$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa File: 2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa (raw, json) Hash identifier: 6bP+X8pfkVQsPEtGmPou+sS1bHpur7OvaU/4+6yRbEs= Subject key identifier: 3C:EA:27:56:18:73:12:A3:DE:00:59:06:DE:50:AD:EB:17:74:37:E6 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844E23FD851346CC36DC882CC00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa Signing time: Wed 14 Feb 2024 02:00:25 +0000 ROA not before: Wed 14 Feb 2024 02:00:25 +0000 ROA not after: Tue 14 May 2024 01:00:25 +0000 asID: 29802 IP address blocks: 162.220.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e2:3f:d8:51:34:6c:c3:6d:c8:82:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 14 02:00:25 2024 GMT Not After : May 14 01:00:25 2024 GMT Subject: CN=dad0b513-7ec7-488f-848a-5b34b46f1c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3b:a8:eb:70:ac:c7:02:80:a7:3c:e9:c7:35: d9:76:73:03:c8:ff:7d:a3:94:31:44:16:e5:98:11: 69:50:4f:05:aa:d1:41:76:bc:19:91:6e:03:3f:b3: 91:2b:61:57:4a:ff:7e:ce:31:e4:57:6a:ab:aa:76: f5:83:c8:23:da:66:96:27:57:67:28:84:16:c7:78: c6:3b:ea:8e:a3:be:b5:31:c0:54:57:13:91:81:97: 92:cd:e2:f9:0a:1b:5c:21:cf:62:2c:36:d7:17:ca: d7:bb:54:95:13:8d:d7:32:a6:a1:96:2a:e5:96:09: a8:8b:d8:29:d4:b0:fe:a8:94:31:a5:b5:6b:fa:bf: e8:cb:a3:77:0b:d7:71:8a:79:37:9f:14:53:6d:9b: 41:bf:2c:f8:ca:74:cf:23:77:c5:6c:55:c7:f0:43: cf:46:49:ee:e9:13:1b:64:ba:a3:ed:47:65:cf:92: 87:09:96:76:b2:fb:d4:ec:a2:6e:75:a8:55:a1:cb: 5c:d5:d2:06:63:7d:15:56:73:5d:ab:af:13:f6:3c: c8:c8:e3:6b:43:1c:5d:ea:af:1f:af:68:bd:fc:84: 55:12:e2:40:7a:04:5b:b8:5f:e9:2d:4d:41:b6:83: b5:b3:51:1b:ad:b1:5f:1c:dd:cc:d5:b0:9d:91:2b: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:27:56:18:73:12:A3:DE:00:59:06:DE:50:AD:EB:17:74:37:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.220.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:43:c5:f5:58:2c:1d:0b:5a:e5:b4:f3:75:30:f4:e2:d1:00: fb:ad:18:cf:23:3b:1c:8b:6e:66:fb:33:f9:8a:b4:25:e8:da: f8:c3:2e:5c:57:da:26:28:7b:4f:5b:49:3c:fd:b1:1f:4d:7f: 9b:e3:93:dd:94:21:8a:c3:08:37:45:a4:50:29:a1:50:c3:94: 0a:7f:82:ed:99:2c:61:76:56:89:3a:55:28:44:7e:d6:0b:aa: f7:90:43:21:2b:91:e1:90:28:8c:fc:9c:29:86:28:1b:77:ec: fb:7a:7a:10:ae:38:48:a2:7b:e2:2b:f6:bf:d9:3b:09:7b:75: 15:6f:b7:1b:33:b3:8c:93:9e:82:3d:7b:94:02:10:0f:62:15: 82:f4:a8:2f:9b:6e:46:2c:e5:98:ad:57:00:fa:b1:7b:96:21: 8a:74:85:69:49:71:a4:a6:e8:63:d1:4c:38:3d:8b:ca:fc:19: 1a:85:ab:de:0f:fa:50:f3:90:2b:68:fd:bb:81:09:72:aa:ba: bf:fb:a6:69:07:ff:23:b1:b7:59:4f:7b:8a:c8:e2:76:47:26: 13:27:3e:d4:82:34:a9:c1:c5:62:64:a3:6e:a4:d0:1a:c8:74: 6c:5b:51:63:ae:bb:c2:c8:43:1a:38:ba:0c:cc:17:ec:0f:98: cc:c5:79:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETiP9hRNGzDbciCzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxNDAyMDAyNVoXDTI0MDUxNDAxMDAyNVowLzEtMCsGA1UEAxMk ZGFkMGI1MTMtN2VjNy00ODhmLTg0OGEtNWIzNGI0NmYxYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTuo63CsxwKApzzpxzXZdnMDyP99o5QxRBbl mBFpUE8FqtFBdrwZkW4DP7ORK2FXSv9+zjHkV2qrqnb1g8gj2maWJ1dnKIQWx3jG O+qOo761McBUVxORgZeSzeL5ChtcIc9iLDbXF8rXu1SVE43XMqahlirllgmoi9gp 1LD+qJQxpbVr+r/oy6N3C9dxink3nxRTbZtBvyz4ynTPI3fFbFXH8EPPRknu6RMb ZLqj7Udlz5KHCZZ2svvU7KJudahVoctc1dIGY30VVnNdq68T9jzIyONrQxxd6q8f r2i9/IRVEuJAegRbuF/pLU1BtoO1s1EbrbFfHN3M1bCdkSsJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzqJ1YYcxKj3gBZBt5QresXdDfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMmFmMGQxZWUtYTRlZi0z ZTY5LWI4MzMtYTA5MjA5NzY4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRDxfVYLB0LWuW083Uw9OLRAPutGM8jOxyLbmb7M/mKtCXo2vjDLlxX 2iYoe09bSTz9sR9Nf5vjk92UIYrDCDdFpFApoVDDlAp/gu2ZLGF2Vok6VShEftYL qveQQyErkeGQKIz8nCmGKBt37Pt6ehCuOEiie+Ir9r/ZOwl7dRVvtxszs4yTnoI9 e5QCEA9iFYL0qC+bbkYs5ZitVwD6sXuWIYp0hWlJcaSm6GPRTDg9i8r8GRqFq94P +lDzkCto/buBCXKqur/7pmkH/yOxt1lPe4rI4nZHJhMnPtSCNKnBxWJko26k0BrI dGxbUWOuu8LIQxo4ugzMF+wPmMzFeRU= -----END CERTIFICATE-----Generated at Tue Apr 30 19:00:02 2024 by rpki-client on console-fra.rpki-client.org