$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa File: 8a510825-83bf-3885-90a1-e8e8bfb13779.roa (raw, json) Hash identifier: ujMqSV5dzuwCknfHJZWnG+h3sUOD3mOfMc4vy5qaxMk= Subject key identifier: 37:26:0C:9E:DA:35:E4:A6:CC:66:E3:B1:41:8E:E3:AB:D3:38:A6:1C Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844DE0FDFBB05C54DEC29909B00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa Signing time: Mon 12 Feb 2024 14:00:30 +0000 ROA not before: Mon 12 Feb 2024 14:00:30 +0000 ROA not after: Sun 12 May 2024 13:00:30 +0000 asID: 29802 IP address blocks: 23.227.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:de:0f:df:bb:05:c5:4d:ec:29:90:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 12 14:00:30 2024 GMT Not After : May 12 13:00:30 2024 GMT Subject: CN=8f6f76d3-5440-4ba1-9d62-1d86a1670bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:26:80:01:d1:ba:cd:f7:ec:56:bb:db:5e: 8b:8b:20:8d:e1:cd:02:be:99:45:9f:c5:88:ad:d1: 59:bc:78:41:d2:34:ba:c3:d3:f5:4d:01:f7:48:50: 12:04:c5:84:77:00:9f:de:c0:cc:30:05:64:b4:15: 71:d5:2f:91:51:1b:b8:5b:ef:dd:7a:c2:29:be:1e: 10:f4:b1:c3:b7:2d:3c:23:3c:47:68:d7:32:d7:5c: dc:00:7a:05:cd:18:93:85:b6:b6:07:ac:fe:b1:4a: 86:9f:32:58:fb:e1:24:87:b9:40:d0:33:d6:77:0a: 2e:0e:c9:44:63:1c:d3:a1:3a:d8:1e:41:d7:7f:65: bd:74:be:01:90:2e:cb:47:ff:71:a0:94:c5:bf:cf: 11:d5:c1:72:ba:52:72:a9:4b:7a:16:bb:f4:41:ab: bd:8a:f6:e1:36:5e:78:20:bc:80:0a:71:99:de:fb: e5:8e:5d:27:ad:a2:a4:d2:b8:b2:e2:28:30:c9:75: a9:3e:49:c9:fd:e2:07:44:94:26:d2:22:db:19:ba: 28:03:84:4d:46:13:62:02:49:85:12:ca:01:f2:8b: 47:ce:39:0e:1e:12:fb:48:3a:b7:bf:59:9f:75:96: e8:84:4d:5c:83:75:cc:71:c3:f8:bc:01:5e:9e:11: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:26:0C:9E:DA:35:E4:A6:CC:66:E3:B1:41:8E:E3:AB:D3:38:A6:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a3:79:09:29:ad:1f:19:a7:ca:e2:5d:d7:d7:11:4a:76:d7: f0:14:a1:b0:68:63:31:b5:99:2b:fd:5f:c1:e7:38:eb:68:c0: 03:22:07:85:b4:66:6e:ca:e9:51:20:3b:ad:45:41:af:77:41: 57:c8:2e:08:97:19:1f:9b:e5:65:41:dd:37:19:df:48:f5:e4: 92:75:86:d4:69:39:b5:a9:9c:42:2e:87:0e:11:28:1e:97:22: c9:c2:f3:45:97:8c:d4:cc:f1:60:c4:85:b3:5a:35:1e:e6:0f: a0:f0:2e:c7:9c:44:39:11:d2:61:25:0d:32:7b:b7:1f:3f:69: ad:0a:5d:8e:31:7d:1e:6d:99:43:97:54:89:6b:3b:bd:7e:3b: 5f:09:53:1c:5a:af:b4:f3:05:0f:47:29:71:a1:20:48:4a:1c: e3:20:1b:fe:b5:c0:17:ce:31:ab:0a:0e:96:22:1d:42:45:8c: 1f:6e:22:4f:38:c3:dc:f5:a8:84:da:75:fd:21:35:1d:0f:c9: 17:47:96:5a:41:2c:e8:96:8f:fc:02:86:50:58:49:b0:ab:2e: 0b:4c:bc:e1:f2:8c:1e:d7:06:fc:35:37:d8:2b:da:84:3e:93: 62:4e:da:ae:4c:3e:ca:95:c8:bc:1c:c4:01:a8:3a:53:e2:14: 95:ed:52:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETeD9+7BcVN7CmQmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxMjE0MDAzMFoXDTI0MDUxMjEzMDAzMFowLzEtMCsGA1UEAxMk OGY2Zjc2ZDMtNTQ0MC00YmExLTlkNjItMWQ4NmExNjcwYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmgmgAHRus337Fa7216LiyCN4c0CvplFn8WI rdFZvHhB0jS6w9P1TQH3SFASBMWEdwCf3sDMMAVktBVx1S+RURu4W+/desIpvh4Q 9LHDty08IzxHaNcy11zcAHoFzRiThba2B6z+sUqGnzJY++Ekh7lA0DPWdwouDslE YxzToTrYHkHXf2W9dL4BkC7LR/9xoJTFv88R1cFyulJyqUt6Frv0Qau9ivbhNl54 ILyACnGZ3vvljl0nraKk0riy4igwyXWpPknJ/eIHRJQm0iLbGbooA4RNRhNiAkmF EsoB8otHzjkOHhL7SDq3v1mfdZbohE1cg3XMccP4vAFenhEcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcmDJ7aNeSmzGbjsUGO46vTOKYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOGE1MTA4MjUtODNiZi0z ODg1LTkwYTEtZThlOGJmYjEzNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2jeQkprR8Zp8riXdfXEUp21/AUobBoYzG1mSv9X8HnOOtowAMiB4W0 Zm7K6VEgO61FQa93QVfILgiXGR+b5WVB3TcZ30j15JJ1htRpObWpnEIuhw4RKB6X IsnC80WXjNTM8WDEhbNaNR7mD6DwLsecRDkR0mElDTJ7tx8/aa0KXY4xfR5tmUOX VIlrO71+O18JUxxar7TzBQ9HKXGhIEhKHOMgG/61wBfOMasKDpYiHUJFjB9uIk84 w9z1qITadf0hNR0PyRdHllpBLOiWj/wChlBYSbCrLgtMvOHyjB7XBvw1N9gr2oQ+ k2JO2q5MPsqVyLwcxAGoOlPiFJXtUjg= -----END CERTIFICATE-----Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org