$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d356cad2-6012-3906-80ea-6a61f9fbd5c2.roa File: d356cad2-6012-3906-80ea-6a61f9fbd5c2.roa (raw, json) Hash identifier: 2+HXmjjoSSJ6/KI0+Gl5EyQeDDtLVhk50/ohmyUerRs= Subject key identifier: A2:48:87:A3:57:1A:99:B0:60:74:8C:0F:51:D6:66:E5:B4:26:00:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858471E70957CE1E65BCCF875D480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d356cad2-6012-3906-80ea-6a61f9fbd5c2.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 396982 IP address blocks: 34.70.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:95:7c:e1:e6:5b:cc:f8:75:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=3dd1855a-47f6-4ada-94dc-c06b53bfc635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:56:08:b8:b2:32:06:13:16:29:2a:13:4b:ae: ad:a5:84:10:7a:b4:bc:a0:e9:a1:5c:eb:c9:72:5e: ae:f9:8d:11:8a:ad:51:4a:4b:2e:b9:af:f4:d2:1c: 54:58:d2:8a:d3:51:33:4d:a3:9f:23:08:ac:b3:7b: ac:a2:36:8c:c0:60:b9:57:c3:90:c9:1d:50:68:e9: d3:48:55:b4:39:56:de:d7:cc:26:9f:6f:19:30:5c: a8:f7:f2:bf:71:4b:d7:cc:c9:55:f3:ec:f8:d3:f8: ca:a4:19:1a:83:10:5f:c4:5f:d1:1d:46:e9:2a:f5: 17:f0:5d:67:3a:67:f2:9c:f5:78:48:a7:a4:4b:7c: 5b:42:30:96:23:5b:3a:9f:f0:73:e5:8f:b0:8c:cd: 4e:bb:57:86:24:33:d4:35:20:a0:bd:53:58:38:a8: e1:24:7f:bc:f7:8b:b5:cf:62:9c:0a:63:76:b1:9d: bc:d0:03:26:fa:4a:71:3d:9c:c7:dd:7d:0d:a2:8f: 9f:92:8a:05:89:7e:2b:77:cf:f5:e9:35:54:76:43: 4e:8c:5d:22:d9:06:91:a4:9c:88:33:1c:d5:1f:c5: b6:35:c8:de:cd:8a:cf:dd:61:51:48:96:ec:28:17: 17:1b:16:64:34:b1:61:96:92:f4:99:36:f3:97:27: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:48:87:A3:57:1A:99:B0:60:74:8C:0F:51:D6:66:E5:B4:26:00:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d356cad2-6012-3906-80ea-6a61f9fbd5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:13:16:99:69:e3:bc:cd:ca:3d:48:3d:4f:e7:bc:88:4b:57: 13:f3:02:7d:89:d0:d4:1d:82:82:a6:b1:da:a8:61:03:77:a3: 09:f6:50:e8:48:55:b1:09:1a:e4:7f:fa:3c:c9:99:18:cb:bd: 32:8b:b3:ab:e4:66:5d:32:16:78:26:71:63:eb:39:49:97:45: 3f:0d:2f:ca:0d:ce:97:7a:ff:b4:c5:97:14:8e:86:5c:12:5c: 4c:49:5b:20:70:9c:e8:85:67:e9:9c:9c:73:ae:c0:e0:c1:06: b2:8d:85:60:a3:2b:17:9c:37:3b:67:c2:65:9d:0f:5b:8d:14: ea:b2:00:81:4a:f4:60:2e:b2:92:fe:d2:de:fb:e3:4f:f4:1b: 22:6f:b8:57:0e:6e:88:6f:01:60:92:06:9e:fc:2e:b5:96:ae: b2:6b:53:62:a2:72:db:5e:af:ff:f7:3b:9e:a5:60:41:6d:c3: 05:92:d6:6e:26:e0:c7:de:eb:a6:80:18:42:74:92:04:66:62: 06:66:2b:40:b9:23:f7:5c:be:89:4c:72:26:ba:67:40:ca:dc: e9:2b:b9:56:ca:eb:ee:51:b6:d9:3c:44:d0:d6:a8:5d:f6:52: 6e:d0:d4:bb:aa:d8:85:6b:73:fa:97:fc:f4:4e:42:40:83:37: 98:ad:19:b8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecJV84eZbzPh11IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk M2RkMTg1NWEtNDdmNi00YWRhLTk0ZGMtYzA2YjUzYmZjNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglYIuLIyBhMWKSoTS66tpYQQerS8oOmhXOvJ cl6u+Y0Riq1RSksuua/00hxUWNKK01EzTaOfIwiss3usojaMwGC5V8OQyR1QaOnT SFW0OVbe18wmn28ZMFyo9/K/cUvXzMlV8+z40/jKpBkagxBfxF/RHUbpKvUX8F1n OmfynPV4SKekS3xbQjCWI1s6n/Bz5Y+wjM1Ou1eGJDPUNSCgvVNYOKjhJH+894u1 z2KcCmN2sZ280AMm+kpxPZzH3X0Noo+fkooFiX4rd8/16TVUdkNOjF0i2QaRpJyI MxzVH8W2NcjezYrP3WFRSJbsKBcXGxZkNLFhlpL0mTbzlychEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKJIh6NXGpmwYHSMD1HWZuW0JgAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM1NmNhZDItNjAxMi0z OTA2LTgwZWEtNmE2MWY5ZmJkNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBIkYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASxMWmWnjvM3KPUg9T+e8iEtXE/MCfYnQ1B2Cgqax2qhhA3ejCfZQ6EhV sQka5H/6PMmZGMu9Mouzq+RmXTIWeCZxY+s5SZdFPw0vyg3Ol3r/tMWXFI6GXBJc TElbIHCc6IVn6Zycc67A4MEGso2FYKMrF5w3O2fCZZ0PW40U6rIAgUr0YC6ykv7S 3vvjT/QbIm+4Vw5uiG8BYJIGnvwutZausmtTYqJy216v//c7nqVgQW3DBZLWbibg x97rpoAYQnSSBGZiBmYrQLkj91y+iUxyJrpnQMrc6Su5Vsrr7lG22TxE0NaoXfZS btDUu6rYhWtz+pf89E5CQIM3mK0ZuA== -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:57 2024 by rpki-client on console-fra.rpki-client.org