$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85cd22a9-b658-3773-9a94-8ef3c1d5b88e.roa File: 85cd22a9-b658-3773-9a94-8ef3c1d5b88e.roa (raw, json) Hash identifier: lAIIk1evt7RdNu45iYkO6FPiXdV1oMJdpiu+YDgulng= Subject key identifier: DE:01:9D:B9:EE:3C:AB:06:2D:FD:46:A3:9A:6F:36:A7:02:A1:E0:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F5328DFF8379BFC004A740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85cd22a9-b658-3773-9a94-8ef3c1d5b88e.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.143.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:32:8d:ff:83:79:bf:c0:04:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=c4e972d7-a502-4e80-b1e7-40f291c06fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:91:b4:e7:54:d5:ca:6c:26:fb:b3:fd:72: 2f:e6:f1:12:0a:1c:18:d3:03:1a:cb:e2:4b:f5:83: 17:68:ff:7f:50:83:15:d2:46:58:22:8a:00:aa:de: 4b:18:33:d0:6e:6f:fd:c3:b1:3a:37:04:78:42:81: 3c:e8:bf:80:b7:bc:48:2a:6a:49:ed:d5:96:bb:1f: 66:d2:c9:cd:17:fb:9d:8e:01:8f:6c:c7:a5:65:79: 63:d6:63:62:e9:dd:60:b8:e1:3a:a9:f5:a7:b2:35: 10:9a:bb:ac:f3:43:6e:41:83:eb:2a:a5:d1:76:b6: 78:10:90:51:55:85:40:d1:55:3b:57:23:23:98:04: 40:40:ea:42:0b:8b:b0:40:d9:68:42:d2:3d:df:56: 6f:41:b7:b7:4b:0c:ec:d8:dc:cc:fe:f5:31:77:46: 5b:ee:cf:b2:bc:ac:94:08:4a:7d:c1:08:fd:ee:31: 52:01:fc:df:62:04:ed:a8:be:d9:98:3e:b3:c6:0f: 2b:44:d1:e3:3a:ca:b2:ae:ec:17:eb:ee:b3:7a:c2: c9:1b:37:58:1d:00:47:d6:32:30:54:86:4a:31:a1: e3:2b:f4:e2:1c:91:e9:c0:58:a8:e6:4d:8c:d2:50: 9d:91:79:e3:dc:bd:4f:b2:c4:1a:93:18:c9:0c:2a: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:9D:B9:EE:3C:AB:06:2D:FD:46:A3:9A:6F:36:A7:02:A1:E0:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85cd22a9-b658-3773-9a94-8ef3c1d5b88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:67:d3:5d:ed:21:0a:e6:f0:06:24:e3:6b:8f:8f:05:8c:3f: 22:e2:5d:03:c3:7d:7c:91:92:72:b7:8f:5b:bc:99:58:d1:f4: 99:bc:03:32:25:e5:3a:03:30:f8:5e:60:e8:9d:65:e6:32:49: cf:58:da:52:a6:61:4b:77:ad:28:48:f0:b6:67:bb:1c:b2:6e: 0d:1b:f7:ec:3f:89:03:dc:a0:c1:68:7f:b4:7b:01:a8:ba:1b: 81:e6:87:1e:73:f5:48:fb:88:75:d5:18:52:30:00:7a:1b:46: 74:18:0d:31:db:b7:9a:0d:49:bb:dc:06:e5:67:af:a9:b1:2e: 8b:3a:df:64:78:df:1f:b2:79:ff:e5:7c:3b:26:8a:68:48:94: bc:12:bc:04:6c:35:d3:69:64:0f:67:31:d0:19:f4:4e:23:d5: be:69:c6:a5:f7:e3:95:cf:b0:e2:f3:81:84:7c:09:8f:82:bd: ad:b6:1e:94:a3:d2:7a:61:ac:96:2a:28:0b:0b:2b:8b:0d:eb: ab:2b:a3:2d:7c:a7:63:55:88:18:d3:e7:4e:7a:c4:1e:b9:87: 74:74:5e:ce:0b:27:0e:22:58:41:f5:94:76:67:f3:c4:92:18: e4:fc:1b:aa:27:4c:8b:ce:45:96:02:d6:95:3f:bb:d8:f0:f2: be:73:a7:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TKN/4N5v8AEp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YzRlOTcyZDctYTUwMi00ZTgwLWIxZTctNDBmMjkxYzA2ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsruRtOdU1cpsJvuz/XIv5vESChwY0wMay+JL 9YMXaP9/UIMV0kZYIooAqt5LGDPQbm/9w7E6NwR4QoE86L+At7xIKmpJ7dWWux9m 0snNF/udjgGPbMelZXlj1mNi6d1guOE6qfWnsjUQmrus80NuQYPrKqXRdrZ4EJBR VYVA0VU7VyMjmARAQOpCC4uwQNloQtI931ZvQbe3Swzs2NzM/vUxd0Zb7s+yvKyU CEp9wQj97jFSAfzfYgTtqL7ZmD6zxg8rRNHjOsqyruwX6+6zesLJGzdYHQBH1jIw VIZKMaHjK/TiHJHpwFio5k2M0lCdkXnj3L1PssQakxjJDCrRAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4BnbnuPKsGLf1Go5pvNqcCoeAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODVjZDIyYTktYjY1OC0z NzczLTlhOTQtOGVmM2MxZDViODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5n013tIQrm8AYk42uPjwWMPyLiXQPDfXyRknK3j1u8mVjR9Jm8AzIl 5ToDMPheYOidZeYySc9Y2lKmYUt3rShI8LZnuxyybg0b9+w/iQPcoMFof7R7Aai6 G4Hmhx5z9Uj7iHXVGFIwAHobRnQYDTHbt5oNSbvcBuVnr6mxLos632R43x+yef/l fDsmimhIlLwSvARsNdNpZA9nMdAZ9E4j1b5pxqX345XPsOLzgYR8CY+Cva22HpSj 0nphrJYqKAsLK4sN66sroy18p2NViBjT5056xB65h3R0Xs4LJw4iWEH1lHZn88SS GOT8G6onTIvORZYC1pU/u9jw8r5zp60= -----END CERTIFICATE-----Generated at Sun Nov 24 16:07:20 2024 by rpki-client on console-ams.rpki-client.org