$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa File: 3539c781-77b7-3d87-9f79-249dab3df0e0.roa (raw, json) Hash identifier: DMOQHlBEN9N7vh/0i0HhsRFy167tpZwMq/axP5hV12c= Subject key identifier: 7E:E1:65:85:96:AB:6F:89:72:F1:60:9E:D4:20:B0:33:A0:7C:8E:51 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584787212AE0AD8602DD5EF88AB8 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 29802 IP address blocks: 199.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:2a:e0:ad:86:02:dd:5e:f8:8a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=6fa2e9bf-a42a-48f4-9e67-ecd8bb601f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:65:b2:24:9c:a5:83:79:5d:95:32:a7:fd: b0:ed:18:32:c0:be:33:0b:bc:0e:3d:20:89:bd:d8: 79:79:c4:06:c2:5d:ec:b7:b9:83:a6:ca:67:71:bf: 2d:d6:20:61:be:2c:fa:0f:84:00:12:33:11:1d:13: 1a:f0:c3:12:57:b9:9b:37:a1:46:f9:47:a6:bf:09: ff:0a:5a:5e:45:10:73:72:fc:9b:2e:58:79:e6:2a: b9:c5:1a:5e:6d:1b:7c:44:61:04:48:6d:4a:0f:2c: 13:f7:7a:d7:32:4a:16:3e:19:df:f9:1f:03:67:7b: 79:d4:04:d9:49:a0:9e:44:d5:b1:6f:7c:42:d7:8c: 5a:8f:5c:d1:6f:2d:b4:77:91:32:0b:51:c6:33:ff: 41:14:38:73:cf:b2:77:48:1b:86:cd:c5:38:77:28: 66:1c:31:77:6b:18:72:84:67:41:fc:c7:67:df:9d: 5a:08:d2:b6:eb:83:7e:bf:54:37:25:a4:b2:e5:6f: 72:e5:99:a7:08:59:ca:fc:c8:58:58:f4:ef:a4:2d: 70:c8:5d:d9:29:f0:1c:04:5b:8a:9d:76:ce:a0:89: 26:5f:2e:79:8f:55:8e:32:ad:91:44:c9:f3:36:4e: fd:31:74:f1:8b:79:bb:6f:46:f2:7b:63:a9:60:57: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:65:85:96:AB:6F:89:72:F1:60:9E:D4:20:B0:33:A0:7C:8E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.119.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7b:4a:ab:48:91:12:71:90:0b:f6:3d:81:c3:c7:b6:5a:d2: 6c:8f:31:0d:fd:12:63:71:88:9f:11:48:45:f5:61:e7:ee:57: 41:b0:2e:55:c1:7a:78:ce:41:1e:1c:35:5a:36:ca:35:2c:48: c9:af:47:cd:76:16:04:92:47:be:76:a9:04:64:cb:14:bb:c3: ee:24:02:c2:ff:c7:29:99:c7:46:08:ca:2b:e2:0b:0a:27:cc: f7:a9:1a:99:38:c8:c6:33:0d:c4:e5:85:08:2e:18:6e:da:dc: c1:2e:f0:a9:2f:49:0c:1e:a7:13:bb:a3:14:67:58:8d:1f:14: 0d:91:d5:23:1d:d0:90:a4:1d:19:84:4f:c0:dc:a0:5e:a3:29: 64:89:7d:c5:36:ff:e1:14:db:5e:7b:83:4b:1c:f1:7d:be:23: 03:6f:ea:b5:58:6b:41:28:71:6e:af:40:fc:77:1f:ef:96:84: f1:ad:14:34:d5:4b:a9:18:b2:ad:97:34:dd:b1:b8:65:9a:a6: bd:91:28:58:37:db:3a:f9:c1:19:4e:4d:0a:21:33:df:1f:ee: 54:e6:ca:46:3e:0d:48:3b:08:ff:5d:0a:df:6b:ad:9b:2b:ee: 21:c5:84:22:7a:f1:9f:30:08:7d:8f:d2:60:d2:f5:c0:cc:a7: ab:e0:32:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHISrgrYYC3V74irgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk NmZhMmU5YmYtYTQyYS00OGY0LTllNjctZWNkOGJiNjAxZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng9lsiScpYN5XZUyp/2w7RgywL4zC7wOPSCJ vdh5ecQGwl3st7mDpspncb8t1iBhviz6D4QAEjMRHRMa8MMSV7mbN6FG+Uemvwn/ ClpeRRBzcvybLlh55iq5xRpebRt8RGEESG1KDywT93rXMkoWPhnf+R8DZ3t51ATZ SaCeRNWxb3xC14xaj1zRby20d5EyC1HGM/9BFDhzz7J3SBuGzcU4dyhmHDF3axhy hGdB/Mdn351aCNK264N+v1Q3JaSy5W9y5ZmnCFnK/MhYWPTvpC1wyF3ZKfAcBFuK nXbOoIkmXy55j1WOMq2RRMnzNk79MXTxi3m7b0bye2OpYFfaPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7hZYWWq2+JcvFgntQgsDOgfI5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMzUzOWM3ODEtNzdiNy0z ZDg3LTlmNzktMjQ5ZGFiM2RmMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR7SqtIkRJxkAv2PYHDx7Za0myPMQ39EmNxiJ8RSEX1YefuV0GwLlXB enjOQR4cNVo2yjUsSMmvR812FgSSR752qQRkyxS7w+4kAsL/xymZx0YIyiviCwon zPepGpk4yMYzDcTlhQguGG7a3MEu8KkvSQwepxO7oxRnWI0fFA2R1SMd0JCkHRmE T8DcoF6jKWSJfcU2/+EU2157g0sc8X2+IwNv6rVYa0EocW6vQPx3H++WhPGtFDTV S6kYsq2XNN2xuGWapr2RKFg32zr5wRlOTQohM98f7lTmykY+DUg7CP9dCt9rrZsr 7iHFhCJ68Z8wCH2P0mDS9cDMp6vgMsg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org