$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b21af5a2-2a43-3100-94e3-2ea228913a45.roa File: b21af5a2-2a43-3100-94e3-2ea228913a45.roa (raw, json) Hash identifier: crNZ+m6wNcghUxhPunnNUkwbN3SUniKs3O4jYdHWOJM= Subject key identifier: 1E:43:DF:E3:72:5D:21:2D:86:9F:BE:D6:52:EB:62:0C:B5:CC:28:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847CFD4E60FCF46890CEC1D4480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b21af5a2-2a43-3100-94e3-2ea228913a45.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 19527 IP address blocks: 34.1.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:e6:0f:cf:46:89:0c:ec:1d:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=1cee69e7-bedb-44d3-a8c6-ae9437b5a0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:a7:71:d5:ef:bd:11:6e:c1:16:e7:c0:3c: 33:14:b3:50:a8:e4:d1:f3:72:73:b8:51:6f:0c:26: 68:fb:4e:4e:35:e2:65:ce:5b:31:97:1e:b1:c3:65: 66:20:61:a1:f7:f5:ef:bd:2a:aa:96:16:07:d3:b3: ee:c6:9b:e9:fe:47:7f:fb:06:0d:8d:e4:b7:fc:01: 18:c4:b3:88:08:60:ea:a5:34:e7:b3:d9:b1:fb:7c: 52:4f:47:1b:82:99:29:a9:ea:37:fe:3e:45:bd:10: 42:72:8b:83:47:eb:50:ca:1e:e5:8a:ab:b9:78:47: 05:9e:a0:a7:8f:08:27:06:8d:15:20:c7:35:ec:e7: 71:4f:27:32:b5:7d:b3:70:d9:17:6c:80:56:2f:42: 1e:e4:e2:ae:05:d9:fb:3f:23:6f:13:1d:df:1b:b6: 27:39:d4:c7:a2:de:ba:86:9a:73:bf:2f:1c:3e:ce: 87:29:26:8c:89:37:2a:dd:35:2d:24:51:c4:1c:77: 1b:22:2a:99:29:bd:80:ab:ca:36:28:31:e4:eb:1c: 57:27:30:0c:29:fa:6f:24:09:79:ef:f0:ee:94:8b: 8d:c6:fe:e2:2a:e6:80:d1:d2:f3:d0:f8:d7:58:6f: 11:a2:93:c0:ed:6f:11:ad:6b:99:db:db:4a:b6:01: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:43:DF:E3:72:5D:21:2D:86:9F:BE:D6:52:EB:62:0C:B5:CC:28:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b21af5a2-2a43-3100-94e3-2ea228913a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:32:38:bb:73:7b:b2:d6:63:b4:ee:a8:64:54:a2:e2:98:4e: 26:95:f6:48:71:14:b9:83:ff:44:c9:86:08:d3:86:40:08:b6: 75:45:0d:e8:61:ce:c9:08:52:56:c5:f5:39:29:2f:21:1f:35: 12:c3:f3:c6:f2:07:d4:52:ae:23:ca:f6:ca:5f:c8:bc:92:c1: 2a:3c:bc:d0:56:34:6f:a1:e9:8b:69:d5:8b:d8:7e:16:32:2d: b5:73:c2:bc:5b:55:ef:1e:9e:b8:e5:28:22:99:03:6f:01:75: 34:04:f0:01:7b:c4:54:e4:12:87:7b:07:39:d3:4f:1c:7b:1f: a7:49:43:2a:fe:dd:e8:30:82:c8:44:6d:8e:70:24:9b:35:13: f5:9e:74:5a:a9:95:d7:24:29:cd:25:f7:24:aa:30:1e:2b:ac: 32:7b:c6:dd:9f:61:0e:96:ed:a6:49:7d:eb:b0:da:7d:35:5f: 3b:54:ef:08:7f:c8:7b:45:5a:20:94:d2:23:e7:4b:9e:a9:3d: a2:ba:c1:6e:56:f8:e9:a5:71:b3:91:1e:16:a1:46:b8:bb:0d: ef:e0:96:50:66:7e:6c:d0:f5:28:26:5f:4f:86:38:9d:cb:b2: f7:d0:9e:38:16:6a:d3:0d:61:77:ce:b1:03:6d:27:14:6a:01: d8:84:f6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1OYPz0aJDOwdRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk MWNlZTY5ZTctYmVkYi00NGQzLWE4YzYtYWU5NDM3YjVhMGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHancdXvvRFuwRbnwDwzFLNQqOTR83JzuFFv DCZo+05ONeJlzlsxlx6xw2VmIGGh9/XvvSqqlhYH07Puxpvp/kd/+wYNjeS3/AEY xLOICGDqpTTns9mx+3xST0cbgpkpqeo3/j5FvRBCcouDR+tQyh7liqu5eEcFnqCn jwgnBo0VIMc17OdxTycytX2zcNkXbIBWL0Ie5OKuBdn7PyNvEx3fG7YnOdTHot66 hppzvy8cPs6HKSaMiTcq3TUtJFHEHHcbIiqZKb2Aq8o2KDHk6xxXJzAMKfpvJAl5 7/DulIuNxv7iKuaA0dLz0PjXWG8RopPA7W8RrWuZ29tKtgF73QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5D3+NyXSEthp++1lLrYgy1zCgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjIxYWY1YTItMmE0My0z MTAwLTk0ZTMtMmVhMjI4OTEzYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0yOLtze7LWY7TuqGRUouKYTiaV9khxFLmD/0TJhgjThkAItnVFDehh zskIUlbF9TkpLyEfNRLD88byB9RSriPK9spfyLySwSo8vNBWNG+h6Ytp1YvYfhYy LbVzwrxbVe8enrjlKCKZA28BdTQE8AF7xFTkEod7BznTTxx7H6dJQyr+3egwgshE bY5wJJs1E/WedFqpldckKc0l9ySqMB4rrDJ7xt2fYQ6W7aZJfeuw2n01XztU7wh/ yHtFWiCU0iPnS56pPaK6wW5W+OmlcbORHhahRri7De/gllBmfmzQ9SgmX0+GOJ3L svfQnjgWatMNYXfOsQNtJxRqAdiE9jk= -----END CERTIFICATE-----Generated at Fri Nov 22 08:05:21 2024 by rpki-client on console-ams.rpki-client.org