$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa File: 09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa (raw, json) Hash identifier: lYmdgSeR0kCbWdwvC2R8JwTE0ldEaQ7WKGF//wmy32I= Subject key identifier: 21:BD:81:B4:D1:53:D9:33:87:F5:97:4B:E5:EC:41:95:6F:71:9E:65 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285847845678F376B9078DF241FD80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 29802 IP address blocks: 199.91.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:78:f3:76:b9:07:8d:f2:41:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=de409a07-0686-4e95-b407-32dbda592b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:76:ce:8c:59:39:d1:9b:dd:70:77:e6:3a: 4d:81:cc:3c:80:5c:1c:5f:ba:55:38:74:75:7c:ae: 29:39:c0:fe:ff:ce:e4:a1:63:af:a6:d0:93:e0:5c: 7b:f5:d3:d7:9c:ee:01:4b:3b:ee:ef:78:61:44:86: 11:6e:69:f4:a7:40:67:59:d2:e8:1d:70:42:6f:87: d2:cf:cf:6a:86:e7:12:81:f6:f2:18:70:90:09:65: ad:d9:db:af:23:5c:18:f5:f8:ad:70:eb:6d:0a:47: 58:82:bd:e0:64:2c:6a:ff:be:3d:19:ad:9f:d2:fb: 77:10:de:99:60:02:57:4f:a4:ba:52:dd:ca:e9:1f: 38:ca:4d:d0:fe:2e:29:30:90:17:84:a8:a7:5b:91: 75:9d:e0:be:42:78:dc:be:ff:4a:36:6b:05:c5:90: 8f:5c:07:c9:dd:64:f2:a9:52:68:91:61:73:2e:05: f7:fd:d4:aa:2b:1d:df:cb:f5:d2:44:32:7f:2a:cb: c5:3e:c4:04:1a:68:9c:7b:c1:c9:1b:37:fe:06:85: e3:9b:f7:71:f6:a7:dd:5c:c0:9d:e2:c6:a5:f8:8a: 41:ce:d4:85:40:87:3e:81:34:00:89:10:07:05:e2: ce:a6:fd:ce:8c:70:bb:5c:77:d6:02:6b:0a:80:2b: 33:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:81:B4:D1:53:D9:33:87:F5:97:4B:E5:EC:41:95:6F:71:9E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.91.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:68:c2:67:a4:22:6b:f9:50:cc:ff:cf:37:f7:7c:73:3b:3d: dd:ee:f9:c5:30:61:dc:e7:f5:6c:f7:f1:a4:e3:5b:7d:18:af: 4b:2c:d7:36:f3:ae:58:0c:3a:c7:90:c5:78:f2:5a:49:34:de: e5:03:4c:70:b8:81:fc:f3:1b:6a:3a:a6:16:0e:77:6a:b5:75: 88:b5:09:7f:56:e5:4e:80:68:90:47:a1:61:1d:83:62:90:72: 5b:ac:ff:23:ed:cd:aa:8c:48:33:57:6d:57:72:68:69:43:0b: 99:2d:2a:12:55:89:3c:77:1b:1b:22:da:20:dc:7a:a7:46:2e: c9:05:b4:f7:e8:4b:81:2d:5b:81:7a:19:3f:7e:2c:6e:d8:bb: f5:6c:03:9c:68:16:23:99:51:94:74:ae:1c:ea:45:69:7c:96: df:ad:9b:21:32:e6:c7:94:a3:48:17:65:d7:24:0a:b0:fe:43: 4d:60:46:99:a1:65:c8:38:8f:5d:f0:3e:8b:99:5c:4b:9d:68: fa:38:9d:9a:a2:34:b0:b8:fb:dc:2c:7f:b1:b7:26:43:bd:26: 73:22:0e:af:65:a7:3b:7d:8d:37:f3:57:66:94:6d:84:55:59: 83:e2:f5:5a:d1:29:e7:6f:90:78:9c:4f:77:7d:36:0e:1b:e7: ab:74:1d:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVnjzdrkHjfJB/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk ZGU0MDlhMDctMDY4Ni00ZTk1LWI0MDctMzJkYmRhNTkyYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogt2zoxZOdGb3XB35jpNgcw8gFwcX7pVOHR1 fK4pOcD+/87koWOvptCT4Fx79dPXnO4BSzvu73hhRIYRbmn0p0BnWdLoHXBCb4fS z89qhucSgfbyGHCQCWWt2duvI1wY9fitcOttCkdYgr3gZCxq/749Ga2f0vt3EN6Z YAJXT6S6Ut3K6R84yk3Q/i4pMJAXhKinW5F1neC+Qnjcvv9KNmsFxZCPXAfJ3WTy qVJokWFzLgX3/dSqKx3fy/XSRDJ/KsvFPsQEGmice8HJGzf+BoXjm/dx9qfdXMCd 4sal+IpBztSFQIc+gTQAiRAHBeLOpv3OjHC7XHfWAmsKgCszcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG9gbTRU9kzh/WXS+XsQZVvcZ5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMDk0MDMxNDMtOGFiYS0z ZDdjLWE5M2MtYzEwYzdiYThkOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhowmekImv5UMz/zzf3fHM7Pd3u+cUwYdzn9Wz38aTjW30Yr0ss1zbz rlgMOseQxXjyWkk03uUDTHC4gfzzG2o6phYOd2q1dYi1CX9W5U6AaJBHoWEdg2KQ clus/yPtzaqMSDNXbVdyaGlDC5ktKhJViTx3Gxsi2iDceqdGLskFtPfoS4EtW4F6 GT9+LG7Yu/VsA5xoFiOZUZR0rhzqRWl8lt+tmyEy5seUo0gXZdckCrD+Q01gRpmh Zcg4j13wPouZXEudaPo4nZqiNLC4+9wsf7G3JkO9JnMiDq9lpzt9jTfzV2aUbYRV WYPi9VrRKedvkHicT3d9Ng4b56t0HS0= -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:51 2024 by rpki-client on console-fra.rpki-client.org