$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa File: f5f4a6f1-995d-3517-a463-04c47c4433da.roa (raw, json) Hash identifier: /UTexBAON0sg/3pAnqQrpPb+I+gavP89kP2y90v5P6M= Subject key identifier: FC:07:BA:0C:23:37:9E:F7:4B:16:FA:53:70:E4:5D:19:6A:ED:C8:1B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285844DE0FDF902DCB53500587C580 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa Signing time: Mon 12 Feb 2024 14:00:30 +0000 ROA not before: Mon 12 Feb 2024 14:00:30 +0000 ROA not after: Sun 12 May 2024 13:00:30 +0000 asID: 29802 IP address blocks: 23.111.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:de:0f:df:90:2d:cb:53:50:05:87:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 12 14:00:30 2024 GMT Not After : May 12 13:00:30 2024 GMT Subject: CN=e8191814-3fec-48f9-9bc8-5b785b652624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:86:ec:00:cc:63:df:b1:8b:af:ac:dc:0b: 07:a0:05:98:a2:da:b1:19:e8:7b:e2:36:d2:d9:e6: 30:04:ea:ed:06:fd:8e:8b:4e:48:d4:75:9a:c9:1e: d3:82:28:10:f7:2c:8f:70:2b:9d:62:f1:22:31:cc: 98:b0:55:f2:a7:91:e9:a4:31:35:a5:6e:e9:1e:1b: 0c:b9:7a:c4:ad:0c:6f:5a:f3:43:f5:d2:e3:2a:f8: df:02:92:a2:06:b7:0b:48:11:0c:12:e8:f3:90:60: 46:3e:52:d8:af:70:7b:35:51:4d:23:5f:ec:df:56: f1:73:ef:2f:f7:14:53:5e:6b:a7:2b:cc:98:87:0b: db:fe:76:94:1f:fc:85:bc:ec:cf:23:21:8e:ca:73: 0f:10:62:05:45:67:3d:f3:cb:36:10:fc:32:77:d3: 05:7c:e4:a9:31:2d:25:16:56:d9:e8:b1:c9:e1:61: a6:e2:56:08:91:c3:85:4c:90:bf:21:b4:7f:39:84: b9:13:73:62:89:b2:8e:a4:76:16:e3:ec:90:9b:5f: 20:8b:69:56:a3:21:cc:89:ab:da:de:ca:5a:73:95: 9f:52:64:06:c3:3b:4f:15:66:59:4f:28:dc:50:7f: e0:e9:55:41:23:f9:a5:b5:b3:87:86:03:ca:df:35: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:07:BA:0C:23:37:9E:F7:4B:16:FA:53:70:E4:5D:19:6A:ED:C8:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.111.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1d:eb:fd:2d:5b:d1:ff:9c:cc:fb:b5:27:d7:1f:78:5f:2c: 23:d1:34:07:25:cf:0f:a9:82:8e:6c:c6:15:ec:78:13:f3:08: b2:7f:56:fa:11:cc:cb:e9:e4:b1:2f:c5:51:82:b0:77:df:38: b1:e4:42:79:01:c3:db:fc:ae:c8:67:23:43:06:4f:8f:05:1c: 59:91:ff:d9:4c:98:65:bd:87:d4:91:1c:f6:fe:9b:20:68:e7: 92:7f:dc:d9:a9:1c:42:6b:bf:6f:6a:b7:e5:d8:06:46:2d:ad: 70:13:60:92:b1:6f:5f:c0:6f:37:06:f1:90:98:f6:25:20:95: 15:ab:07:6f:cc:78:1c:6e:db:79:41:0d:df:41:5e:26:c0:f6: 1a:d7:00:9a:b3:10:1a:dc:b5:cd:70:d1:70:fb:6f:ca:1f:86: e3:26:e1:1f:11:6b:0d:25:52:a1:62:e3:19:34:30:ed:4d:40: 69:d1:a0:7b:57:cb:a6:9d:3b:2e:29:93:96:b2:0b:61:c5:74: 64:11:36:52:fd:3b:36:e7:63:94:65:1a:98:02:0b:b7:7a:a2: 59:ec:23:dc:d3:9b:c2:1e:78:06:d5:63:7d:7d:f9:e1:73:ca: 1b:92:71:37:c1:40:aa:90:10:e3:be:1a:97:e5:78:70:d2:cb: 52:8d:72:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETeD9+QLctTUAWHxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDIxMjE0MDAzMFoXDTI0MDUxMjEzMDAzMFowLzEtMCsGA1UEAxMk ZTgxOTE4MTQtM2ZlYy00OGY5LTliYzgtNWI3ODViNjUyNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW6G7ADMY9+xi6+s3AsHoAWYotqxGeh74jbS 2eYwBOrtBv2Oi05I1HWayR7TgigQ9yyPcCudYvEiMcyYsFXyp5HppDE1pW7pHhsM uXrErQxvWvND9dLjKvjfApKiBrcLSBEMEujzkGBGPlLYr3B7NVFNI1/s31bxc+8v 9xRTXmunK8yYhwvb/naUH/yFvOzPIyGOynMPEGIFRWc988s2EPwyd9MFfOSpMS0l FlbZ6LHJ4WGm4lYIkcOFTJC/IbR/OYS5E3NiibKOpHYW4+yQm18gi2lWoyHMiava 3spac5WfUmQGwztPFWZZTyjcUH/g6VVBI/mltbOHhgPK3zXgOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwHugwjN573Sxb6U3DkXRlq7cgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZjVmNGE2ZjEtOTk1ZC0z NTE3LWE0NjMtMDRjNDdjNDQzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGF2+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYd6/0tW9H/nMz7tSfXH3hfLCPRNAclzw+pgo5sxhXseBPzCLJ/VvoR zMvp5LEvxVGCsHffOLHkQnkBw9v8rshnI0MGT48FHFmR/9lMmGW9h9SRHPb+myBo 55J/3NmpHEJrv29qt+XYBkYtrXATYJKxb1/AbzcG8ZCY9iUglRWrB2/MeBxu23lB Dd9BXibA9hrXAJqzEBrctc1w0XD7b8ofhuMm4R8Raw0lUqFi4xk0MO1NQGnRoHtX y6adOy4pk5ayC2HFdGQRNlL9OzbnY5RlGpgCC7d6olnsI9zTm8IeeAbVY319+eFz yhuScTfBQKqQEOO+GpfleHDSy1KNcgA= -----END CERTIFICATE-----Generated at Mon Apr 29 15:22:36 2024 by rpki-client on console-ams.rpki-client.org