$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa File: bf60108d-6422-313a-9cd9-777c85bff898.roa (raw, json) Hash identifier: 2wV5snCcFxB4JPIbC2N8f51yCdppbtKQNVy19gDBklY= Subject key identifier: 4E:E5:EA:B3:9B:F7:65:8D:80:30:44:F6:8F:84:50:8B:0E:9D:7C:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F51375CAE55292EAE36FC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.71.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:13:75:ca:e5:52:92:ea:e3:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=845fd96d-d5f2-4b90-9b45-97ac53425aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:0f:3e:40:d1:bb:e0:f0:f4:81:48:a5:3c: 78:e7:4e:c0:cd:dc:92:ab:c9:b6:09:19:01:5a:3d: ae:28:c5:97:18:23:d2:7e:5f:4d:4c:58:bb:3c:80: 74:91:f3:e1:16:50:e7:fe:c7:7b:7a:09:a7:d5:14: da:bd:25:32:1c:05:64:49:39:9f:88:29:66:a7:91: 66:cb:54:d7:ba:f2:6c:a6:dc:fc:98:82:b3:6b:ae: 58:ba:cb:e3:9c:6e:09:b1:74:8f:c2:c0:d0:5b:33: 32:51:11:5f:35:84:73:4e:c3:be:98:4f:be:34:8a: de:f8:58:d0:ab:77:bf:69:33:8c:f8:9e:46:11:fa: 80:d4:be:79:91:8d:4d:95:f4:75:75:6a:d1:63:75: cd:3b:50:ce:ef:2a:13:99:11:7e:71:29:1b:f7:77: 4b:e3:58:85:e0:a4:7f:b3:c0:3b:64:12:c7:18:14: d8:5c:87:20:b7:fa:7b:f9:ce:a5:c7:6e:06:55:86: e2:47:ac:a5:a8:46:4d:20:78:46:67:e1:cf:1d:04: 1d:b5:db:96:64:98:05:9e:47:85:58:20:55:17:49: 28:f3:34:88:46:a9:ca:ce:52:92:a3:ba:cc:bd:61: d1:da:3e:61:5e:a0:a0:1d:51:02:37:f7:cc:12:5d: 8a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E5:EA:B3:9B:F7:65:8D:80:30:44:F6:8F:84:50:8B:0E:9D:7C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a9:ac:0e:82:14:85:47:ab:1c:1c:db:1d:71:c4:46:e7:10: 32:dc:af:40:bf:68:f1:b2:64:cf:af:76:96:63:45:df:91:b2: e9:87:11:ea:a8:79:47:16:9f:fd:99:75:d6:48:30:6a:57:c9: 83:e2:f8:1c:7f:dc:be:97:3c:05:d4:06:63:c6:57:98:57:0a: 65:41:ab:20:af:b9:c3:3c:0b:74:02:6d:f8:3b:c0:53:ac:5d: da:bf:13:0f:6a:c2:3e:9d:73:b9:3b:2a:a5:c0:83:1f:d2:40: 89:ba:c3:36:32:37:d6:9d:cd:0c:d6:0b:83:6a:18:30:64:5a: 15:a3:c2:b3:4a:ee:df:3e:a3:a2:d1:ca:50:b0:9a:ad:88:c0: 69:91:c1:d9:92:35:2f:2a:89:05:43:27:23:82:27:6e:c0:2b: 37:32:8a:fc:e3:c9:1c:1d:56:4b:3e:70:a8:8c:47:f2:6e:cc: 19:07:5b:f9:81:07:6e:58:79:27:da:45:ac:98:6e:7e:85:22: 3d:67:22:a9:5a:37:32:bc:95:bf:24:a7:fb:b3:38:2d:89:94: c6:be:36:9a:1a:f0:f5:2e:1a:7e:f1:a3:6e:53:c5:84:de:84: db:08:0c:f1:f9:aa:9a:f4:88:f6:ce:a2:58:d3:d4:d0:17:26: a6:28:39:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RN1yuVSkurjb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk ODQ1ZmQ5NmQtZDVmMi00YjkwLTliNDUtOTdhYzUzNDI1YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAissPPkDRu+Dw9IFIpTx4507AzdySq8m2CRkB Wj2uKMWXGCPSfl9NTFi7PIB0kfPhFlDn/sd7egmn1RTavSUyHAVkSTmfiClmp5Fm y1TXuvJsptz8mIKza65YusvjnG4JsXSPwsDQWzMyURFfNYRzTsO+mE++NIre+FjQ q3e/aTOM+J5GEfqA1L55kY1NlfR1dWrRY3XNO1DO7yoTmRF+cSkb93dL41iF4KR/ s8A7ZBLHGBTYXIcgt/p7+c6lx24GVYbiR6ylqEZNIHhGZ+HPHQQdtduWZJgFnkeF WCBVF0ko8zSIRqnKzlKSo7rMvWHR2j5hXqCgHVECN/fMEl2KzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7l6rOb92WNgDBE9o+EUIsOnXxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2MDEwOGQtNjQyMi0z MTNhLTljZDktNzc3Yzg1YmZmODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeprA6CFIVHqxwc2x1xxEbnEDLcr0C/aPGyZM+vdpZjRd+RsumHEeqo eUcWn/2ZddZIMGpXyYPi+Bx/3L6XPAXUBmPGV5hXCmVBqyCvucM8C3QCbfg7wFOs Xdq/Ew9qwj6dc7k7KqXAgx/SQIm6wzYyN9adzQzWC4NqGDBkWhWjwrNK7t8+o6LR ylCwmq2IwGmRwdmSNS8qiQVDJyOCJ27AKzcyivzjyRwdVks+cKiMR/JuzBkHW/mB B25YeSfaRayYbn6FIj1nIqlaNzK8lb8kp/uzOC2JlMa+Npoa8PUuGn7xo25TxYTe hNsIDPH5qpr0iPbOoljT1NAXJqYoOTQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:47:40 2024 by rpki-client on console-ams.rpki-client.org