$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa File: d691d77a-2a2e-3631-9e05-38a798f0b995.roa (raw, json) Hash identifier: 8NunA/ZqOxBmnK65US6nEY10kBG+DX0jy4l2PYBs2jc= Subject key identifier: 37:ED:2B:F6:74:4A:95:08:2B:07:AB:36:71:9E:7C:66:BD:0C:61:3B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844FE2AE2A8AD71061EBDD12400 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa Signing time: Sat 24 Feb 2024 02:00:26 +0000 ROA not before: Sat 24 Feb 2024 02:00:26 +0000 ROA not after: Fri 24 May 2024 01:00:26 +0000 asID: 29802 IP address blocks: 91.191.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fe:2a:e2:a8:ad:71:06:1e:bd:d1:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 24 02:00:26 2024 GMT Not After : May 24 01:00:26 2024 GMT Subject: CN=4a5eb18f-7f22-4112-b5d2-69f8c58b3a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:9c:23:b4:24:fc:09:26:15:5e:e4:c5:88: da:9e:53:a2:1a:9d:27:06:77:91:3f:22:d0:78:c0: 4f:fd:da:35:7b:74:44:45:ac:13:7c:fe:c3:22:e1: 05:60:3a:9e:8a:80:07:5f:d1:bd:07:46:30:4b:f3: b0:91:3c:c5:81:e5:a5:31:bc:5d:fc:b6:b9:af:44: ef:7a:fe:5c:47:ea:81:39:a2:96:34:8b:b1:43:52: f0:21:77:b3:e9:0b:da:08:3f:43:0d:1b:27:d5:73: 6e:91:2e:9c:71:88:cc:5e:8b:38:d6:33:14:29:12: 88:67:10:cc:b6:d4:11:5e:5a:97:64:2a:e4:bc:99: a3:68:ef:e7:71:81:05:2b:fa:e3:9d:97:5f:98:6d: 19:63:9e:57:ee:77:36:78:47:d7:08:16:f3:8a:4d: e8:9d:60:87:68:b9:4a:fc:54:cd:6d:ca:d0:a8:d5: bb:1b:23:7f:06:91:39:4f:8d:62:02:96:5f:44:09: 31:8b:d8:b6:43:44:90:2f:9d:f7:8b:fc:a5:d5:36: 07:92:28:b2:72:0d:bc:e7:ce:23:0f:ff:a4:93:20: 1a:46:5a:8b:d5:39:c1:38:66:55:44:f3:d8:04:f4: 7e:c9:9d:8f:69:f1:66:f8:8a:2f:ec:0d:89:0c:c7: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:2B:F6:74:4A:95:08:2B:07:AB:36:71:9E:7C:66:BD:0C:61:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:35:0e:43:99:5d:d1:b8:4a:7b:e6:92:f1:5e:c3:79:ba:15: cf:07:5f:e6:2f:7e:62:3b:6c:07:49:bf:9d:68:5b:94:14:34: c5:13:6b:5b:5e:a9:0a:76:9f:1d:01:63:29:8e:09:4b:c3:cc: 85:a7:25:ae:a6:a4:6e:b0:7f:b7:b7:09:f1:99:cd:94:56:15: 7c:9c:ec:fd:84:fb:35:a5:75:fd:12:56:06:fb:70:9b:f5:74: 53:f1:e2:a1:c9:24:29:90:14:49:5b:23:0a:50:10:fe:de:a0: 3e:10:65:fc:b6:be:a7:d6:ac:9d:1e:d7:31:06:09:59:83:65: 08:e6:2d:37:3a:05:ee:e6:87:71:b0:37:0d:71:3b:ff:37:5b: 1d:2a:b1:3e:07:6c:6b:61:26:8b:cf:77:e8:57:4f:3e:c2:24: cd:76:60:76:d5:e7:81:af:0f:51:6d:71:df:19:fb:df:9f:b5: 76:8d:07:42:b3:de:62:b1:be:9f:4e:1d:37:fc:ef:e7:07:f3: cc:81:ce:8f:9a:36:86:1d:35:a0:a2:44:b4:f4:11:dd:20:90: 39:c2:5d:34:d8:c9:8b:50:c8:81:af:81:10:3c:d1:bf:84:d3: c1:59:cf:20:31:da:c0:63:a5:a8:0f:b5:d6:27:ef:44:f4:90: 92:0f:e3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KuKorXEGHr3RJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk NGE1ZWIxOGYtN2YyMi00MTEyLWI1ZDItNjlmOGM1OGIzYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOacI7Qk/AkmFV7kxYjanlOiGp0nBneRPyLQ eMBP/do1e3RERawTfP7DIuEFYDqeioAHX9G9B0YwS/OwkTzFgeWlMbxd/La5r0Tv ev5cR+qBOaKWNIuxQ1LwIXez6QvaCD9DDRsn1XNukS6ccYjMXos41jMUKRKIZxDM ttQRXlqXZCrkvJmjaO/ncYEFK/rjnZdfmG0ZY55X7nc2eEfXCBbzik3onWCHaLlK /FTNbcrQqNW7GyN/BpE5T41iApZfRAkxi9i2Q0SQL533i/yl1TYHkiiycg28584j D/+kkyAaRlqL1TnBOGZVRPPYBPR+yZ2PafFm+Iov7A2JDMe8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDftK/Z0SpUIKwerNnGefGa9DGE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDY5MWQ3N2EtMmEyZS0z NjMxLTllMDUtMzhhNzk4ZjBiOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD41DkOZXdG4SnvmkvFew3m6Fc8HX+YvfmI7bAdJv51oW5QUNMUTa1te qQp2nx0BYymOCUvDzIWnJa6mpG6wf7e3CfGZzZRWFXyc7P2E+zWldf0SVgb7cJv1 dFPx4qHJJCmQFElbIwpQEP7eoD4QZfy2vqfWrJ0e1zEGCVmDZQjmLTc6Be7mh3Gw Nw1xO/83Wx0qsT4HbGthJovPd+hXTz7CJM12YHbV54GvD1Ftcd8Z+9+ftXaNB0Kz 3mKxvp9OHTf87+cH88yBzo+aNoYdNaCiRLT0Ed0gkDnCXTTYyYtQyIGvgRA80b+E 08FZzyAx2sBjpagPtdYn70T0kJIP41I= -----END CERTIFICATE-----Generated at Tue Apr 30 19:00:02 2024 by rpki-client on console-fra.rpki-client.org