$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa File: 01549ba4-9860-36fa-802e-973645dc8779.roa (raw, json) Hash identifier: 8KFXmZAmdZbGE6B5avjlcOWSg/qWWCefkqC7k3/oFYc= Subject key identifier: 70:43:C1:90:16:4A:12:23:CB:BF:64:15:CE:02:5F:31:BE:40:56:81 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485B6AF757710B695EB1C57E80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 29802 IP address blocks: 68.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:f7:57:71:0b:69:5e:b1:c5:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=4ded500e-4978-431f-8ca3-c4f8f2c0f1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:c8:cd:e1:02:ce:00:8d:f0:fa:0c:4f:2b: 0a:5c:e1:73:14:e7:0c:07:3c:2f:9e:9a:cb:4f:07: 56:d9:d1:49:98:c6:1b:4a:6a:67:0a:f9:3a:21:6d: d0:68:fb:7f:cb:99:cf:9b:61:58:30:a6:1e:78:d6: 4f:55:b3:80:4e:54:9a:a9:2e:e8:2a:ad:77:44:9d: e4:c4:04:f2:3f:85:59:0c:ac:f2:fa:ba:c2:ae:ab: a0:de:de:2b:bc:fa:a5:13:65:80:4d:3c:88:25:77: 30:a1:f8:23:0a:07:c2:d1:c3:e0:ac:24:23:30:06: 37:4c:46:20:ba:6b:2a:3c:73:a9:6f:3a:76:a2:37: b2:07:79:83:00:6a:a8:00:82:05:ab:7e:05:43:86: 0e:ae:a8:68:f8:9b:88:e5:cf:c1:b0:f5:c2:df:60: a6:70:41:ed:5b:f1:78:3e:a4:ea:97:d4:3e:24:c2: c2:8a:70:40:06:1d:eb:03:b8:7a:66:e0:ac:2d:47: e1:83:97:9f:bb:4d:fd:50:37:22:21:41:72:9a:da: 08:6e:30:f8:39:73:11:e9:45:ef:8e:d8:88:ca:72: 26:42:a4:f0:00:12:76:ba:c0:b4:9e:2f:78:0d:2d: b9:44:87:e2:dc:74:97:5f:24:b8:7f:d1:a3:68:51: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:43:C1:90:16:4A:12:23:CB:BF:64:15:CE:02:5F:31:BE:40:56:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 68.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:28:60:ca:aa:16:b2:76:b1:3a:03:20:12:08:d2:0c:7e:85: 7e:91:cb:f1:ff:a1:fa:1c:1c:07:7f:57:9b:31:4d:56:9d:e5: be:36:ad:33:91:86:55:5e:dc:83:63:70:3d:4f:c2:e9:96:d9: e5:f8:ad:8a:0e:f5:c0:c1:5b:9b:b8:ba:e0:cd:e4:74:cd:63: c1:a1:5e:b6:dd:cf:7b:23:66:f4:9f:32:e0:8c:01:14:26:b4: 01:9d:5a:59:bd:69:62:34:3e:2e:ba:3c:db:37:18:dd:df:bf: b6:8c:b2:cc:b1:71:5b:a9:ef:69:61:aa:ad:eb:db:03:c8:68: 46:d3:96:3b:6c:41:56:67:30:46:21:0f:a6:46:56:17:06:03: 6e:8d:56:27:c6:fc:76:3f:11:c6:37:75:54:92:84:59:62:93: a9:a8:76:60:03:4b:b1:8a:c6:b5:dd:4e:e0:df:33:c0:1e:3d: f0:6a:98:40:8e:98:d6:ce:bc:89:ce:24:ad:28:8c:a0:39:b5: b9:0d:f2:2d:a8:57:50:1c:93:6d:2c:de:55:fc:18:dd:9e:14: d0:88:df:30:1f:ec:ab:fb:c8:6f:7b:a2:7c:01:d7:72:c0:6a: 72:6d:08:88:56:71:f3:0a:67:1d:3c:8e:af:16:64:67:5d:5f: 26:da:49:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavdXcQtpXrHFfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk NGRlZDUwMGUtNDk3OC00MzFmLThjYTMtYzRmOGYyYzBmMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhPIzeECzgCN8PoMTysKXOFzFOcMBzwvnprL TwdW2dFJmMYbSmpnCvk6IW3QaPt/y5nPm2FYMKYeeNZPVbOATlSaqS7oKq13RJ3k xATyP4VZDKzy+rrCrqug3t4rvPqlE2WATTyIJXcwofgjCgfC0cPgrCQjMAY3TEYg umsqPHOpbzp2ojeyB3mDAGqoAIIFq34FQ4YOrqho+JuI5c/BsPXC32CmcEHtW/F4 PqTql9Q+JMLCinBABh3rA7h6ZuCsLUfhg5efu039UDciIUFymtoIbjD4OXMR6UXv jtiIynImQqTwABJ2usC0ni94DS25RIfi3HSXXyS4f9GjaFFOTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBDwZAWShIjy79kFc4CXzG+QFaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMDE1NDliYTQtOTg2MC0z NmZhLTgwMmUtOTczNjQ1ZGM4Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4oYMqqFrJ2sToDIBII0gx+hX6Ry/H/ofocHAd/V5sxTVad5b42rTOR hlVe3INjcD1PwumW2eX4rYoO9cDBW5u4uuDN5HTNY8GhXrbdz3sjZvSfMuCMARQm tAGdWlm9aWI0Pi66PNs3GN3fv7aMssyxcVup72lhqq3r2wPIaEbTljtsQVZnMEYh D6ZGVhcGA26NVifG/HY/EcY3dVSShFlik6modmADS7GKxrXdTuDfM8AePfBqmECO mNbOvInOJK0ojKA5tbkN8i2oV1Ack20s3lX8GN2eFNCI3zAf7Kv7yG97onwB13LA anJtCIhWcfMKZx08jq8WZGddXybaSQQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:15 2025 by rpki-client