$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa File: 929b3699-faae-3b8b-b46e-fa550ac3dea9.roa (raw, json) Hash identifier: tL/Dj92tQRwSczDSzYXc0LJc4bIzTgMim8idLl3nNSw= Subject key identifier: 2A:E3:B3:16:39:8C:C0:48:37:64:D7:00:5D:9E:9D:05:E3:21:82:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F51D1977436152EC049500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.144.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:1d:19:77:43:61:52:ec:04:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=c007e9c5-8330-4088-8e95-662bae1b5b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:08:4a:3b:4c:ce:57:aa:1c:d0:13:da:40: fe:92:f8:5e:2a:44:17:e8:a7:d8:94:bb:ac:0f:c6: a2:bc:4e:f8:f0:8a:ea:83:58:b9:f3:68:ca:6b:43: e5:0c:48:f0:6b:fc:52:d2:73:11:d7:83:1e:a9:f0: fc:02:be:3b:82:72:bb:43:0c:d2:6e:e1:88:22:16: 68:f0:43:82:f2:fd:8e:1e:c5:f1:87:da:90:58:b7: db:47:d3:55:87:4e:db:51:ad:b2:fc:15:4d:3e:d5: 3d:6d:a7:83:17:ec:34:0a:5f:64:23:c4:04:06:48: ea:2a:71:b0:43:ba:11:cf:9f:5f:d3:42:44:a9:c2: e8:de:2e:0b:17:14:f8:80:5c:09:1c:07:1f:45:62: 44:9f:c3:54:e3:1e:9b:6b:be:fe:05:a9:a0:d3:2f: f4:a6:ff:f7:92:f9:ce:1e:e8:51:ec:71:4c:82:2f: 33:a8:30:7c:22:f0:e7:28:08:9a:96:2f:5e:d2:73: 2d:40:94:a1:20:12:c6:6b:7f:ea:4f:10:36:db:c2: 6c:12:9b:89:8d:ce:6e:45:c2:29:e7:ba:51:f5:b6: 3d:f2:4a:20:51:74:ef:a5:6d:45:11:86:cb:48:75: 8d:73:e2:ed:0b:98:8a:d4:be:f8:db:8a:e4:d0:e0: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E3:B3:16:39:8C:C0:48:37:64:D7:00:5D:9E:9D:05:E3:21:82:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:27:70:37:8f:f6:1f:18:f1:32:ec:36:6b:8d:5f:65:10:12: 04:68:a9:b4:2e:67:63:63:35:8b:59:2e:96:04:23:f7:67:9e: b9:e4:aa:09:ea:3d:e7:61:92:c3:11:7f:0e:e3:15:3b:93:fe: 48:45:12:df:f5:6e:b6:77:84:53:95:de:de:a7:e8:18:c7:9f: 74:7e:4f:76:97:67:b4:9c:8d:b7:e4:e2:40:1d:44:cb:ae:0d: 73:15:34:07:86:6f:fa:ba:a5:1e:d7:e3:d4:a9:ac:4c:f5:26: 3c:23:3f:a6:52:4e:94:d4:fd:ad:63:dc:a2:12:63:e3:2d:dd: 0e:85:0b:b3:30:74:42:19:b6:ff:41:0d:4e:f7:e3:39:a4:be: be:d5:12:5f:88:b4:c1:33:16:8e:f2:e3:ff:de:a8:42:ff:4c: 82:d7:50:94:2f:5b:08:98:df:4c:1c:28:4e:ed:ff:06:bf:8f: 82:59:ec:16:89:55:04:12:c9:ef:bc:ff:d9:1d:c3:02:c3:20: e8:a6:1c:00:97:50:e0:87:1d:4e:b6:76:fb:9f:63:18:d4:46: bd:20:59:a0:b8:79:d2:0b:28:9b:46:b2:6b:5d:ac:df:f3:ab: 8f:c6:f7:a5:65:23:f4:54:af:49:51:bc:a7:83:38:8d:b8:0b: ff:60:c5:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9R0Zd0NhUuwElQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YzAwN2U5YzUtODMzMC00MDg4LThlOTUtNjYyYmFlMWI1Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wAISjtMzleqHNAT2kD+kvheKkQX6KfYlLus D8aivE748Irqg1i582jKa0PlDEjwa/xS0nMR14MeqfD8Ar47gnK7QwzSbuGIIhZo 8EOC8v2OHsXxh9qQWLfbR9NVh07bUa2y/BVNPtU9baeDF+w0Cl9kI8QEBkjqKnGw Q7oRz59f00JEqcLo3i4LFxT4gFwJHAcfRWJEn8NU4x6ba77+Bamg0y/0pv/3kvnO HuhR7HFMgi8zqDB8IvDnKAiali9e0nMtQJShIBLGa3/qTxA228JsEpuJjc5uRcIp 57pR9bY98kogUXTvpW1FEYbLSHWNc+LtC5iK1L7424rk0ODsEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrjsxY5jMBIN2TXAF2enQXjIYIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTI5YjM2OTktZmFhZS0z YjhiLWI0NmUtZmE1NTBhYzNkZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8ncDeP9h8Y8TLsNmuNX2UQEgRoqbQuZ2NjNYtZLpYEI/dnnrnkqgnq PedhksMRfw7jFTuT/khFEt/1brZ3hFOV3t6n6BjHn3R+T3aXZ7Scjbfk4kAdRMuu DXMVNAeGb/q6pR7X49SprEz1JjwjP6ZSTpTU/a1j3KISY+Mt3Q6FC7MwdEIZtv9B DU734zmkvr7VEl+ItMEzFo7y4//eqEL/TILXUJQvWwiY30wcKE7t/wa/j4JZ7BaJ VQQSye+8/9kdwwLDIOimHACXUOCHHU62dvufYxjURr0gWaC4edILKJtGsmtdrN/z q4/G96VlI/RUr0lRvKeDOI24C/9gxT8= -----END CERTIFICATE-----Generated at Sun Nov 24 16:07:25 2024 by rpki-client on console-ams.rpki-client.org