$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cfa9528-28aa-363d-a6f6-1158b8868311.roa File: 4cfa9528-28aa-363d-a6f6-1158b8868311.roa (raw, json) Hash identifier: AMWto6lvkdQc6qvV/S/QFeI5GnTqMwPLY3JFK89dzDw= Subject key identifier: 03:5A:AF:3B:06:33:7E:4A:FC:86:75:5C:0E:F0:E5:51:79:C3:D3:AF Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285847F7666367FFA53835372CD300 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cfa9528-28aa-363d-a6f6-1158b8868311.roa Signing time: Fri 22 Nov 2024 18:10:55 +0000 ROA not before: Fri 22 Nov 2024 18:10:55 +0000 ROA not after: Thu 20 Feb 2025 18:10:55 +0000 asID: 401152 IP address blocks: 50.114.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f7:66:63:67:ff:a5:38:35:37:2c:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 22 18:10:55 2024 GMT Not After : Feb 20 18:10:55 2025 GMT Subject: CN=fda7c5f6-3e3a-4def-b8ee-5e8ad4532266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:c9:74:f2:5b:4c:72:77:12:83:7f:fb:2a: f5:73:f0:de:f6:73:91:27:fe:4d:33:e9:81:42:35: a1:c3:3a:d8:4e:a7:bf:bc:f5:fa:da:74:e4:d0:72: cb:9c:16:5a:cc:09:1a:d4:48:5f:dd:f6:82:49:d5: fb:7a:e0:b0:aa:62:78:41:02:47:a4:a2:68:7a:fd: dd:c0:1b:0c:db:5c:59:50:04:9f:88:56:0e:ef:65: 8d:a7:f9:e6:3d:db:9a:4a:5b:fa:75:ef:a9:cf:0b: 74:9c:a9:29:04:f7:7a:8f:5a:18:2b:4d:0e:e5:aa: 5f:0c:3f:61:11:1d:5c:34:9d:ed:3e:3f:e1:1a:b9: 9f:0a:6b:c1:e3:3b:07:33:9a:58:4c:52:c0:da:b5: d8:92:2d:9b:70:1a:9e:c7:68:97:bf:63:0b:a7:b3: c3:5b:24:42:cb:21:9f:2f:9a:25:11:00:43:47:f8: a6:a8:c3:c5:a8:4c:5a:01:bd:69:32:b8:66:a8:54: 18:f2:e1:81:26:ba:92:74:61:cb:a2:06:4e:62:d0: 60:13:ce:53:4f:b4:f8:2c:26:64:a4:b5:4e:4d:23: c1:12:47:15:a3:6f:d3:58:8f:f1:71:03:ea:90:2e: 96:e2:36:86:b0:35:ba:81:78:92:68:79:51:63:0f: 2c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5A:AF:3B:06:33:7E:4A:FC:86:75:5C:0E:F0:E5:51:79:C3:D3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cfa9528-28aa-363d-a6f6-1158b8868311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c6:64:8d:8a:6d:ea:ea:81:7f:c6:ea:70:12:e6:2a:61:62: 9a:f9:28:b3:08:47:f5:2c:15:43:b7:99:b4:8a:66:7d:6a:ff: ed:47:3a:83:cd:de:f3:da:89:6d:2f:fb:d5:88:27:91:e9:24: 95:bd:a0:f1:20:04:ac:c5:ce:fc:06:33:5e:89:51:72:7b:52: 4c:29:c3:23:28:f4:0a:54:e7:15:c5:0a:1d:83:2e:5c:a7:03: 4f:1a:51:81:6e:34:bb:42:cc:9b:bc:76:71:81:a1:89:be:00: 25:c7:2e:31:c0:53:14:8b:a5:66:ab:ff:55:cf:97:95:ea:c7: 48:0e:24:55:06:98:4d:d7:f3:aa:62:67:43:87:27:29:47:61: 96:1a:f9:98:01:7c:7b:e5:c0:f4:6f:bd:94:fe:07:72:c8:cc: 66:00:99:80:f0:9e:e1:05:ed:96:69:39:c7:65:b7:ce:cf:fa: e3:c1:fb:fa:e0:d8:21:86:b8:f3:1f:cb:93:73:41:71:db:f4: 50:b9:a3:30:12:9f:af:e7:15:21:ab:01:dc:9d:30:04:8c:90: e0:96:d4:de:9f:03:a2:32:d2:29:4d:db:92:e7:82:cb:5e:ae: e2:b1:66:c0:c6:c6:c8:f5:67:81:54:da:62:2c:71:de:d1:e9: 0d:f3:02:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf3ZmNn/6U4NTcs0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MTEyMjE4MTA1NVoXDTI1MDIyMDE4MTA1NVowLzEtMCsGA1UEAxMk ZmRhN2M1ZjYtM2UzYS00ZGVmLWI4ZWUtNWU4YWQ0NTMyMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx3JdPJbTHJ3EoN/+yr1c/De9nORJ/5NM+mB QjWhwzrYTqe/vPX62nTk0HLLnBZazAka1Ehf3faCSdX7euCwqmJ4QQJHpKJoev3d wBsM21xZUASfiFYO72WNp/nmPduaSlv6de+pzwt0nKkpBPd6j1oYK00O5apfDD9h ER1cNJ3tPj/hGrmfCmvB4zsHM5pYTFLA2rXYki2bcBqex2iXv2MLp7PDWyRCyyGf L5olEQBDR/imqMPFqExaAb1pMrhmqFQY8uGBJrqSdGHLogZOYtBgE85TT7T4LCZk pLVOTSPBEkcVo2/TWI/xcQPqkC6W4jaGsDW6gXiSaHlRYw8spQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANarzsGM35K/IZ1XA7w5VF5w9OvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGNmYTk1MjgtMjhhYS0z NjNkLWE2ZjYtMTE1OGI4ODY4MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7GZI2KberqgX/G6nAS5iphYpr5KLMIR/UsFUO3mbSKZn1q/+1HOoPN 3vPaiW0v+9WIJ5HpJJW9oPEgBKzFzvwGM16JUXJ7UkwpwyMo9ApU5xXFCh2DLlyn A08aUYFuNLtCzJu8dnGBoYm+ACXHLjHAUxSLpWar/1XPl5Xqx0gOJFUGmE3X86pi Z0OHJylHYZYa+ZgBfHvlwPRvvZT+B3LIzGYAmYDwnuEF7ZZpOcdlt87P+uPB+/rg 2CGGuPMfy5NzQXHb9FC5ozASn6/nFSGrAdydMASMkOCW1N6fA6Iy0ilN25Lngste ruKxZsDGxsj1Z4FU2mIscd7R6Q3zAkU= -----END CERTIFICATE-----Generated at Wed Feb 5 09:50:28 2025 by rpki-client