$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa File: bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa (raw, json) Hash identifier: iB24RsMovJIZEsDNEQXXQ81EheQhziOhRDHqm6tMw7Y= Subject key identifier: B7:DB:98:AE:09:AF:E4:58:13:2E:2F:4C:65:A7:5F:5C:83:AF:91:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4E1AE9ED199B1F3EAADC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:e1:ae:9e:d1:99:b1:f3:ea:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=d663884e-b474-49df-9195-56e2069ac2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:ea:dd:e2:8f:d5:f5:2b:ba:ae:26:47:09: 53:40:8e:1b:1c:49:42:c6:20:3c:b3:27:b6:04:d2: 4e:4b:65:76:d1:a0:53:ec:2a:9e:56:ae:a8:5d:46: f7:18:71:66:94:4b:46:18:8b:34:45:03:78:2c:0e: 4f:75:0b:bd:9f:c7:77:57:07:4c:c0:2d:7e:9d:75: 09:c2:0f:f5:7b:3a:f8:59:c1:65:2b:fa:a9:09:08: 3c:9f:76:09:58:a2:a1:a2:b6:c1:9b:c4:31:84:e1: b0:c5:2a:da:15:27:64:03:82:77:56:69:a7:66:1c: be:2a:ce:ff:0d:66:08:8e:46:0f:d6:37:d5:79:be: 0e:2e:6b:73:0d:f3:93:ec:90:42:70:50:c3:3c:9c: 6d:d0:d6:4f:fd:14:73:33:34:b4:d4:1d:b5:18:39: 5b:40:b9:92:e9:5f:52:69:fe:30:23:f0:cc:59:a5: f1:23:a8:fb:b5:7c:1c:34:e7:d9:1c:df:c5:c5:cd: 88:49:d8:41:04:25:31:9f:de:f9:90:57:00:87:4f: ce:84:d6:bb:0d:66:a1:c8:a4:df:2a:9d:bd:bf:fe: 78:92:82:f2:d8:1a:b1:c0:54:71:39:68:e3:35:02: bc:16:70:6b:8a:8b:f4:a3:a1:c6:c3:e7:57:31:29: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:98:AE:09:AF:E4:58:13:2E:2F:4C:65:A7:5F:5C:83:AF:91:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f3:7d:cc:d9:4b:07:ed:b8:0b:64:7a:c0:d0:15:7d:69:67: e1:66:86:9e:33:00:e2:3c:70:9a:ee:e3:ed:bf:15:96:a7:0d: fa:0f:c7:02:6c:05:8c:1a:42:7c:fd:34:2f:20:f3:a6:7d:56: 7b:04:bf:cd:63:67:f4:b7:f1:ec:9b:13:30:1e:46:7d:c4:f4: 01:62:db:e4:71:f6:54:88:68:e8:73:8d:88:a1:be:f3:56:a4: 89:d9:11:a5:0c:b1:68:5d:cb:a1:41:7a:23:f2:2c:37:ce:44: 1d:83:29:fe:28:ce:42:00:e5:bd:f0:fd:77:d5:53:c9:4b:03: 50:ad:88:be:40:b5:a8:04:47:34:48:5b:53:e7:9d:4a:42:18: e0:65:75:41:2b:e3:51:c1:9f:79:41:5e:79:30:55:63:4c:4e: 2b:7c:60:cd:51:25:f0:42:43:9f:f9:61:8e:5c:de:4e:b8:31: 2b:ad:f3:b3:67:01:bd:89:f3:80:e4:50:3b:85:2c:32:17:2e: 35:95:69:b9:89:ea:32:e1:d7:01:8c:23:6f:a6:34:6d:6c:18: 98:93:a1:15:0f:48:ac:8a:d0:86:b7:ea:0c:6b:78:9c:65:58: b5:c1:c5:78:93:6a:09:e3:0d:d3:a5:93:14:31:bf:21:d5:68: 26:cd:aa:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9OGuntGZsfPqrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDY2Mzg4NGUtYjQ3NC00OWRmLTkxOTUtNTZlMjA2OWFjMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+nq3eKP1fUruq4mRwlTQI4bHElCxiA8sye2 BNJOS2V20aBT7CqeVq6oXUb3GHFmlEtGGIs0RQN4LA5PdQu9n8d3VwdMwC1+nXUJ wg/1ezr4WcFlK/qpCQg8n3YJWKKhorbBm8QxhOGwxSraFSdkA4J3VmmnZhy+Ks7/ DWYIjkYP1jfVeb4OLmtzDfOT7JBCcFDDPJxt0NZP/RRzMzS01B21GDlbQLmS6V9S af4wI/DMWaXxI6j7tXwcNOfZHN/Fxc2ISdhBBCUxn975kFcAh0/OhNa7DWahyKTf Kp29v/54koLy2BqxwFRxOWjjNQK8FnBriov0o6HGw+dXMSlT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfbmK4Jr+RYEy4vTGWnX1yDr5H3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmJjZDVmZmItNzcwOS0z NDljLTlkY2ItNjk4MDFiMjUwNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvzfczZSwftuAtkesDQFX1pZ+Fmhp4zAOI8cJru4+2/FZanDfoPxwJs BYwaQnz9NC8g86Z9VnsEv81jZ/S38eybEzAeRn3E9AFi2+Rx9lSIaOhzjYihvvNW pInZEaUMsWhdy6FBeiPyLDfORB2DKf4ozkIA5b3w/XfVU8lLA1CtiL5AtagERzRI W1PnnUpCGOBldUEr41HBn3lBXnkwVWNMTit8YM1RJfBCQ5/5YY5c3k64MSut87Nn Ab2J84DkUDuFLDIXLjWVabmJ6jLh1wGMI2+mNG1sGJiToRUPSKyK0Ia36gxreJxl WLXBxXiTagnjDdOlkxQxvyHVaCbNqvs= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:51 2024 by rpki-client on console-fra.rpki-client.org