzDq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2ZhODQxMzItZWE3YS0z YTA1LTkxZDYtNDkxZGIyN2MxOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/abLZoWCht5PMsTAjXYruVuV1eW9smm5Mgj0cRLZc6LmueoneXTT0+ /Kfc7nwvSRy/JGZGlHvCew4BQrHJM5y+F1lMgafCcc7QMsIGVTJbwC0tOCvSBE3A U1rEjxEwPfmcI82xXZEumWGmK7IsMVZiSTfTQ9NVDwD5/UU7slDqyTehQvD7ZCmA JrnjdBHzNWLthT82sZtwvuJLQ3G7CScyeheHpUe/qlAFEcZUPYCmAZkKXB/Zgb3W LZGhVdLQy3axbqlLC2kMfmSH0AC0h0dsneNecp3CqfZ7qm7oWcpIfai2oPFdJ/PG 0o8N5CiW+jHS90kSlc1FZsTozjJe+1g= -----END CERTIFICATE-----Generated at Sun Nov 24 16:07:19 2024 by rpki-client on console-ams.rpki-client.org