$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa File: bf5295e2-1c04-3ba0-be72-988f0756c50e.roa (raw, json) Hash identifier: T8xc9ckBCIMn+4Loyv3etL1wa2NzzWx6VytHmL2MA9Y= Subject key identifier: 73:1F:B9:72:3F:A1:25:7A:98:B8:9B:C9:DF:7F:90:30:47:E1:3E:A1 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844E3A5394B6063668E497DBEC0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa Signing time: Wed 14 Feb 2024 14:00:30 +0000 ROA not before: Wed 14 Feb 2024 14:00:30 +0000 ROA not after: Tue 14 May 2024 13:00:30 +0000 asID: 29802 IP address blocks: 23.227.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e3:a5:39:4b:60:63:66:8e:49:7d:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 14 14:00:30 2024 GMT Not After : May 14 13:00:30 2024 GMT Subject: CN=4570e880-d944-4e24-89b1-2344631e39c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:5c:b3:54:2b:fc:96:5b:7e:18:26:cc:c8: 06:a7:37:20:5b:8e:dd:ac:00:6b:cb:e9:df:6f:aa: 49:7d:da:26:6a:5e:04:06:8f:8f:2d:d9:24:9c:0e: 6e:9b:24:be:14:1a:b5:67:e1:b3:9d:e0:8c:f9:ae: 57:e1:f0:64:31:db:eb:22:d6:f7:e9:2e:66:ba:7e: 26:a4:1e:cf:a6:e8:13:d6:45:3b:20:f9:61:aa:5b: 2c:ae:c2:ce:c7:86:66:04:fd:05:94:67:e4:5d:24: a7:cf:22:1c:9d:1f:0f:35:80:c5:e1:ea:ad:fb:4b: ef:c7:ed:9b:5b:f0:ff:9a:1b:ac:66:aa:79:e8:b3: bf:42:63:08:bb:e3:01:f6:dd:d7:d6:67:78:17:7a: ff:e5:df:e8:b2:64:7a:30:1d:25:99:e4:8f:3c:5d: ab:54:e2:b0:69:78:85:09:21:92:dd:0d:ef:92:d3: f9:8b:b5:84:f7:d8:5a:51:59:f1:4b:4a:55:e7:10: 28:e7:a6:8d:ae:a8:89:a7:cc:c5:cd:4d:d4:8d:6f: b6:9e:12:19:ce:0a:09:b4:43:5f:0c:52:52:58:a9: d5:f6:9f:50:8d:80:4f:2a:b3:3b:f9:6c:cf:0b:9d: 55:39:bf:f0:55:29:97:ba:ce:0d:99:cb:93:28:3a: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1F:B9:72:3F:A1:25:7A:98:B8:9B:C9:DF:7F:90:30:47:E1:3E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:35:b6:23:90:6d:5b:5f:9f:c9:55:c9:04:de:7f:e9:39:76: 6e:ae:75:27:15:09:13:2d:79:4c:52:8e:a6:a9:7d:4e:6e:75: e5:21:71:d4:a0:76:24:df:21:cb:c5:7f:16:dd:d3:0f:14:b4: 49:39:79:55:0a:35:d4:af:ba:3d:28:c5:b2:b4:d3:04:47:86: 83:51:e1:a7:62:3f:9b:a4:af:46:32:b5:28:16:5c:dd:0f:c4: db:96:f5:77:7d:f6:f7:2b:fe:e9:af:4a:6c:6e:92:0d:23:e7: 34:75:9a:48:f5:84:fa:79:60:b9:cf:01:33:83:47:06:11:51: 6e:04:00:c8:c5:5d:d6:7c:fa:bc:fe:20:3f:70:57:e1:16:89: 05:5b:7a:fd:88:55:59:5e:fb:43:ae:46:7f:3d:9f:20:1d:92: 15:9e:01:23:01:d8:6f:b9:ec:6a:f2:47:9b:54:89:42:15:a0: 82:54:80:d2:31:85:d9:c5:5e:78:77:09:35:77:c2:53:d2:80: 7c:97:cc:d1:86:fc:4c:fd:b4:81:9f:23:d1:42:a4:a3:21:fd: e2:c3:40:02:af:26:19:3c:d1:74:66:b9:19:f9:78:65:b3:b3: 51:4d:54:fa:51:92:6e:01:81:fe:d9:d1:41:c2:8b:d0:e6:10: 75:7e:42:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETjpTlLYGNmjkl9vsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxNDE0MDAzMFoXDTI0MDUxNDEzMDAzMFowLzEtMCsGA1UEAxMk NDU3MGU4ODAtZDk0NC00ZTI0LTg5YjEtMjM0NDYzMWUzOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+tcs1Qr/JZbfhgmzMgGpzcgW47drABry+nf b6pJfdomal4EBo+PLdkknA5umyS+FBq1Z+GzneCM+a5X4fBkMdvrItb36S5mun4m pB7PpugT1kU7IPlhqlssrsLOx4ZmBP0FlGfkXSSnzyIcnR8PNYDF4eqt+0vvx+2b W/D/mhusZqp56LO/QmMIu+MB9t3X1md4F3r/5d/osmR6MB0lmeSPPF2rVOKwaXiF CSGS3Q3vktP5i7WE99haUVnxS0pV5xAo56aNrqiJp8zFzU3UjW+2nhIZzgoJtENf DFJSWKnV9p9QjYBPKrM7+WzPC51VOb/wVSmXus4NmcuTKDqOcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMfuXI/oSV6mLibyd9/kDBH4T6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYmY1Mjk1ZTItMWMwNC0z YmEwLWJlNzItOTg4ZjA3NTZjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ1tiOQbVtfn8lVyQTef+k5dm6udScVCRMteUxSjqapfU5udeUhcdSg diTfIcvFfxbd0w8UtEk5eVUKNdSvuj0oxbK00wRHhoNR4adiP5ukr0YytSgWXN0P xNuW9Xd99vcr/umvSmxukg0j5zR1mkj1hPp5YLnPATODRwYRUW4EAMjFXdZ8+rz+ ID9wV+EWiQVbev2IVVle+0OuRn89nyAdkhWeASMB2G+57GryR5tUiUIVoIJUgNIx hdnFXnh3CTV3wlPSgHyXzNGG/Ez9tIGfI9FCpKMh/eLDQAKvJhk80XRmuRn5eGWz s1FNVPpRkm4Bgf7Z0UHCi9DmEHV+QnM= -----END CERTIFICATE-----Generated at Tue Apr 30 16:12:01 2024 by rpki-client on console-fra.rpki-client.org