$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa File: a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa (raw, json) Hash identifier: 12a7rhfWJa4IybUgdl0iO13pAX5g8u1u/ySbBG+zaF0= Subject key identifier: E8:6C:74:37:F9:AC:E4:CE:6E:6A:CC:99:B0:54:04:B8:31:6B:06:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F50C35A97D23918F9E2C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 19527 IP address blocks: 34.3.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:0c:35:a9:7d:23:91:8f:9e:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=4fb655fd-9002-4a0c-827c-4eaa2dfcc88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:fa:7e:32:1e:80:a2:0e:37:7d:0c:c9:2b: e7:8d:53:4d:4a:af:c7:7a:dd:e9:06:d0:d8:2e:dc: a0:68:1a:ff:a4:27:05:6a:cc:6c:5e:56:72:e0:e1: e9:d7:ce:31:e8:b0:37:2d:1f:93:8b:7e:ab:6b:26: bb:cd:eb:ef:9e:0d:12:78:f6:a1:86:25:89:a0:34: 05:ab:c4:f9:b6:8f:90:2e:c2:ce:69:a1:2e:7e:b2: e5:bf:53:61:4d:7b:c8:f4:04:40:1c:3b:31:7e:f8: 99:38:60:ab:d7:d6:82:7e:fd:5e:5e:55:b8:18:71: 09:96:47:b3:7c:21:9a:92:12:50:11:f0:cd:3f:d8: b2:66:a9:30:dc:92:55:e8:e9:6c:eb:53:34:b4:68: 69:30:66:2f:72:5f:17:e4:30:2c:47:00:50:84:bc: 7f:6d:d4:89:e2:52:13:93:64:e0:64:22:6e:9c:d9: 5d:67:e3:e5:90:47:8d:cb:71:b9:df:2d:fa:95:0e: 42:e4:cb:f3:b2:d9:26:f3:9b:e0:1b:60:24:38:82: fc:f8:8b:2f:8c:85:23:50:97:56:3d:0b:79:c0:25: f0:91:08:3a:24:a0:1b:40:8f:a1:cb:c1:68:c7:27: e7:bb:e3:50:d9:79:f8:7a:cb:48:23:3f:7f:44:87: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:74:37:F9:AC:E4:CE:6E:6A:CC:99:B0:54:04:B8:31:6B:06:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a56d0d9e-314a-3d7b-8402-f5fa6d37c6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:db:fa:71:64:ed:0d:62:57:eb:63:fb:be:bb:a0:39:d2:48: dd:f1:b8:96:46:ad:61:0d:00:0f:c1:16:b8:f1:d0:14:6b:23: a0:07:f3:a9:a1:59:03:0c:49:80:b5:87:63:9b:ea:19:62:98: da:f3:e9:31:0b:49:65:82:71:df:c6:cc:94:de:8c:b7:de:07: 6b:01:01:7b:d7:53:ea:63:3f:47:dd:e5:4c:39:33:a2:34:f1: 3b:f1:67:44:83:69:71:a2:3b:a0:ca:21:d6:86:32:5f:79:f3: 8b:4d:eb:e0:ba:5a:0b:16:4f:91:7e:84:2b:31:f2:bb:af:11: 59:f8:45:f2:cd:d6:2a:7d:45:28:90:12:65:d1:c8:30:27:07: 2d:95:aa:ee:75:30:86:53:bb:7b:10:23:92:c8:3a:d7:a7:1a: 99:87:a7:06:29:9e:57:35:e1:95:80:88:23:13:41:64:9a:3a: 87:a4:e9:5e:ba:38:bc:11:bb:d9:ff:6f:b5:75:79:e2:4d:ef: fb:42:d7:96:e3:25:c8:d4:7f:3a:74:03:0b:f1:30:b5:d9:be: 1e:c2:b1:50:ff:56:bc:e3:7a:4a:9f:c0:1a:d2:f5:05:bc:84: cc:ae:ba:0e:03:81:40:c8:13:d9:89:ee:81:b3:69:e6:66:c6: ca:9c:8b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Qw1qX0jkY+eLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk NGZiNjU1ZmQtOTAwMi00YTBjLTgyN2MtNGVhYTJkZmNjODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC/6fjIegKION30MySvnjVNNSq/Het3pBtDY LtygaBr/pCcFasxsXlZy4OHp184x6LA3LR+Ti36raya7zevvng0SePahhiWJoDQF q8T5to+QLsLOaaEufrLlv1NhTXvI9ARAHDsxfviZOGCr19aCfv1eXlW4GHEJlkez fCGakhJQEfDNP9iyZqkw3JJV6Ols61M0tGhpMGYvcl8X5DAsRwBQhLx/bdSJ4lIT k2TgZCJunNldZ+PlkEeNy3G53y36lQ5C5Mvzstkm85vgG2AkOIL8+IsvjIUjUJdW PQt5wCXwkQg6JKAbQI+hy8Foxyfnu+NQ2Xn4estIIz9/RIfBhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhsdDf5rOTObmrMmbBUBLgxawbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTU2ZDBkOWUtMzE0YS0z ZDdiLTg0MDItZjVmYTZkMzdjNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXb+nFk7Q1iV+tj+767oDnSSN3xuJZGrWENAA/BFrjx0BRrI6AH86mh WQMMSYC1h2Ob6hlimNrz6TELSWWCcd/GzJTejLfeB2sBAXvXU+pjP0fd5Uw5M6I0 8TvxZ0SDaXGiO6DKIdaGMl9584tN6+C6WgsWT5F+hCsx8ruvEVn4RfLN1ip9RSiQ EmXRyDAnBy2Vqu51MIZTu3sQI5LIOtenGpmHpwYpnlc14ZWAiCMTQWSaOoek6V66 OLwRu9n/b7V1eeJN7/tC15bjJcjUfzp0AwvxMLXZvh7CsVD/VrzjekqfwBrS9QW8 hMyuug4DgUDIE9mJ7oGzaeZmxsqci9Y= -----END CERTIFICATE-----Generated at Fri Nov 22 08:15:12 2024 by rpki-client on console-fra.rpki-client.org