$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa File: 504a2c0b-e942-3392-a51f-7d8c0fe34915.roa (raw, json) Hash identifier: jhettC4RRD2xmw0BjCD/1HGVQom4PKldblp8WBKbP+I= Subject key identifier: AF:A0:DC:16:65:A2:57:71:6B:A0:BD:01:C6:FE:38:0F:26:81:37:CA Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844DE0FDFE4C5FCA2627C799500 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa Signing time: Mon 12 Feb 2024 14:00:30 +0000 ROA not before: Mon 12 Feb 2024 14:00:30 +0000 ROA not after: Sun 12 May 2024 13:00:30 +0000 asID: 29802 IP address blocks: 66.165.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:de:0f:df:e4:c5:fc:a2:62:7c:79:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 12 14:00:30 2024 GMT Not After : May 12 13:00:30 2024 GMT Subject: CN=2d430805-4595-4162-a356-66fcb54a462a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:02:4f:3d:16:b2:13:e9:58:92:17:57:0e:16: c2:6a:f9:db:ef:01:08:62:70:92:0c:84:ef:6d:ea: cc:1d:12:b3:46:0f:93:ea:e9:0a:a1:16:85:e4:b5: 38:1c:e1:79:77:d9:58:c0:9a:d3:b6:49:fe:b6:a4: 01:0c:f7:76:98:18:db:77:ee:32:b9:76:85:98:c6: c5:1e:a8:77:d7:e4:27:45:08:d4:74:7b:9b:82:49: a6:c7:af:9e:ac:f9:d9:6c:ea:98:bc:b5:c4:16:c6: 3d:10:98:7c:d6:90:e3:44:36:47:42:75:67:3b:e7: 74:f9:18:e1:0b:f0:d3:9f:bb:1f:17:f5:c5:b5:0a: 5d:16:d2:3a:48:aa:00:ed:8a:d7:ad:9b:32:4b:f0: c1:45:51:eb:d6:3c:30:a0:d9:c8:3a:28:27:fe:12: ac:b1:08:49:19:5a:44:c5:76:3e:2f:72:23:44:b8: bc:56:4c:b0:c6:94:e3:fc:69:85:39:70:d0:a9:dc: 7b:7a:1d:e7:54:ab:5d:bd:b4:d4:59:bd:e6:8c:14: e8:38:86:89:82:c8:c3:94:97:d5:7d:6b:fe:db:24: 72:1a:9a:17:4f:a8:63:77:a8:ce:a2:cb:55:7b:f5: 9b:f5:be:cd:8e:a0:b0:e9:47:2f:5c:2c:16:b4:f0: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A0:DC:16:65:A2:57:71:6B:A0:BD:01:C6:FE:38:0F:26:81:37:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.165.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4c:55:8c:02:72:88:d9:1c:9e:86:44:03:07:99:22:cc:71: 1d:88:eb:4f:3b:fa:95:64:db:fe:7a:f9:95:2e:85:3e:ba:50: 0b:5c:8d:2f:00:11:4f:46:15:5e:30:36:bb:b4:c0:90:88:dd: cf:a0:0c:aa:d5:23:67:6d:0b:e1:d4:22:c6:de:d2:15:ca:65: 7f:b8:d0:3f:ff:31:4f:8a:60:57:35:4c:df:b3:5a:2d:8f:69: 04:76:02:eb:f1:09:13:f1:43:f0:a6:72:a6:ad:90:1b:77:72: 5f:45:d5:34:ec:d6:48:6a:42:ce:80:24:0e:0d:f4:c9:12:dd: 4b:30:a2:75:74:f9:be:88:1d:4a:9d:1b:7d:af:16:a1:a6:cd: d6:07:02:2b:f9:f1:51:06:de:b5:f8:bc:4f:9a:2d:e8:c0:24: 95:a4:28:15:94:f7:01:54:9c:92:df:5f:3d:40:a7:db:5b:bd: eb:77:0b:6d:4a:0d:4c:5b:1d:ca:c3:76:b7:54:c7:72:6f:87: 13:94:bd:5d:23:7c:23:51:33:9a:0d:2d:9e:92:e3:d4:32:ef: 01:3c:61:ed:16:de:74:40:10:56:bc:67:c6:2c:98:e3:77:8d: 91:a6:b3:31:a9:fb:2b:7a:7e:bb:f6:30:fc:a9:79:8b:6f:70: e4:73:9b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETeD9/kxfyiYnx5lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxMjE0MDAzMFoXDTI0MDUxMjEzMDAzMFowLzEtMCsGA1UEAxMk MmQ0MzA4MDUtNDU5NS00MTYyLWEzNTYtNjZmY2I1NGE0NjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAJPPRayE+lYkhdXDhbCavnb7wEIYnCSDITv berMHRKzRg+T6ukKoRaF5LU4HOF5d9lYwJrTtkn+tqQBDPd2mBjbd+4yuXaFmMbF Hqh31+QnRQjUdHubgkmmx6+erPnZbOqYvLXEFsY9EJh81pDjRDZHQnVnO+d0+Rjh C/DTn7sfF/XFtQpdFtI6SKoA7YrXrZsyS/DBRVHr1jwwoNnIOign/hKssQhJGVpE xXY+L3IjRLi8VkywxpTj/GmFOXDQqdx7eh3nVKtdvbTUWb3mjBToOIaJgsjDlJfV fWv+2yRyGpoXT6hjd6jOostVe/Wb9b7NjqCw6UcvXCwWtPA2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+g3BZloldxa6C9Acb+OA8mgTfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTA0YTJjMGItZTk0Mi0z MzkyLWE1MWYtN2Q4YzBmZTM0OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRMVYwCcojZHJ6GRAMHmSLMcR2I6087+pVk2/56+ZUuhT66UAtcjS8A EU9GFV4wNru0wJCI3c+gDKrVI2dtC+HUIsbe0hXKZX+40D//MU+KYFc1TN+zWi2P aQR2AuvxCRPxQ/CmcqatkBt3cl9F1TTs1khqQs6AJA4N9MkS3UswonV0+b6IHUqd G32vFqGmzdYHAiv58VEG3rX4vE+aLejAJJWkKBWU9wFUnJLfXz1Ap9tbvet3C21K DUxbHcrDdrdUx3JvhxOUvV0jfCNRM5oNLZ6S49Qy7wE8Ye0W3nRAEFa8Z8YsmON3 jZGmszGp+yt6frv2MPypeYtvcORzm44= -----END CERTIFICATE-----Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org