$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa File: c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa (raw, json) Hash identifier: Xiyl15haXbKos3dde/u/fYCnVd3HfO985ETQfKFcM3Y= Subject key identifier: 2C:2F:77:0B:C3:5B:CE:29:26:E0:AF:84:18:EA:FC:BD:EA:48:4D:BA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F505379FAE99BDA03CF580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.138.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:05:37:9f:ae:99:bd:a0:3c:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=3af255b7-c6f8-43e9-9ff2-a91641aa3dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:3b:d3:a2:4c:6b:4b:75:46:8c:18:ea:94: 79:2d:71:1d:c9:88:61:b7:61:d9:8a:65:3e:83:bd: 5c:00:c7:2a:e0:c1:0f:5d:25:6c:b7:5a:6f:65:90: b2:ca:39:49:c5:47:70:f5:a7:11:c2:67:70:8c:7f: d1:9c:1c:4c:b8:32:19:0f:da:17:30:33:ba:45:c4: 60:20:b1:5a:6e:0d:49:cb:82:d0:36:cd:c8:09:76: fd:f1:05:e1:ed:bc:40:67:be:dd:aa:25:83:89:b7: 92:db:8b:59:05:c0:ba:25:ea:62:77:c6:6d:47:d9: e8:57:cf:d8:a1:f6:3b:31:f8:94:f3:40:7f:4d:20: 68:af:3e:af:76:4c:7d:10:b8:e7:6b:9c:fc:a4:0f: 58:c9:6c:f0:ba:26:9b:4f:b9:26:af:48:5f:e0:c8: 91:17:55:1b:8f:63:8a:dc:8a:a0:ee:09:14:0f:fa: 77:ae:da:bf:4e:75:30:87:c3:52:bb:49:9e:5e:2c: eb:67:5c:77:0f:5b:d2:c0:f0:7a:76:bb:16:57:d2: 40:2a:80:cb:3c:18:bf:fe:eb:50:1b:d5:42:a4:25: 4b:42:ee:7c:e9:0c:7d:1b:89:a9:73:a7:25:fb:e1: 74:a4:4b:b0:da:39:ae:84:32:0d:69:39:c6:e5:cc: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2F:77:0B:C3:5B:CE:29:26:E0:AF:84:18:EA:FC:BD:EA:48:4D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:96:97:35:81:e6:28:8e:16:66:e8:ec:0e:cb:02:25:44:c3: b4:b6:ba:a4:31:e9:b3:8c:81:3d:8c:59:62:9d:15:f3:d4:98: 61:23:8c:2b:9a:4b:c6:e7:0f:aa:f8:35:0d:1c:9c:ea:9a:55: 78:2e:e2:72:74:11:fb:d1:c7:16:20:46:a8:a0:13:49:7b:e5: e5:70:95:21:eb:68:90:38:f3:89:c0:4a:ee:5a:a0:0a:0a:9c: 4a:6f:8a:ad:08:69:cb:e1:42:29:ca:8e:94:07:0f:04:50:54: 98:eb:ab:cb:9e:b7:3c:38:55:06:b6:11:37:02:08:89:7e:53: 5a:bd:a2:c9:ea:b8:ff:99:4b:fc:5a:f9:c0:d6:4d:08:62:d9: 67:8b:70:26:3f:dc:9f:1c:7a:33:c0:be:72:e6:31:b7:fb:37: 6d:9a:b3:11:93:d1:6e:a3:1f:2d:c9:55:8e:9b:25:f9:61:87: 86:ca:de:51:aa:b7:46:36:36:d1:a4:5b:dc:ee:46:a5:29:84: 0f:a5:ac:b6:50:fc:a7:d4:e0:69:e3:0f:d2:fa:6c:45:a2:4e: 8f:08:14:97:77:78:08:6f:6d:5b:53:0f:8c:61:dd:61:e8:26: 22:df:23:58:ef:19:2e:7d:18:7d:b0:30:ce:ae:bc:b3:01:da: af:db:33:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QU3n66ZvaA89YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk M2FmMjU1YjctYzZmOC00M2U5LTlmZjItYTkxNjQxYWEzZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD8706JMa0t1RowY6pR5LXEdyYhht2HZimU+ g71cAMcq4MEPXSVst1pvZZCyyjlJxUdw9acRwmdwjH/RnBxMuDIZD9oXMDO6RcRg ILFabg1Jy4LQNs3ICXb98QXh7bxAZ77dqiWDibeS24tZBcC6Jepid8ZtR9noV8/Y ofY7MfiU80B/TSBorz6vdkx9ELjna5z8pA9YyWzwuiabT7kmr0hf4MiRF1Ubj2OK 3Iqg7gkUD/p3rtq/TnUwh8NSu0meXizrZ1x3D1vSwPB6drsWV9JAKoDLPBi//utQ G9VCpCVLQu586Qx9G4mpc6cl++F0pEuw2jmuhDINaTnG5cy2GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwvdwvDW84pJuCvhBjq/L3qSE26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzg5OTdhMzQtNWE2Yi0z NTczLWFhZGUtZWUwYjg5MjNiNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWWlzWB5iiOFmbo7A7LAiVEw7S2uqQx6bOMgT2MWWKdFfPUmGEjjCua S8bnD6r4NQ0cnOqaVXgu4nJ0EfvRxxYgRqigE0l75eVwlSHraJA484nASu5aoAoK nEpviq0IacvhQinKjpQHDwRQVJjrq8uetzw4VQa2ETcCCIl+U1q9osnquP+ZS/xa +cDWTQhi2WeLcCY/3J8cejPAvnLmMbf7N22asxGT0W6jHy3JVY6bJflhh4bK3lGq t0Y2NtGkW9zuRqUphA+lrLZQ/KfU4GnjD9L6bEWiTo8IFJd3eAhvbVtTD4xh3WHo JiLfI1jvGS59GH2wMM6uvLMB2q/bM6I= -----END CERTIFICATE-----Generated at Thu Nov 21 21:47:43 2024 by rpki-client on console-ams.rpki-client.org