$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa File: 42d275a6-2920-3503-8bc8-18cdead41ead.roa (raw, json) Hash identifier: 9JAVQZkzFznofy5ka6qfNoR0ZdkTfgrlW0a7X0NTtsw= Subject key identifier: 76:2E:7A:05:83:D7:7D:C0:9F:BC:1B:D1:BE:4A:DF:FF:EF:30:BF:97 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844FE2AE63CCE51D226BD6CA880 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa Signing time: Sat 24 Feb 2024 02:00:26 +0000 ROA not before: Sat 24 Feb 2024 02:00:26 +0000 ROA not after: Fri 24 May 2024 01:00:26 +0000 asID: 29802 IP address blocks: 91.191.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fe:2a:e6:3c:ce:51:d2:26:bd:6c:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 24 02:00:26 2024 GMT Not After : May 24 01:00:26 2024 GMT Subject: CN=c9d9d215-2656-4bbd-ad6e-0e44a13c86c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:77:9d:b0:f8:6a:11:d6:d9:7e:4b:c3:e2: 19:76:9a:ae:9b:81:ac:bd:be:37:6b:26:7d:33:13: d7:8a:51:ae:d5:50:6f:40:bd:bb:29:73:c0:c8:56: 17:3e:88:18:4b:33:74:50:4e:7a:50:b9:c4:1c:c1: 9f:ad:34:d6:2c:2c:76:8a:68:20:bb:ff:7a:c9:99: 69:37:ca:6a:4e:a4:37:4d:19:ed:09:4f:7e:94:2d: 1d:d7:72:00:c9:77:8e:14:0f:60:a1:65:b1:f5:bc: 5e:a1:74:b8:df:bb:6c:0e:a4:6b:83:5f:1f:57:55: 97:3b:0b:d7:e5:6c:aa:64:e5:2d:ff:7e:0d:1f:33: 01:20:6f:2b:2e:a8:90:b8:96:d4:bb:55:55:c9:05: 84:27:f0:34:e1:1e:ca:20:a5:59:f0:b3:66:dd:46: e0:a6:6d:76:13:01:a4:39:ce:68:b9:7d:9d:f3:14: 5f:b9:83:9c:1e:79:85:3a:01:b1:17:52:14:67:52: 0d:92:f5:13:51:3a:41:03:27:e8:6e:b4:76:af:b8: a0:ee:d9:39:42:eb:ae:83:2c:fe:8b:ad:c2:4d:0a: 40:0d:24:96:b3:c3:37:a1:7e:5d:46:e6:7d:51:ce: 54:a6:fb:91:c2:f4:db:1d:3d:b2:60:0d:70:38:81: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2E:7A:05:83:D7:7D:C0:9F:BC:1B:D1:BE:4A:DF:FF:EF:30:BF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f6:6d:47:04:66:ae:b6:c2:63:a3:62:cb:7c:02:b5:db:4a: d7:36:3e:d9:fc:62:f8:0a:c4:ca:f8:b5:e0:2a:10:f1:53:8f: 65:bd:a6:db:ba:24:74:4f:16:8f:b0:62:5a:54:f8:46:04:f9: 59:5e:a1:92:62:46:40:c6:42:ce:39:b4:e9:cc:5e:88:a7:21: d4:89:d7:f4:eb:6e:a2:cc:33:0f:f7:b5:90:67:c9:53:0f:4e: b0:51:bc:39:0c:60:a2:c0:ed:58:e1:9d:b1:bc:d3:00:b7:1e: dc:34:52:08:41:cb:2e:65:4a:c4:15:90:d7:7e:f0:ce:ac:73: 9c:3a:c6:9b:4e:52:2c:da:e0:dc:53:8d:c6:df:01:fc:1e:bc: 4e:39:4f:04:aa:5b:91:b6:6e:14:33:02:65:f1:c4:11:6b:0a: 06:a6:7a:8a:32:b3:60:89:69:a6:40:0f:76:9e:ce:75:41:f4: ec:4a:37:97:0b:79:97:4e:ff:62:f4:60:0b:8d:0e:90:7b:a4: 33:8d:6c:12:df:08:57:5a:10:dc:88:e5:99:7a:c6:73:01:37: d3:a2:3b:08:6f:fb:49:83:af:5e:cd:61:1e:17:3c:b2:47:8a: da:67:56:a6:b5:9a:c7:aa:d0:7f:b5:9b:6e:b4:1a:8e:a2:2c: d3:37:54:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KuY8zlHSJr1sqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk YzlkOWQyMTUtMjY1Ni00YmJkLWFkNmUtMGU0NGExM2M4NmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCd3nbD4ahHW2X5Lw+IZdpqum4Gsvb43ayZ9 MxPXilGu1VBvQL27KXPAyFYXPogYSzN0UE56ULnEHMGfrTTWLCx2imggu/96yZlp N8pqTqQ3TRntCU9+lC0d13IAyXeOFA9goWWx9bxeoXS437tsDqRrg18fV1WXOwvX 5WyqZOUt/34NHzMBIG8rLqiQuJbUu1VVyQWEJ/A04R7KIKVZ8LNm3Ubgpm12EwGk Oc5ouX2d8xRfuYOcHnmFOgGxF1IUZ1INkvUTUTpBAyfobrR2r7ig7tk5Quuugyz+ i63CTQpADSSWs8M3oX5dRuZ9Uc5UpvuRwvTbHT2yYA1wOIEzqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYuegWD133An7wb0b5K3//vML+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNDJkMjc1YTYtMjkyMC0z NTAzLThiYzgtMThjZGVhZDQxZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ32bUcEZq62wmOjYst8ArXbStc2Ptn8YvgKxMr4teAqEPFTj2W9ptu6 JHRPFo+wYlpU+EYE+VleoZJiRkDGQs45tOnMXoinIdSJ1/TrbqLMMw/3tZBnyVMP TrBRvDkMYKLA7VjhnbG80wC3Htw0UghByy5lSsQVkNd+8M6sc5w6xptOUiza4NxT jcbfAfwevE45TwSqW5G2bhQzAmXxxBFrCgameooys2CJaaZAD3aeznVB9OxKN5cL eZdO/2L0YAuNDpB7pDONbBLfCFdaENyI5Zl6xnMBN9OiOwhv+0mDr17NYR4XPLJH itpnVqa1mseq0H+1m260Go6iLNM3VFM= -----END CERTIFICATE-----Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org