$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa File: a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa (raw, json) Hash identifier: goYHwH2nnVCC3U2qrNkq1V9L8+5XC2nUp2qHuw/d+60= Subject key identifier: 7B:D4:25:9A:0D:13:E5:AC:AD:2E:85:33:C4:AB:94:C1:43:8C:90:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FC448EEFF1687926275100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa Signing time: Thu 21 Mar 2024 21:12:34 +0000 ROA not before: Thu 21 Mar 2024 21:12:34 +0000 ROA not after: Wed 19 Jun 2024 21:12:34 +0000 asID: 19527 IP address blocks: 34.3.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fc:44:8e:ef:f1:68:79:26:27:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:12:34 2024 GMT Not After : Jun 19 21:12:34 2024 GMT Subject: CN=41e109f9-760d-442d-8257-64b373972d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:70:68:f5:48:bd:f6:56:94:aa:01:3c:a3:b5: 1a:9e:de:08:14:42:17:b4:de:a8:fd:31:ce:a5:3d: 62:31:bd:f3:60:b2:c8:10:2c:02:da:0b:37:79:7b: ea:ee:df:f8:8d:9c:2c:20:21:29:d1:be:34:ca:2d: ad:7e:fe:be:93:f6:5d:bd:64:50:09:4d:48:de:be: 58:04:d8:a5:7d:01:fe:15:c4:74:fa:0e:3d:e1:ea: ac:46:e1:ae:d3:55:e3:73:dc:42:8f:bd:b8:97:7e: 18:fe:16:13:90:32:19:af:61:3a:56:b0:fb:b5:60: 4d:d5:a4:97:98:a6:2f:e7:28:d0:e5:e6:10:3e:15: 01:28:e6:82:4e:68:b2:dd:b0:9c:d4:8b:13:1f:7c: 2a:bc:da:9c:ba:b1:3d:69:55:11:57:a9:96:d5:21: b3:ee:a9:a5:6d:12:2a:ad:a1:aa:e7:a9:32:15:f3: f4:dd:15:f8:62:78:d2:a0:7d:01:87:83:e3:01:9b: 33:06:e3:dd:f6:a3:5e:7d:35:c5:85:31:88:94:05: bc:50:34:b9:52:82:cf:c8:f6:9f:b0:0f:cf:5c:04: 62:17:3b:84:3d:29:85:9c:08:0b:03:1f:0e:f1:3c: 7f:9d:65:7c:d9:73:f4:2c:96:54:eb:d0:ce:87:bb: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D4:25:9A:0D:13:E5:AC:AD:2E:85:33:C4:AB:94:C1:43:8C:90:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fb:57:cc:5d:fc:a7:8a:2e:12:b1:f3:28:04:83:55:88:94: 47:99:72:b1:69:c7:2b:6e:4a:cf:de:42:fc:90:32:51:15:e6: f7:0c:09:d0:a8:3e:2f:c1:dd:07:e1:cf:0f:75:a9:cb:c5:8c: 87:9c:80:82:7d:5b:33:73:f4:56:f3:3a:c8:84:f2:f3:52:48: 23:ad:ef:67:ca:92:17:bd:96:38:8e:4d:c5:0d:d2:03:bc:88: 83:77:98:10:92:80:d7:08:93:0d:47:0f:9d:0d:1a:83:77:a0: 34:ef:b4:3c:d0:cd:b5:70:92:01:9d:0a:73:cf:ba:e4:99:e2: 54:b2:3a:9a:21:eb:06:6a:46:79:16:bf:6f:ae:f1:7f:d9:f9: db:f9:39:b7:fe:17:81:67:01:e8:06:07:4f:66:78:18:8d:ab: 75:01:f3:4c:2b:af:03:69:7d:2e:06:79:41:f7:91:91:cd:a8: ef:61:17:47:65:78:c0:14:5f:4d:0f:a4:53:cf:6b:39:7e:73: 24:f4:db:5d:f6:7c:80:fd:fc:3b:0b:12:85:19:2f:b5:33:4c: ca:0b:87:94:ae:d6:a5:4f:34:85:3b:70:e5:ea:b0:82:e8:2e: 2f:bb:2e:e2:40:4a:ac:20:51:42:4f:29:d7:cd:78:8f:ea:ac: 3f:b9:98:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/ESO7/FoeSYnUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTIzNFoXDTI0MDYxOTIxMTIzNFowLzEtMCsGA1UEAxMk NDFlMTA5ZjktNzYwZC00NDJkLTgyNTctNjRiMzczOTcyZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHBo9Ui99laUqgE8o7Uant4IFEIXtN6o/THO pT1iMb3zYLLIECwC2gs3eXvq7t/4jZwsICEp0b40yi2tfv6+k/ZdvWRQCU1I3r5Y BNilfQH+FcR0+g494eqsRuGu01Xjc9xCj724l34Y/hYTkDIZr2E6VrD7tWBN1aSX mKYv5yjQ5eYQPhUBKOaCTmiy3bCc1IsTH3wqvNqcurE9aVURV6mW1SGz7qmlbRIq raGq56kyFfP03RX4YnjSoH0Bh4PjAZszBuPd9qNefTXFhTGIlAW8UDS5UoLPyPaf sA/PXARiFzuEPSmFnAgLAx8O8Tx/nWV82XP0LJZU69DOh7sYdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvUJZoNE+WsrS6FM8SrlMFDjJA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTU2ZDBkOWUtMzE0YS0z ZDdiLTg0MDItZjVmYTZkMzdjNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL7V8xd/KeKLhKx8ygEg1WIlEeZcrFpxytuSs/eQvyQMlEV5vcMCdCo Pi/B3Qfhzw91qcvFjIecgIJ9WzNz9FbzOsiE8vNSSCOt72fKkhe9ljiOTcUN0gO8 iIN3mBCSgNcIkw1HD50NGoN3oDTvtDzQzbVwkgGdCnPPuuSZ4lSyOpoh6wZqRnkW v2+u8X/Z+dv5Obf+F4FnAegGB09meBiNq3UB80wrrwNpfS4GeUH3kZHNqO9hF0dl eMAUX00PpFPPazl+cyT02132fID9/DsLEoUZL7UzTMoLh5Su1qVPNIU7cOXqsILo Li+7LuJASqwgUUJPKdfNeI/qrD+5mFk= -----END CERTIFICATE-----Generated at Thu May 9 01:29:50 2024 by rpki-client on console-ams.rpki-client.org