$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa File: c90c9521-a429-3420-94be-1c59d7710268.roa (raw, json) Hash identifier: 7v6Y188cL7Ndk4mmEtav+p+REu8vaQHXkAS4cL32Xh4= Subject key identifier: 71:A8:0A:EC:23:43:F0:AF:72:55:4B:2F:63:8D:0E:08:E3:BB:31:DB Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844E0DA8BBEB2AF7FD2EBED7080 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa Signing time: Tue 13 Feb 2024 14:00:29 +0000 ROA not before: Tue 13 Feb 2024 14:00:29 +0000 ROA not after: Mon 13 May 2024 13:00:29 +0000 asID: 29802 IP address blocks: 104.254.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e0:da:8b:be:b2:af:7f:d2:eb:ed:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 13 14:00:29 2024 GMT Not After : May 13 13:00:29 2024 GMT Subject: CN=85044814-60e3-43be-9829-c273afce6187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:23:93:45:90:13:34:28:55:c3:82:9e:dd:d0: fe:b9:24:42:93:cf:5b:35:c7:09:bf:07:24:23:de: 4e:1a:4d:e5:48:e3:c7:03:cb:d6:8a:83:1c:70:2d: d2:66:38:46:ef:cb:e5:b3:3f:9b:51:6e:a2:2b:a4: f6:ca:f9:de:57:3e:cf:f7:84:1f:08:ae:f9:88:e0: f3:f2:cf:47:1f:f1:39:5a:e6:54:d4:91:ee:da:02: 30:65:4b:5a:5b:2a:f4:19:58:fc:0f:71:b5:69:b1: 00:ab:7c:98:6c:48:40:18:43:92:68:c2:3e:40:17: 63:66:d0:24:55:b6:12:f8:dc:ff:e2:29:13:2b:01: 72:46:f3:93:41:2c:8a:73:52:77:42:5d:68:2a:88: b6:d8:2e:9d:2b:2e:d3:df:97:6c:d4:3a:ca:37:78: 08:43:53:74:d1:a1:96:75:1c:c3:ab:6d:2a:2b:44: 90:80:05:7b:ca:eb:e2:2d:b7:9c:04:20:9a:99:cb: 94:9c:ab:fe:3f:01:47:fc:19:52:eb:77:5b:b0:ad: a4:39:bd:88:07:f6:70:72:81:16:c7:04:97:f3:4b: ec:67:75:ed:4a:91:92:ec:b5:bb:e2:2b:63:42:fc: 72:39:22:e0:40:17:5b:dc:5b:12:60:0c:cc:dd:9e: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A8:0A:EC:23:43:F0:AF:72:55:4B:2F:63:8D:0E:08:E3:BB:31:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c90c9521-a429-3420-94be-1c59d7710268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 104.254.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9d:d3:e5:35:22:be:a9:fa:ca:14:35:5a:9d:7a:11:cc:da: cf:74:71:32:6c:f2:60:92:7d:44:5d:3b:81:71:ca:ff:b1:b2: 36:5a:94:32:f0:eb:b3:06:36:42:09:70:77:e1:cc:69:44:ce: a8:23:c3:4b:11:9a:5a:c8:73:a0:2f:52:ce:f4:c8:69:7e:03: cc:89:70:d1:a9:c4:9b:80:6a:88:1c:cc:2d:c0:22:6a:e0:ac: 09:b7:ed:6f:da:1c:be:72:06:13:b9:65:c8:70:a3:a0:56:fb: 3e:30:c4:fb:ef:0f:83:4e:96:83:2b:ec:7a:e8:67:93:cf:03: 5d:7e:08:02:8d:89:2f:15:fd:52:11:80:41:85:3f:1e:aa:eb: 54:2a:8d:bf:7d:ee:42:71:dd:4d:70:a8:8f:07:20:ff:a9:ed: d1:0a:59:8a:a5:36:a0:0f:60:ef:3d:e9:bb:eb:7e:7d:d0:a7: 3b:bd:8d:e9:ac:96:0f:fe:53:17:7a:be:5c:8b:7b:46:68:3e: b3:64:0f:7d:b0:c7:34:3d:c7:dd:d1:c5:93:af:1f:32:f3:83: 01:0c:7d:e6:bd:ca:40:52:ed:b1:4c:fc:ad:b2:33:1c:84:56: 6a:c4:81:fc:0b:b1:73:85:44:16:71:b1:d8:f6:e4:67:53:90: 9b:21:63:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETg2ou+sq9/0uvtcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxMzE0MDAyOVoXDTI0MDUxMzEzMDAyOVowLzEtMCsGA1UEAxMk ODUwNDQ4MTQtNjBlMy00M2JlLTk4MjktYzI3M2FmY2U2MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyOTRZATNChVw4Ke3dD+uSRCk89bNccJvwck I95OGk3lSOPHA8vWioMccC3SZjhG78vlsz+bUW6iK6T2yvneVz7P94QfCK75iODz 8s9HH/E5WuZU1JHu2gIwZUtaWyr0GVj8D3G1abEAq3yYbEhAGEOSaMI+QBdjZtAk VbYS+Nz/4ikTKwFyRvOTQSyKc1J3Ql1oKoi22C6dKy7T35ds1DrKN3gIQ1N00aGW dRzDq20qK0SQgAV7yuviLbecBCCamcuUnKv+PwFH/BlS63dbsK2kOb2IB/ZwcoEW xwSX80vsZ3XtSpGS7LW74itjQvxyOSLgQBdb3FsSYAzM3Z69iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGoCuwjQ/CvclVLL2ONDgjjuzHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzkwYzk1MjEtYTQyOS0z NDIwLTk0YmUtMWM1OWQ3NzEwMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+d0+U1Ir6p+soUNVqdehHM2s90cTJs8mCSfURdO4Fxyv+xsjZalDLw 67MGNkIJcHfhzGlEzqgjw0sRmlrIc6AvUs70yGl+A8yJcNGpxJuAaogczC3AImrg rAm37W/aHL5yBhO5Zchwo6BW+z4wxPvvD4NOloMr7HroZ5PPA11+CAKNiS8V/VIR gEGFPx6q61Qqjb997kJx3U1wqI8HIP+p7dEKWYqlNqAPYO896bvrfn3Qpzu9jems lg/+Uxd6vlyLe0ZoPrNkD32wxzQ9x93RxZOvHzLzgwEMfea9ykBS7bFM/K2yMxyE VmrEgfwLsXOFRBZxsdj25GdTkJshYxU= -----END CERTIFICATE-----Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org