$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa File: 0a814e36-fe37-38ec-8bb7-4226458a1679.roa (raw, json) Hash identifier: zteGOHbzWFT3bSU7h7kSWU5JD3n2L7ZDBDD6ho+Fh0o= Subject key identifier: 5C:BE:DC:D3:88:38:5E:BF:AB:48:25:7B:93:DD:21:6E:84:6A:D7:BD Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844E93A9ABD6E4EF05F40C8E330 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa Signing time: Fri 16 Feb 2024 14:00:29 +0000 ROA not before: Fri 16 Feb 2024 14:00:29 +0000 ROA not after: Thu 16 May 2024 13:00:29 +0000 asID: 29802 IP address blocks: 199.231.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e9:3a:9a:bd:6e:4e:f0:5f:40:c8:e3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 16 14:00:29 2024 GMT Not After : May 16 13:00:29 2024 GMT Subject: CN=60d67924-8597-4195-82a7-bcab795d76ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:c0:4c:ff:77:2f:31:53:c3:51:9d:55:17: a0:5f:b6:ce:c1:de:d1:85:b9:74:56:9d:08:3d:22: 5f:6f:2b:01:45:13:d9:bd:74:e5:83:8a:7e:9d:5c: 58:7e:03:df:7c:84:31:1e:72:fe:e6:ed:ed:69:e8: 3f:c0:fc:28:18:90:fa:5c:a3:d1:8e:8a:70:87:bc: c9:07:2a:8e:8e:c5:56:c0:b4:8f:ce:a4:e7:dc:45: 84:26:0a:14:d0:a8:91:76:df:1f:99:8f:65:5c:55: 01:47:3e:c2:91:17:11:20:fa:dd:b9:52:b1:05:b7: 9a:93:55:d1:ec:e6:35:72:0b:f2:6d:ab:83:80:c6: 1a:c7:de:04:d6:9e:6b:03:5d:a4:54:c3:bc:88:f5: ed:90:99:1f:5c:21:12:3f:32:27:f3:70:5a:6d:ee: f9:5e:d2:90:12:f8:9c:93:6f:da:60:31:f0:9f:fb: 70:7b:02:65:2c:9d:3a:10:b5:d1:e2:01:de:17:f1: 36:8d:b2:8c:f9:2c:2c:6d:da:1d:79:1c:5e:c8:6f: 12:74:80:a9:13:ec:d5:69:64:7d:14:18:91:48:c0: ad:98:0c:f3:1c:5e:d3:0b:87:47:c4:16:a9:e0:7a: 7e:cb:09:35:af:e7:eb:e7:6d:d9:70:20:60:9b:2c: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BE:DC:D3:88:38:5E:BF:AB:48:25:7B:93:DD:21:6E:84:6A:D7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.231.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:95:4e:84:e3:6e:48:f3:e1:d9:a4:df:e5:bb:0b:29:7b:45: a9:10:d2:91:87:d0:6b:8f:a7:79:d6:49:30:9e:19:ba:68:58: c1:69:2d:39:dc:af:a1:e0:bd:81:a9:88:c9:ce:9b:94:b9:7f: 79:a7:be:c0:2d:34:4f:6c:71:fd:cf:a1:87:f1:67:b5:09:63: 12:ff:52:d2:cf:34:f7:7f:77:17:e3:4e:40:ab:07:67:00:c1: 74:73:ba:5b:5c:e8:ce:90:51:74:f5:48:8a:32:52:7a:1f:66: ca:3e:d6:60:6e:01:37:c3:07:84:50:17:a5:32:d7:0b:89:13: 2d:6d:d1:f1:5d:aa:af:d4:c2:e1:44:ec:c5:81:60:78:d0:f8: e9:f5:0d:2d:bc:4c:5f:09:8c:f3:d5:99:dc:35:ca:de:87:4e: 2d:0f:cc:03:4e:6c:df:59:03:c2:3b:e3:54:2e:72:bb:85:18: 31:0c:d8:6d:b4:b2:de:5a:0a:fc:37:f7:36:0a:cb:ed:54:fe: b1:14:ca:5a:ac:e7:19:b8:4c:58:91:7f:47:3e:98:2b:f8:0c: 40:ca:ce:f0:1d:40:d6:1a:f2:f3:25:0e:50:89:43:1d:68:3f: 14:d6:5d:b4:3a:3c:d7:60:cd:78:56:29:7e:a6:c5:d7:5a:7b: 93:8f:f1:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETpOpq9bk7wX0DI4zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxNjE0MDAyOVoXDTI0MDUxNjEzMDAyOVowLzEtMCsGA1UEAxMk NjBkNjc5MjQtODU5Ny00MTk1LTgyYTctYmNhYjc5NWQ3NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fHATP93LzFTw1GdVRegX7bOwd7Rhbl0Vp0I PSJfbysBRRPZvXTlg4p+nVxYfgPffIQxHnL+5u3taeg/wPwoGJD6XKPRjopwh7zJ ByqOjsVWwLSPzqTn3EWEJgoU0KiRdt8fmY9lXFUBRz7CkRcRIPrduVKxBbeak1XR 7OY1cgvybauDgMYax94E1p5rA12kVMO8iPXtkJkfXCESPzIn83Babe75XtKQEvic k2/aYDHwn/twewJlLJ06ELXR4gHeF/E2jbKM+SwsbdodeRxeyG8SdICpE+zVaWR9 FBiRSMCtmAzzHF7TC4dHxBap4Hp+ywk1r+fr523ZcCBgmyxVYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy+3NOIOF6/q0gle5PdIW6Eate9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMGE4MTRlMzYtZmUzNy0z OGVjLThiYjctNDIyNjQ1OGExNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx+egMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGVToTjbkjz4dmk3+W7Cyl7RakQ0pGH0GuPp3nWSTCeGbpoWMFpLTnc r6HgvYGpiMnOm5S5f3mnvsAtNE9scf3PoYfxZ7UJYxL/UtLPNPd/dxfjTkCrB2cA wXRzultc6M6QUXT1SIoyUnofZso+1mBuATfDB4RQF6Uy1wuJEy1t0fFdqq/UwuFE 7MWBYHjQ+On1DS28TF8JjPPVmdw1yt6HTi0PzANObN9ZA8I741QucruFGDEM2G20 st5aCvw39zYKy+1U/rEUylqs5xm4TFiRf0c+mCv4DEDKzvAdQNYa8vMlDlCJQx1o PxTWXbQ6PNdgzXhWKX6mxddae5OP8WQ= -----END CERTIFICATE-----Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org