$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa File: 9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa (raw, json) Hash identifier: gEZAcGdn8PtPoLptwdCuJ+BBcrqP49WyIVgnxlTFJL4= Subject key identifier: AA:7C:04:83:5D:11:5F:CF:C5:AE:EB:B2:73:1D:86:F6:1E:83:C6:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4F6CF257A9A501E94AC10 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.66.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:f6:cf:25:7a:9a:50:1e:94:ac:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=7cd6ff33-9f35-49d1-acdf-9b33726c5fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:82:07:e1:9a:6f:a3:5b:69:7f:cd:2e:bc: ea:b7:b7:1c:b5:0f:8f:56:fa:f6:f1:d6:74:30:a7: 8c:d3:70:d3:e4:21:aa:d0:a2:6f:94:79:84:e7:ee: dd:23:e8:cb:a4:99:43:08:af:20:be:ca:cd:17:16: e5:04:b2:99:1d:61:7c:9a:81:61:50:67:50:b9:77: 65:ef:84:53:59:3d:2b:ca:58:9d:0e:0e:b5:e8:c2: e0:ee:51:3d:78:ba:17:87:d5:fe:3d:b1:11:49:64: 8a:f3:5d:79:de:81:b0:ba:e6:5b:e5:92:d0:6b:f2: 56:de:90:81:de:96:e4:03:5d:00:59:84:8d:42:fb: 14:be:7d:7c:ea:6a:c7:70:42:ea:b3:3d:2d:5a:2b: 03:7b:9f:90:db:0e:08:76:76:c3:91:d0:4c:96:ee: 29:ce:36:67:46:79:da:11:d4:b1:64:11:d6:78:7f: 9e:7e:9f:1c:90:ed:70:9d:38:7d:c5:4f:1d:58:bb: 3c:a8:25:b2:f3:de:3f:8e:4b:83:ec:38:47:e0:3d: 5b:a2:fd:d1:4f:d0:2f:1e:36:84:bd:9d:1e:36:27: cd:83:db:50:b7:dc:40:64:5e:0b:36:ed:0d:a3:a7: 31:38:a9:9b:a5:d6:f5:85:84:ac:17:7a:08:c4:f1: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7C:04:83:5D:11:5F:CF:C5:AE:EB:B2:73:1D:86:F6:1E:83:C6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e5:67:59:2d:0a:7d:e7:1c:69:f3:c2:b8:43:03:20:f5:9d: bd:28:3f:ac:d2:1b:03:19:0a:c4:7c:80:56:55:fd:41:f0:7b: 30:35:4b:00:da:f0:b2:71:2b:8b:94:2b:f4:31:7f:35:02:99: 5e:fc:16:fd:64:95:e6:f6:45:de:73:1a:90:cc:e6:0b:b5:04: dd:35:05:f4:0b:ac:e7:4d:1e:f1:94:0a:62:93:ab:5b:af:f9: 51:5e:f4:93:6e:be:27:7d:00:d8:ee:19:19:53:85:36:2e:13: 75:b7:2f:94:b8:eb:84:a7:72:17:58:0a:07:89:59:f2:f1:9a: 08:cc:d7:03:ad:5b:ad:be:3a:27:5b:28:01:8b:09:94:83:f0: 97:a5:13:b5:3a:e2:e0:28:fb:69:f6:ea:20:62:75:a5:bb:ae: c7:dd:a8:e4:03:74:6f:a2:dc:1c:dc:97:04:b5:06:05:fe:63: bf:4f:89:07:06:1f:2a:25:60:dc:a8:31:1c:9a:e3:1a:c8:8d: 75:e1:02:cb:e2:61:b6:01:67:b9:1f:35:1c:19:32:1f:8e:21: 2c:f1:73:59:4e:f1:d9:24:a7:1b:eb:b9:9f:78:be:aa:48:89: f5:49:2f:c4:01:ac:94:ec:98:29:e3:88:bc:84:5b:27:c0:dd: 3e:b7:d9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9PbPJXqaUB6UrBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk N2NkNmZmMzMtOWYzNS00OWQxLWFjZGYtOWIzMzcyNmM1ZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGiCB+Gab6NbaX/NLrzqt7cctQ+PVvr28dZ0 MKeM03DT5CGq0KJvlHmE5+7dI+jLpJlDCK8gvsrNFxblBLKZHWF8moFhUGdQuXdl 74RTWT0rylidDg616MLg7lE9eLoXh9X+PbERSWSK81153oGwuuZb5ZLQa/JW3pCB 3pbkA10AWYSNQvsUvn186mrHcELqsz0tWisDe5+Q2w4IdnbDkdBMlu4pzjZnRnna EdSxZBHWeH+efp8ckO1wnTh9xU8dWLs8qCWy894/jkuD7DhH4D1bov3RT9AvHjaE vZ0eNifNg9tQt9xAZF4LNu0No6cxOKmbpdb1hYSsF3oIxPGRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp8BINdEV/Pxa7rsnMdhvYeg8aaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWUyY2RjY2MtN2YxMS0z NGRhLWJjNjQtMWE0ZDI5NzNlY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXlZ1ktCn3nHGnzwrhDAyD1nb0oP6zSGwMZCsR8gFZV/UHwezA1SwDa 8LJxK4uUK/QxfzUCmV78Fv1kleb2Rd5zGpDM5gu1BN01BfQLrOdNHvGUCmKTq1uv +VFe9JNuvid9ANjuGRlThTYuE3W3L5S464SnchdYCgeJWfLxmgjM1wOtW62+Oidb KAGLCZSD8JelE7U64uAo+2n26iBidaW7rsfdqOQDdG+i3BzclwS1BgX+Y79PiQcG HyolYNyoMRya4xrIjXXhAsviYbYBZ7kfNRwZMh+OISzxc1lO8dkkpxvruZ94vqpI ifVJL8QBrJTsmCnjiLyEWyfA3T632d0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:47:24 2024 by rpki-client on console-ams.rpki-client.org