$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa File: c407de36-1988-3e5d-83c0-862a9a9f7064.roa (raw, json) Hash identifier: FAWfhguLzEH8+54Dnay+5FE0ivDlssUX8XNLTdwlw+I= Subject key identifier: C1:3D:CC:A6:8C:89:64:D5:1E:DC:83:5A:73:52:F2:54:14:DB:46:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F5448B274C89F4DC247040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.65.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:44:8b:27:4c:89:f4:dc:24:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=c2ec51ae-279d-4fc8-a18c-598b08b59301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e5:bb:f7:e3:56:a4:09:34:c0:b7:79:2d:d1: 0f:00:25:31:d2:92:55:5d:5e:87:8a:a8:34:41:bd: f9:8a:f2:17:08:45:48:4c:c9:3d:03:80:27:59:f7: 68:6b:20:b1:5a:b7:e4:55:0a:7a:c1:c7:3e:84:c4: 7a:2e:0d:78:cc:85:3a:9f:bb:53:f8:ac:a8:d0:4a: 01:13:b8:6c:f4:14:b9:c5:c4:15:a9:07:1a:0d:08: 19:d0:df:95:0d:95:9f:d0:8c:0e:92:05:b9:0a:44: 97:df:1f:c2:eb:2c:b6:72:3f:01:ff:1f:31:71:88: b5:84:de:2c:52:a0:19:23:ed:90:2c:6f:37:77:0d: 74:e0:fd:5c:89:8c:17:f7:b7:68:e9:90:3b:bf:82: 61:37:86:73:ef:87:a1:de:b3:22:9c:83:24:3d:fc: fe:2b:1e:72:e5:b2:e9:d2:e6:27:e8:66:b9:7b:9d: c5:9a:e8:63:22:d9:90:7d:ed:65:a6:d2:b1:fb:87: ac:8a:93:a7:ce:7f:51:85:05:33:27:7d:82:06:f1: c5:32:55:14:96:b8:34:4c:28:93:bf:b5:07:af:63: ca:b0:61:ef:ca:19:9a:62:8d:f4:34:98:b2:50:39: b3:0a:21:d9:6c:8b:fe:10:15:ea:15:02:7c:83:6a: 52:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3D:CC:A6:8C:89:64:D5:1E:DC:83:5A:73:52:F2:54:14:DB:46:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:94:b1:09:5e:01:d1:65:14:c9:d5:60:3d:be:e9:3d:60:5f: 12:42:4a:59:3c:96:7a:ad:88:fe:7c:0b:08:8b:26:1f:bb:2b: be:d3:04:d9:f4:fc:cf:c2:17:98:7f:83:3e:6d:e6:51:db:45: aa:fb:2a:34:62:a6:46:8e:66:57:58:ef:34:74:45:ff:87:63: bd:76:54:c8:82:8b:13:fe:24:c2:5d:ed:97:94:6d:d9:03:c0: 55:87:e4:f0:44:cc:18:70:78:7b:09:6d:49:e0:e0:3a:e6:f0: d0:71:2a:bc:8c:8c:07:ef:d8:45:73:19:4f:f9:03:e5:67:f6: e0:40:97:66:23:50:39:56:9b:04:5b:df:7e:9e:0c:6c:5b:e6: 1c:d2:0e:e2:ab:6a:4d:96:9a:1c:d6:d5:35:74:e2:11:a2:b8: 6e:1b:ce:52:71:27:87:50:a1:06:e1:53:21:58:48:cc:d1:68: a0:45:89:ad:c9:6b:c8:c7:66:97:ff:40:2a:1d:5a:b9:3b:52: bb:de:3b:1d:ca:8f:f5:ab:80:61:18:6c:cb:67:b4:c1:5d:dc: 8d:79:4b:90:c2:9c:c5:cc:11:54:75:6b:98:68:3f:72:60:43: 02:d1:2c:6d:97:c1:0a:e4:ab:1d:36:1b:fa:24:27:ca:0c:9d: 9b:ea:f2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9USLJ0yJ9NwkcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YzJlYzUxYWUtMjc5ZC00ZmM4LWExOGMtNTk4YjA4YjU5MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOW79+NWpAk0wLd5LdEPACUx0pJVXV6Hiqg0 Qb35ivIXCEVITMk9A4AnWfdoayCxWrfkVQp6wcc+hMR6Lg14zIU6n7tT+Kyo0EoB E7hs9BS5xcQVqQcaDQgZ0N+VDZWf0IwOkgW5CkSX3x/C6yy2cj8B/x8xcYi1hN4s UqAZI+2QLG83dw104P1ciYwX97do6ZA7v4JhN4Zz74eh3rMinIMkPfz+Kx5y5bLp 0uYn6Ga5e53FmuhjItmQfe1lptKx+4esipOnzn9RhQUzJ32CBvHFMlUUlrg0TCiT v7UHr2PKsGHvyhmaYo30NJiyUDmzCiHZbIv+EBXqFQJ8g2pSVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME9zKaMiWTVHtyDWnNS8lQU20aeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzQwN2RlMzYtMTk4OC0z ZTVkLTgzYzAtODYyYTlhOWY3MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWUsQleAdFlFMnVYD2+6T1gXxJCSlk8lnqtiP58CwiLJh+7K77TBNn0 /M/CF5h/gz5t5lHbRar7KjRipkaOZldY7zR0Rf+HY712VMiCixP+JMJd7ZeUbdkD wFWH5PBEzBhweHsJbUng4Drm8NBxKryMjAfv2EVzGU/5A+Vn9uBAl2YjUDlWmwRb 336eDGxb5hzSDuKrak2WmhzW1TV04hGiuG4bzlJxJ4dQoQbhUyFYSMzRaKBFia3J a8jHZpf/QCodWrk7UrveOx3Kj/WrgGEYbMtntMFd3I15S5DCnMXMEVR1a5hoP3Jg QwLRLG2XwQrkqx02G/okJ8oMnZvq8iw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:08:56 2024 by rpki-client on console-fra.rpki-client.org