$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa File: bfad2657-6c63-37ab-8995-4f4f371014c2.roa (raw, json) Hash identifier: IXeHN/NR4sk6OGMjjvk32y5YZ9YynQyEK3Bl7vX1zEQ= Subject key identifier: 33:F9:1A:2A:7B:A0:14:4D:9F:D1:5D:8C:9A:C1:A2:C8:9B:74:85:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F4E37829FFC27539870280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.72.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:e3:78:29:ff:c2:75:39:87:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=d9f557b9-b95c-4622-bcd8-e2e5d593572e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:ef:8f:90:c0:13:39:87:20:66:35:4f:4a: e4:a9:89:52:6f:58:e5:41:00:8b:4b:ea:5f:4f:a1: b6:bd:e6:e9:5b:86:2d:1d:8b:07:b8:ee:7c:48:b1: 76:3e:c9:5d:9d:34:e7:42:b8:82:8f:95:04:4f:f0: 85:08:9d:c4:1b:b1:4d:fe:b8:96:b1:89:eb:9a:d7: b1:f0:db:96:ba:48:9d:14:5a:57:5c:ac:2b:d2:7b: df:35:4e:5b:34:80:73:f8:a3:72:2b:73:92:84:20: 3d:9d:55:69:4f:c6:86:de:a1:ee:be:2b:99:29:53: 31:57:17:28:bd:ac:71:a9:21:47:e3:37:0b:f7:98: d4:ff:60:60:2c:a8:80:52:c0:9a:fe:1b:67:89:b6: 0f:50:9c:84:93:09:20:f6:2e:6b:67:76:72:c6:13: b5:ed:3e:c0:a1:02:fc:72:b9:92:39:3c:50:b2:f0: 69:4b:9e:5e:cd:3b:a0:ea:c2:de:96:8f:d4:ce:a4: 51:d2:29:da:b6:b4:c5:6e:43:2b:1a:27:3d:32:b0: 0d:c9:9d:84:97:b8:56:77:2b:e2:a5:e7:96:ce:62: 69:46:90:f0:74:ab:0f:98:37:d8:d0:80:d9:b0:36: f7:56:fd:79:f0:7d:2d:5c:03:6e:a6:33:e1:2d:52: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F9:1A:2A:7B:A0:14:4D:9F:D1:5D:8C:9A:C1:A2:C8:9B:74:85:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f9:92:63:de:34:98:12:18:e7:3d:d6:bd:85:3c:4b:13:8a: 9e:a6:40:07:de:87:d2:ca:bc:2f:84:c6:ed:47:90:66:48:00: c3:51:d9:9a:e6:d2:18:56:ba:13:1b:3d:ee:28:95:41:69:b6: 06:b2:17:ea:90:08:60:29:41:fd:a1:6e:46:66:20:96:e1:97: dc:d8:32:af:85:e0:15:15:48:a6:f9:9d:da:53:32:45:b2:49: 3d:d3:26:d8:a7:0d:91:0d:90:cc:cb:a7:07:54:67:9a:7c:59: ae:50:75:65:55:3b:d6:86:d0:1b:8c:81:81:7a:02:0e:d5:52: 8e:c3:2a:4c:62:f9:3a:da:09:36:aa:d3:56:c9:6d:a4:c3:b0: d2:55:e4:08:c3:2e:6e:d9:92:cc:4a:52:2a:e1:77:e9:32:cf: aa:c4:65:00:f6:b6:9b:5c:52:38:7f:82:7c:44:a9:da:5f:3f: c3:e1:c8:bd:d3:9d:be:2b:ee:d8:02:47:46:98:56:0d:77:b5: 1e:6c:aa:7d:9e:88:8b:f8:72:6a:2b:0a:9b:2c:3a:ea:43:b8: 3a:6e:05:fc:d7:29:46:77:d6:d9:cd:3f:c5:95:06:36:0b:9d: 78:85:30:fe:d2:0f:50:50:b4:b0:8d:c8:ea:c6:35:33:98:de: 8a:b2:70:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9ON4Kf/CdTmHAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDlmNTU3YjktYjk1Yy00NjIyLWJjZDgtZTJlNWQ1OTM1NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PPvj5DAEzmHIGY1T0rkqYlSb1jlQQCLS+pf T6G2vebpW4YtHYsHuO58SLF2PsldnTTnQriCj5UET/CFCJ3EG7FN/riWsYnrmtex 8NuWukidFFpXXKwr0nvfNU5bNIBz+KNyK3OShCA9nVVpT8aG3qHuviuZKVMxVxco vaxxqSFH4zcL95jU/2BgLKiAUsCa/htnibYPUJyEkwkg9i5rZ3ZyxhO17T7AoQL8 crmSOTxQsvBpS55ezTug6sLelo/UzqRR0inatrTFbkMrGic9MrANyZ2El7hWdyvi peeWzmJpRpDwdKsPmDfY0IDZsDb3Vv158H0tXANupjPhLVJ3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP5Gip7oBRNn9FdjJrBosibdIU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZhZDI2NTctNmM2My0z N2FiLTg5OTUtNGY0ZjM3MTAxNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL5kmPeNJgSGOc91r2FPEsTip6mQAfeh9LKvC+Exu1HkGZIAMNR2Zrm 0hhWuhMbPe4olUFptgayF+qQCGApQf2hbkZmIJbhl9zYMq+F4BUVSKb5ndpTMkWy ST3TJtinDZENkMzLpwdUZ5p8Wa5QdWVVO9aG0BuMgYF6Ag7VUo7DKkxi+TraCTaq 01bJbaTDsNJV5AjDLm7ZksxKUirhd+kyz6rEZQD2tptcUjh/gnxEqdpfP8PhyL3T nb4r7tgCR0aYVg13tR5sqn2eiIv4cmorCpssOupDuDpuBfzXKUZ31tnNP8WVBjYL nXiFMP7SD1BQtLCNyOrGNTOY3oqycOI= -----END CERTIFICATE-----Generated at Sun Nov 24 16:07:39 2024 by rpki-client on console-ams.rpki-client.org