$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cca0e3a6-cdb4-3a41-b90a-7782d7440a6e.roa File: cca0e3a6-cdb4-3a41-b90a-7782d7440a6e.roa (raw, json) Hash identifier: qFIeJ7Wm2ysVwn/1jlq889JBNgrgXLRiuHvXmD8lV8A= Subject key identifier: 23:B1:66:C4:2D:C7:8D:BB:23:18:7C:18:B3:68:49:88:E9:61:DB:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F51C6EAF1B6A4BD8121C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cca0e3a6-cdb4-3a41-b90a-7782d7440a6e.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 35.220.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:1c:6e:af:1b:6a:4b:d8:12:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=76263ae7-5a86-4916-b249-dc2fb4128c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:3a:ae:80:28:bf:bc:59:b9:a3:61:1d:7e: b9:b3:65:02:80:d6:0e:20:ca:ce:83:ac:b0:8c:80: 0f:c5:c9:5c:cf:5a:ec:07:7b:ba:4d:51:a6:fd:8c: 58:0b:b2:5d:04:d1:3f:71:99:44:9d:f4:b6:92:45: 11:51:bb:dc:d9:7a:4f:8b:43:83:c8:2e:86:15:63: e9:80:49:b2:63:1e:a7:26:26:6c:50:4c:bf:26:0b: 7e:93:eb:76:88:70:6f:2b:f5:d8:ea:f1:5d:9f:78: 32:49:ae:cb:0b:88:27:53:cb:5c:55:4e:99:68:f6: 4b:32:d3:e0:d8:1d:c7:8d:c2:1c:c1:70:52:97:00: 7e:90:ed:b6:b1:13:b3:ce:62:20:6a:d6:a4:ad:eb: 2f:da:e9:a4:94:c7:16:e3:51:43:20:84:c9:12:a5: 4c:54:22:2f:e1:52:8e:e6:47:95:f3:3d:8b:8f:3d: aa:48:a5:9c:25:d8:ea:8f:42:fc:bf:d7:23:da:cc: e2:a6:ce:c5:d3:64:23:df:92:67:2e:fa:e5:83:60: 82:ad:74:db:67:b6:53:95:e9:de:4e:91:2f:2e:fb: c2:ec:2c:b9:59:66:fe:79:20:3b:01:75:bc:26:56: bd:f7:52:8a:cf:52:e7:80:c4:2e:46:94:f6:0e:1a: a5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B1:66:C4:2D:C7:8D:BB:23:18:7C:18:B3:68:49:88:E9:61:DB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cca0e3a6-cdb4-3a41-b90a-7782d7440a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4c:c9:ba:c1:1d:ad:9a:81:e7:32:63:c1:43:35:fa:cb:a3: 10:ef:7b:6d:1c:43:f2:95:e8:6c:92:8e:7e:5e:91:d5:d3:91: ab:02:c2:2e:1a:b0:42:ca:d0:72:8b:e7:68:d5:b8:49:90:6c: 31:b3:09:a3:af:c3:e8:11:aa:5b:42:bf:82:a3:f2:72:b7:8c: 0a:46:a3:f3:b2:a6:57:9e:64:68:0a:24:ac:30:fd:99:35:f5: d1:91:2f:fd:aa:f2:30:26:12:37:df:27:7f:83:70:f0:15:9a: c2:31:e1:1f:13:db:4f:a3:67:46:63:e1:b9:2f:0b:dd:23:1d: e3:c0:09:af:9d:bc:4c:60:b0:df:9d:47:d4:5d:35:c8:a2:b2: 57:dc:67:7c:0e:4e:22:c4:22:48:27:1f:bb:38:f4:b7:53:c5: 48:63:f6:5a:79:11:49:30:77:7e:8a:99:88:53:c7:52:20:19: 27:11:6b:44:11:6f:cf:59:86:a3:be:78:97:dc:3b:8c:2d:66: 94:d1:a3:7d:6b:96:d6:0b:a9:81:9c:1a:9c:11:b6:79:4d:93: a1:d6:1e:87:6f:62:48:93:21:65:2c:d3:db:ae:00:b5:da:e6: 04:93:f4:cf:8f:c8:54:2e:01:d6:6d:86:81:71:8f:51:ad:44: a9:3c:c4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RxurxtqS9gSHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk NzYyNjNhZTctNWE4Ni00OTE2LWIyNDktZGMyZmI0MTI4YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrc6roAov7xZuaNhHX65s2UCgNYOIMrOg6yw jIAPxclcz1rsB3u6TVGm/YxYC7JdBNE/cZlEnfS2kkURUbvc2XpPi0ODyC6GFWPp gEmyYx6nJiZsUEy/Jgt+k+t2iHBvK/XY6vFdn3gySa7LC4gnU8tcVU6ZaPZLMtPg 2B3HjcIcwXBSlwB+kO22sROzzmIgatakresv2umklMcW41FDIITJEqVMVCIv4VKO 5keV8z2Ljz2qSKWcJdjqj0L8v9cj2szips7F02Qj35JnLvrlg2CCrXTbZ7ZTlene TpEvLvvC7Cy5WWb+eSA7AXW8Jla991KKz1LngMQuRpT2DhqlwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOxZsQtx427Ixh8GLNoSYjpYdslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2NhMGUzYTYtY2RiNC0z YTQxLWI5MGEtNzc4MmQ3NDQwYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9zQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtMybrBHa2agecyY8FDNfrLoxDve20cQ/KV6GySjn5ekdXTkasCwi4a sELK0HKL52jVuEmQbDGzCaOvw+gRqltCv4Kj8nK3jApGo/OypleeZGgKJKww/Zk1 9dGRL/2q8jAmEjffJ3+DcPAVmsIx4R8T20+jZ0Zj4bkvC90jHePACa+dvExgsN+d R9RdNciislfcZ3wOTiLEIkgnH7s49LdTxUhj9lp5EUkwd36KmYhTx1IgGScRa0QR b89ZhqO+eJfcO4wtZpTRo31rltYLqYGcGpwRtnlNk6HWHodvYkiTIWUs09uuALXa 5gST9M+PyFQuAdZthoFxj1GtRKk8xHw= -----END CERTIFICATE-----Generated at Sun Nov 24 16:07:44 2024 by rpki-client on console-ams.rpki-client.org