$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS32587.roa File: AS32587.roa (raw, json) Hash identifier: 9ja3YsVNyaHatSxV2je8IJXZZF/3RDsPFXNdKd0I9b8= Subject key identifier: 37:0F:FF:9A:B0:3C:11:15:E6:71:C7:DC:BD:51:15:E7:8C:BC:99:D3 Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Certificate serial: 22DAFA60086DEEF3CE7EE3EDB43E5335A9D1902A Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS32587.roa Signing time: Thu 22 Feb 2024 06:07:13 +0000 ROA not before: Thu 22 Feb 2024 06:02:13 +0000 ROA not after: Thu 20 Feb 2025 06:07:13 +0000 asID: 32587 IP address blocks: 50.121.66.0/23 maxlen: 23 50.121.72.0/22 maxlen: 22 50.121.76.0/24 maxlen: 24 50.121.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Jun 2024 03:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:da:fa:60:08:6d:ee:f3:ce:7e:e3:ed:b4:3e:53:35:a9:d1:90:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Validity Not Before: Feb 22 06:02:13 2024 GMT Not After : Feb 20 06:07:13 2025 GMT Subject: CN=370FFF9AB03C1115E671C7DCBD5115E78CBC99D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:60:5f:e9:76:42:e2:bf:33:97:35:9f:53: c5:7f:8a:a1:57:49:ba:97:55:6f:6b:f3:f6:ba:8e: 4f:ce:8b:2b:fc:d7:d5:11:0d:b5:a2:58:31:2c:0b: da:32:09:d3:f0:4f:72:43:7f:05:28:c1:f1:b2:f1: de:af:b6:f6:d3:9d:72:54:60:09:34:78:10:39:02: 6f:22:0e:4a:83:fa:1a:b8:77:e9:95:e1:4a:29:14: 75:f2:88:96:f9:d9:db:08:87:db:c7:f2:89:96:fa: e0:6e:40:94:65:f6:54:46:6f:2d:ac:84:10:64:6b: 33:d9:8f:60:9d:91:a9:bb:96:d9:44:b4:1e:7b:4b: 04:bd:7b:3d:a3:55:21:11:ab:c4:5e:91:c1:eb:7c: 12:20:2a:25:96:99:7a:8e:b1:aa:37:39:2c:79:99: f7:c0:33:ed:ab:64:97:7d:3b:0e:d4:f8:0e:bf:a8: b1:76:0b:9e:b9:0f:fc:35:fc:38:c9:88:7a:8f:7b: 20:82:2f:02:65:f3:28:b2:4d:4a:e4:6d:aa:ff:b4: aa:46:2a:2c:b6:42:a9:f2:bf:10:39:65:ea:42:93: a2:96:ed:e3:22:d3:b9:7e:81:aa:3e:31:c5:f3:15: 62:ec:71:29:25:63:75:6e:01:51:f0:9b:2c:b1:ad: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:FF:9A:B0:3C:11:15:E6:71:C7:DC:BD:51:15:E7:8C:BC:99:D3 X509v3 Authority Key Identifier: keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS32587.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.121.66.0/23 50.121.72.0-50.121.76.255 50.121.79.0/24 Signature Algorithm: sha256WithRSAEncryption b9:3b:90:1b:3b:ee:45:b1:8f:de:ea:0b:26:98:a8:10:80:7f: ad:8a:78:8a:bf:15:0b:61:9b:58:43:be:7f:76:cc:f8:39:0c: 5b:ac:4e:ca:e6:53:88:3b:14:9a:7a:6a:26:3b:c8:63:e0:14: 61:fd:41:95:83:a0:b0:9e:36:47:be:96:01:0d:7c:56:6a:64: 6b:b2:fc:5e:f2:f5:01:cf:3b:9a:c4:c2:51:52:bc:f1:c5:c6: d3:13:7e:c0:cd:6c:81:68:ba:d9:71:80:d1:11:99:a0:fc:f8: b5:94:50:50:ee:cc:6b:8b:00:87:6f:c8:e4:fd:3d:89:42:58: 93:1b:0d:ac:9b:cb:be:00:c1:1b:81:e8:6f:09:f4:05:1b:6b: e5:b5:66:4d:29:e3:6e:9d:f3:57:40:2a:87:77:42:50:f1:25: c1:62:2b:7e:4d:f5:04:fe:a3:5c:43:83:8f:99:c7:70:cf:05: ee:d8:bc:2f:97:08:fe:ab:5f:cb:17:c8:d6:d8:03:92:89:81: dc:39:3e:48:bf:0b:01:3c:d9:c9:d1:7f:71:39:bc:bf:af:32: 05:7a:87:64:9f:19:06:ae:7f:06:e6:e4:16:68:09:8d:c0:88: 7f:ca:93:f1:fb:0e:cc:ad:f1:8d:8f:85:2f:f7:d1:8d:9c:4f: 30:51:be:31 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIUItr6YAht7vPOfuPttD5TNanRkCowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2 MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQwMjIyMDYwMjEzWhcNMjUwMjIwMDYwNzEz WjAzMTEwLwYDVQQDEygzNzBGRkY5QUIwM0MxMTE1RTY3MUM3RENCRDUxMTVFNzhD QkM5OUQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TVgX+l2QuK/ M5c1n1PFf4qhV0m6l1Vva/P2uo5Pzosr/NfVEQ21olgxLAvaMgnT8E9yQ38FKMHx svHer7b2051yVGAJNHgQOQJvIg5Kg/oauHfpleFKKRR18oiW+dnbCIfbx/KJlvrg bkCUZfZURm8trIQQZGsz2Y9gnZGpu5bZRLQee0sEvXs9o1UhEavEXpHB63wSICol lpl6jrGqNzkseZn3wDPtq2SXfTsO1PgOv6ixdgueuQ/8Nfw4yYh6j3sggi8CZfMo sk1K5G2q/7SqRiostkKp8r8QOWXqQpOilu3jItO5foGqPjHF8xVi7HEpJWN1bgFR 8Jsssa139QIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFDcP/5qwPBEV5nHH3L1RFeeM vJnTMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy ZjA5N2YvNC9BUzMyNTg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMG CCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBMnlCMAwDBAMyeUgDBAAyeUwDBAAy eU8wDQYJKoZIhvcNAQELBQADggEBALk7kBs77kWxj97qCyaYqBCAf62KeIq/FQth m1hDvn92zPg5DFusTsrmU4g7FJp6aiY7yGPgFGH9QZWDoLCeNke+lgENfFZqZGuy /F7y9QHPO5rEwlFSvPHFxtMTfsDNbIFoutlxgNERmaD8+LWUUFDuzGuLAIdvyOT9 PYlCWJMbDayby74AwRuB6G8J9AUba+W1Zk0p426d81dAKod3QlDxJcFiK35N9QT+ o1xDg4+Zx3DPBe7YvC+XCP6rX8sXyNbYA5KJgdw5Pki/CwE82cnRf3E5vL+vMgV6 h2SfGQaufwbm5BZoCY3AiH/Kk/H7Dsyt8Y2PhS/30Y2cTzBRvjE= -----END CERTIFICATE-----Generated at Sat Jun 8 01:37:41 2024 by rpki-client on console-fra.rpki-client.org