$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa File: d3e7c7a6-4f36-36ab-a259-e80420017c29.roa (raw, json) Hash identifier: ExK2pgU+tEk+/hDU9r+7OJEbgQqZ3tR6Mq7wGjreqgY= Subject key identifier: 57:C2:52:5D:CC:A1:7C:9C:BA:34:3C:E2:7E:DA:A5:AA:70:57:75:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F52E314B1FBAA96ECB1B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.133.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:2e:31:4b:1f:ba:a9:6e:cb:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=126aed03-fa4a-4b26-a638-fd55a1de0081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:27:09:73:73:2c:90:95:69:39:ad:20:d6: 7a:1b:5c:9d:a5:da:c7:f5:8e:ca:6b:1c:39:0a:3c: d7:e7:d5:62:33:65:b9:90:df:f9:a1:42:18:c1:96: 5b:61:05:c1:2a:c8:5d:31:59:fc:8c:64:90:91:ee: bc:a2:ea:41:ef:54:b7:39:f1:e9:cf:a7:f9:78:80: 36:8d:ae:d5:06:01:2f:1a:26:ad:67:bc:51:c1:88: 32:88:a1:65:d4:eb:59:7c:c4:1b:05:be:a8:34:ec: b8:64:9e:1e:e0:97:02:68:6b:77:63:54:c8:bf:c9: ae:1e:47:97:79:68:10:2f:7b:c4:a6:31:9c:29:f1: 86:06:ff:0a:2e:9e:ce:b4:63:a6:41:8d:be:22:60: 84:86:4a:1a:3b:29:e2:56:14:81:a7:53:fe:d4:5e: f8:ed:a2:f1:af:20:17:e1:7f:ac:d7:54:18:99:ef: 51:3b:5b:17:0e:a9:59:27:76:92:13:78:e2:26:6d: 28:ad:82:66:6e:b5:40:9a:67:a8:f4:7d:d0:70:48: d0:30:a7:68:82:3c:42:77:c5:e5:7c:be:be:1e:af: fa:c9:7d:50:33:60:d4:68:62:57:f6:e9:e8:0e:c7: 5a:41:38:bf:ec:35:f4:2b:cf:f7:1b:12:2f:99:62: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C2:52:5D:CC:A1:7C:9C:BA:34:3C:E2:7E:DA:A5:AA:70:57:75:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:25:e0:16:8b:b6:c4:61:2b:a9:67:c7:10:2d:3c:f1:9f:79: d6:79:9c:87:e5:77:cc:ac:60:0e:11:6d:b0:ff:2e:67:76:44: 25:5f:77:13:58:a7:9a:da:60:4b:8f:d0:2b:41:1f:1e:d3:72: d5:36:90:db:c9:88:39:91:8c:14:0f:55:26:8b:f4:0d:d1:0f: 05:b1:39:f7:6f:98:5e:70:bc:ad:02:cd:06:e9:75:e1:60:9f: d4:b0:48:16:e1:0c:58:af:2c:e0:0f:dd:a3:31:41:9a:88:d7: 3c:2d:2d:cf:43:d4:77:07:91:8b:9f:98:0d:03:bc:07:25:e3: 9b:6d:5c:9e:d6:9e:0e:dc:92:96:49:4e:0a:bd:b4:3f:17:24: c7:e0:1e:ee:5d:a2:8a:a7:6f:f7:c3:30:1c:92:fe:a2:51:fb: c3:d6:bb:60:75:49:f5:34:ac:fd:a7:96:a3:fe:30:bf:2a:cb: 9f:21:c8:10:d1:32:55:c2:5f:41:0e:44:6f:23:77:bd:92:fd: 73:ef:fe:fa:a1:63:47:a6:9b:9f:ff:04:6d:18:83:f5:26:bb: 91:ba:4e:7b:ac:3f:c1:c1:ba:b1:cf:92:58:56:0c:a2:16:61: ba:d4:6a:0e:51:2f:fc:33:51:76:c2:0a:3f:4d:e7:2e:1c:c3: e6:35:43:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9S4xSx+6qW7LGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MTI2YWVkMDMtZmE0YS00YjI2LWE2MzgtZmQ1NWExZGUwMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp0nCXNzLJCVaTmtINZ6G1ydpdrH9Y7Kaxw5 CjzX59ViM2W5kN/5oUIYwZZbYQXBKshdMVn8jGSQke68oupB71S3OfHpz6f5eIA2 ja7VBgEvGiatZ7xRwYgyiKFl1OtZfMQbBb6oNOy4ZJ4e4JcCaGt3Y1TIv8muHkeX eWgQL3vEpjGcKfGGBv8KLp7OtGOmQY2+ImCEhkoaOyniVhSBp1P+1F747aLxryAX 4X+s11QYme9RO1sXDqlZJ3aSE3jiJm0orYJmbrVAmmeo9H3QcEjQMKdogjxCd8Xl fL6+Hq/6yX1QM2DUaGJX9unoDsdaQTi/7DX0K8/3GxIvmWICQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfCUl3MoXycujQ84n7apapwV3XXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDNlN2M3YTYtNGYzNi0z NmFiLWEyNTktZTgwNDIwMDE3YzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwl4BaLtsRhK6lnxxAtPPGfedZ5nIfld8ysYA4RbbD/Lmd2RCVfdxNY p5raYEuP0CtBHx7TctU2kNvJiDmRjBQPVSaL9A3RDwWxOfdvmF5wvK0CzQbpdeFg n9SwSBbhDFivLOAP3aMxQZqI1zwtLc9D1HcHkYufmA0DvAcl45ttXJ7Wng7ckpZJ Tgq9tD8XJMfgHu5dooqnb/fDMByS/qJR+8PWu2B1SfU0rP2nlqP+ML8qy58hyBDR MlXCX0EORG8jd72S/XPv/vqhY0emm5//BG0Yg/Umu5G6TnusP8HBurHPklhWDKIW YbrUag5RL/wzUXbCCj9N5y4cw+Y1Q40= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:58 2024 by rpki-client on console-fra.rpki-client.org