$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa File: d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa (raw, json) Hash identifier: ICGdljkYdjcw7v3O/VNz+ZlaIMEnnCSh7La3MihFdvM= Subject key identifier: 4D:08:D5:09:F1:7B:7D:C4:A4:90:DB:20:90:85:44:C6:CA:6C:B8:AA Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844DE0FDB89A1C3FAEC81C01FC0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa Signing time: Mon 12 Feb 2024 14:00:30 +0000 ROA not before: Mon 12 Feb 2024 14:00:30 +0000 ROA not after: Sun 12 May 2024 13:00:30 +0000 asID: 29802 IP address blocks: 66.96.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:de:0f:db:89:a1:c3:fa:ec:81:c0:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 12 14:00:30 2024 GMT Not After : May 12 13:00:30 2024 GMT Subject: CN=a24fd04e-3461-48ca-95b9-d8364f163710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:3c:ad:6b:79:ee:ec:c2:30:90:a8:e8:a5: b4:31:5d:19:40:2d:4b:66:9e:b5:ec:87:c9:1d:2b: 6a:fa:f6:a2:63:ec:7a:e4:35:ef:f4:8c:1e:84:48: ee:8f:0b:4f:61:28:de:5e:46:87:9b:3c:96:22:2e: b1:ac:6b:e8:b6:67:b6:ca:f2:27:9b:82:4c:e5:95: 49:70:c0:ce:ed:49:2d:06:a9:15:89:f5:36:35:97: e8:50:a5:90:eb:10:72:03:8d:ae:65:91:32:3a:f5: a1:c3:71:b9:cd:45:0a:29:5d:17:11:5c:13:36:aa: f1:d0:f3:88:94:77:dc:b1:db:62:49:f9:03:fa:c4: 80:1b:37:ec:04:43:4e:d6:af:0b:17:0b:fd:f5:8f: a4:97:5b:3b:9b:67:1d:5e:bd:87:3f:5f:3f:c6:7c: f5:e0:37:80:be:71:29:ed:87:97:b8:8a:f7:bc:98: 15:3e:29:43:37:25:5d:f2:8a:ea:94:a8:c7:c2:51: 00:8c:7f:54:db:97:a6:81:57:f6:86:7c:b3:36:96: c9:a2:22:01:8c:04:bd:ed:14:b9:05:d3:c3:95:74: 52:e2:51:13:0f:87:f1:2a:c1:84:22:52:02:5d:a1: 4f:3a:03:ed:6a:b4:47:69:0c:73:7c:04:1c:06:8e: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:D5:09:F1:7B:7D:C4:A4:90:DB:20:90:85:44:C6:CA:6C:B8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c7:63:a7:c3:c5:0e:bd:a8:f7:83:ed:af:94:62:2a:c7:bd: 27:80:f6:12:6c:5e:08:ba:b6:36:ec:34:55:f7:db:33:b1:0d: 0e:78:62:4d:a4:0d:01:07:35:a2:37:1b:92:6b:1e:e9:5d:cc: 53:96:e0:29:59:e1:d6:51:4e:54:5e:84:39:50:a0:3b:d9:57: ff:49:d5:fb:ea:79:da:cc:5a:1e:7c:b7:0d:72:d3:47:ae:24: 24:50:53:0d:a1:72:b6:43:76:24:62:e8:81:79:e9:92:23:2d: 80:76:72:bd:6d:40:f8:fc:c0:d5:f8:0c:fb:77:56:7f:6a:23: 56:44:ee:a5:a9:0c:5b:17:c7:aa:32:85:eb:52:59:7d:03:c1: 7b:3a:21:76:39:66:98:38:b3:1f:46:00:60:bc:b2:20:f0:cc: 3a:b6:c1:0b:1e:46:6e:6e:23:37:e0:7b:ff:34:85:ee:b5:43: ea:f1:cc:06:c2:8b:4f:18:a2:05:59:a9:a0:c1:ff:da:a5:52: 48:9d:e9:fb:81:6a:af:65:7e:2b:e7:78:cc:d0:dd:d7:34:65: d3:9c:aa:de:99:5a:e0:37:22:b3:45:b2:7b:fa:b8:95:74:4f: 95:57:64:f2:8b:dc:4c:80:97:71:c8:2c:17:ca:e5:66:49:e9: 9c:7f:9c:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETeD9uJocP67IHAH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxMjE0MDAzMFoXDTI0MDUxMjEzMDAzMFowLzEtMCsGA1UEAxMk YTI0ZmQwNGUtMzQ2MS00OGNhLTk1YjktZDgzNjRmMTYzNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYc8rWt57uzCMJCo6KW0MV0ZQC1LZp617IfJ HStq+vaiY+x65DXv9IwehEjujwtPYSjeXkaHmzyWIi6xrGvotme2yvInm4JM5ZVJ cMDO7UktBqkVifU2NZfoUKWQ6xByA42uZZEyOvWhw3G5zUUKKV0XEVwTNqrx0POI lHfcsdtiSfkD+sSAGzfsBENO1q8LFwv99Y+kl1s7m2cdXr2HP18/xnz14DeAvnEp 7YeXuIr3vJgVPilDNyVd8orqlKjHwlEAjH9U25emgVf2hnyzNpbJoiIBjAS97RS5 BdPDlXRS4lETD4fxKsGEIlICXaFPOgPtarRHaQxzfAQcBo6XkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0I1Qnxe33EpJDbIJCFRMbKbLiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDExZTBhNmQtOTI2Mi0z YzMxLTgxNjYtZWJhN2UyY2IxNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3HY6fDxQ69qPeD7a+UYirHvSeA9hJsXgi6tjbsNFX32zOxDQ54Yk2k DQEHNaI3G5JrHuldzFOW4ClZ4dZRTlRehDlQoDvZV/9J1fvqedrMWh58tw1y00eu JCRQUw2hcrZDdiRi6IF56ZIjLYB2cr1tQPj8wNX4DPt3Vn9qI1ZE7qWpDFsXx6oy hetSWX0DwXs6IXY5Zpg4sx9GAGC8siDwzDq2wQseRm5uIzfge/80he61Q+rxzAbC i08YogVZqaDB/9qlUkid6fuBaq9lfivneMzQ3dc0ZdOcqt6ZWuA3IrNFsnv6uJV0 T5VXZPKL3EyAl3HILBfK5WZJ6Zx/nOU= -----END CERTIFICATE-----Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org