$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa File: 2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa (raw, json) Hash identifier: SThbidGPKwNcWS/hA1OM/ZRY3DZqIsGuki+GsFOpo3s= Subject key identifier: 98:B2:78:94:6B:F4:AF:3D:DB:52:BD:DA:A9:93:15:02:1E:12:F5:31 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285847802652D48198EE20F1B7E880 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 29802 IP address blocks: 162.220.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:52:d4:81:98:ee:20:f1:b7:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=fa396488-efdd-413a-b42c-a4e72decfb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:fa:fd:23:2a:48:55:5a:19:e4:6a:22:ac: d3:48:1c:36:51:38:69:d7:3a:52:d6:fe:2c:cf:0b: b8:f5:47:a3:37:fa:47:6a:73:d4:03:cd:b0:69:46: 35:09:b4:c6:47:4e:d9:26:84:f7:f8:ae:09:ac:c4: fe:18:7a:e7:29:fd:f9:a0:17:73:bf:b7:42:30:07: 57:ae:52:19:7b:ed:0c:87:58:2e:df:58:f0:7f:d1: eb:2e:bb:f8:2e:76:a7:12:62:83:4d:39:f6:4e:44: 3e:7a:3f:08:69:9e:d1:8e:91:67:6e:c7:0b:27:3e: 4b:9d:f4:64:ff:ee:d3:b2:3e:f7:64:a1:55:60:d0: a6:50:fc:90:5b:41:a4:be:fd:fa:e2:fb:6b:dd:fc: 3f:ba:d0:c5:f0:5a:72:b9:d7:f2:d9:fc:e3:69:94: 47:d4:01:ff:b9:a0:04:e0:a7:7a:27:d9:ee:09:b3: 46:41:d9:2d:02:b7:86:e0:c7:9a:8c:50:fa:18:d8: 29:0f:bd:8f:e7:c7:09:fb:8d:f5:26:74:11:1e:15: b1:aa:3b:05:48:52:b0:9b:00:4c:06:ad:08:46:4d: e8:7d:2e:06:bb:e2:82:a6:d5:e7:4f:82:42:c1:67: cf:66:47:ff:a9:df:8a:e3:50:39:e3:e4:2b:ef:27: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:78:94:6B:F4:AF:3D:DB:52:BD:DA:A9:93:15:02:1E:12:F5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.220.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3d:78:1b:9f:6b:ab:44:58:44:5b:6a:31:1b:da:d9:1d:78: 16:f6:3f:b2:75:97:c4:d1:59:91:b6:8e:67:77:fb:4a:e4:05: c9:e7:e9:4b:3d:d2:2a:9e:75:a7:13:92:65:de:34:e0:84:b1: 4a:1c:81:f2:2d:4b:41:ba:12:fc:eb:13:68:a0:72:83:27:29: 11:53:52:05:33:f9:7b:ef:43:5d:6b:d2:71:e1:53:da:1c:98: 75:2e:68:8e:a6:0d:92:94:2d:5a:3c:a9:7a:4b:92:d5:25:6b: 36:f9:fa:7c:93:84:da:a0:ad:d4:e3:24:32:e6:82:08:89:cc: d1:b0:3e:f1:9d:73:8c:56:4c:3f:86:d4:d6:9c:01:65:92:af: a2:ad:fc:38:09:5c:8e:fe:5c:34:cd:08:38:a6:a1:2c:15:fa: 69:ee:8b:26:04:93:c7:0a:30:ae:ca:24:4b:95:06:94:f6:9b: a9:8e:50:b3:84:04:ce:b2:76:b9:6a:52:5f:01:d5:c3:ba:ac: d9:ab:41:a0:25:1c:dd:39:b4:cb:57:7c:04:33:51:88:76:69: e8:c2:6f:fd:a6:60:9c:b5:57:25:f5:1f:11:bc:85:b4:c1:d2: bf:5d:be:74:e7:bf:1e:89:ab:34:95:6f:f3:be:52:68:3b:df: 3b:e8:86:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJlLUgZjuIPG36IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk ZmEzOTY0ODgtZWZkZC00MTNhLWI0MmMtYTRlNzJkZWNmYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfT6/SMqSFVaGeRqIqzTSBw2UThp1zpS1v4s zwu49UejN/pHanPUA82waUY1CbTGR07ZJoT3+K4JrMT+GHrnKf35oBdzv7dCMAdX rlIZe+0Mh1gu31jwf9HrLrv4LnanEmKDTTn2TkQ+ej8IaZ7RjpFnbscLJz5LnfRk /+7Tsj73ZKFVYNCmUPyQW0Gkvv364vtr3fw/utDF8Fpyudfy2fzjaZRH1AH/uaAE 4Kd6J9nuCbNGQdktAreG4MeajFD6GNgpD72P58cJ+431JnQRHhWxqjsFSFKwmwBM Bq0IRk3ofS4Gu+KCptXnT4JCwWfPZkf/qd+K41A54+Qr7ydPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiyeJRr9K8921K92qmTFQIeEvUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMmFmMGQxZWUtYTRlZi0z ZTY5LWI4MzMtYTA5MjA5NzY4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI9eBufa6tEWERbajEb2tkdeBb2P7J1l8TRWZG2jmd3+0rkBcnn6Us9 0iqedacTkmXeNOCEsUocgfItS0G6EvzrE2igcoMnKRFTUgUz+XvvQ11r0nHhU9oc mHUuaI6mDZKULVo8qXpLktUlazb5+nyThNqgrdTjJDLmggiJzNGwPvGdc4xWTD+G 1NacAWWSr6Kt/DgJXI7+XDTNCDimoSwV+mnuiyYEk8cKMK7KJEuVBpT2m6mOULOE BM6ydrlqUl8B1cO6rNmrQaAlHN05tMtXfAQzUYh2aejCb/2mYJy1VyX1HxG8hbTB 0r9dvnTnvx6JqzSVb/O+Umg73zvohgI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org