$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa File: 46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa (raw, json) Hash identifier: 3vSeK0RU8NZf+YgwxzTEoqzpVMDx24Y1kabbspSfudg= Subject key identifier: 0C:BA:D3:83:F7:8B:56:40:EA:69:C7:2F:02:D9:4A:4A:32:86:07:A8 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858477EC10F3577E5D564EFF45A00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 29802 IP address blocks: 144.168.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:0f:35:77:e5:d5:64:ef:f4:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=8c7fd4b7-eb58-42a3-874a-4988b04a3b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:6d:f2:9b:9f:70:0d:f0:54:e6:f9:9d:5a: 96:65:4b:e2:f0:8a:76:35:e6:b2:87:39:38:24:84: 19:c0:73:48:2b:7c:f6:df:c7:65:3e:ff:a5:68:12: 5e:42:eb:0c:18:6b:49:93:a5:1c:a5:47:62:c6:c0: b8:07:8b:62:3a:6f:40:dd:bc:ec:f6:ea:c9:c3:1e: 7d:b8:f1:d8:59:dc:9a:ce:9a:de:87:5a:58:9d:a9: 6e:02:25:f7:e8:7d:99:c0:52:81:06:30:fe:e5:ca: 78:00:76:e8:89:a4:9a:f5:36:6f:9c:ca:d6:85:22: b4:5c:17:38:a6:e6:ce:01:43:09:7f:50:d1:ef:5d: f9:49:16:16:50:cb:0d:d4:2e:4c:40:1d:3a:93:04: 88:4a:28:7d:18:5b:16:28:1c:18:02:7a:fa:e1:36: 69:a4:f8:34:42:8f:1a:a9:31:d8:1a:35:4b:cf:81: 3e:e3:97:e1:e6:95:d4:23:a5:ea:3f:16:4b:50:00: cd:7a:02:4d:2a:fa:73:05:c3:97:1c:5f:86:3a:69: 7c:45:09:6d:75:4f:b2:36:3d:f0:63:b7:14:db:d8: a4:75:9b:38:84:c2:64:3c:bf:0b:a8:14:45:68:99: a9:32:80:f4:a5:21:9f:6d:cc:52:15:00:fd:8f:df: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:D3:83:F7:8B:56:40:EA:69:C7:2F:02:D9:4A:4A:32:86:07:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0f:35:32:6b:3e:80:4e:05:02:da:c6:62:4c:e5:c7:9a:c5: 37:0f:da:75:f5:b0:06:d4:29:d7:29:2c:65:d2:be:ed:f3:70: 32:2c:c9:b8:08:7d:38:e7:1d:8c:67:9e:9e:22:ee:53:7c:96: d0:a4:13:14:49:51:fe:21:6d:6f:6d:c7:a0:19:f6:bc:ee:2f: b0:8e:36:9e:9c:e8:99:bc:a4:20:ca:bf:98:38:13:b1:63:4e: 29:4a:f3:d1:73:90:14:78:95:ac:2c:77:52:78:82:14:87:58: e0:f0:99:7e:aa:15:d7:a9:e6:c4:7b:33:41:18:17:6a:7b:0e: b3:97:2f:59:0c:83:a2:1d:31:2d:96:88:48:eb:e0:e7:af:43: f0:df:ec:97:85:a4:8a:08:4e:64:55:ab:bf:74:a1:61:2b:4e: 36:a3:ee:14:74:7b:dd:47:ac:d6:5a:2f:cc:60:ea:90:cd:4b: 1f:f5:3e:a1:14:81:e6:55:92:f2:82:41:f7:7a:43:16:ff:7b: 6b:58:02:1d:e5:19:f9:ef:33:f0:bf:09:75:44:86:20:aa:c1: a3:25:96:14:8f:89:0e:f5:6a:5d:8a:e2:df:43:0e:aa:21:01: b6:9a:fc:46:a0:1d:31:58:d6:0e:bb:01:63:e2:f4:92:ba:01: db:33:8c:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wQ81d+XVZO/0WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk OGM3ZmQ0YjctZWI1OC00MmEzLTg3NGEtNDk4OGIwNGEzYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHdt8pufcA3wVOb5nVqWZUvi8Ip2Neayhzk4 JIQZwHNIK3z238dlPv+laBJeQusMGGtJk6UcpUdixsC4B4tiOm9A3bzs9urJwx59 uPHYWdyazpreh1pYnaluAiX36H2ZwFKBBjD+5cp4AHboiaSa9TZvnMrWhSK0XBc4 pubOAUMJf1DR7135SRYWUMsN1C5MQB06kwSISih9GFsWKBwYAnr64TZppPg0Qo8a qTHYGjVLz4E+45fh5pXUI6XqPxZLUADNegJNKvpzBcOXHF+GOml8RQltdU+yNj3w Y7cU29ikdZs4hMJkPL8LqBRFaJmpMoD0pSGfbcxSFQD9j9/MBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAy604P3i1ZA6mnHLwLZSkoyhgeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNDZiOTNmM2QtYTYzOS0z ZGFlLTgxMjUtZTRhYzBmY2RmNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkKggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYPNTJrPoBOBQLaxmJM5ceaxTcP2nX1sAbUKdcpLGXSvu3zcDIsybgI fTjnHYxnnp4i7lN8ltCkExRJUf4hbW9tx6AZ9rzuL7CONp6c6Jm8pCDKv5g4E7Fj TilK89FzkBR4lawsd1J4ghSHWODwmX6qFdep5sR7M0EYF2p7DrOXL1kMg6IdMS2W iEjr4OevQ/Df7JeFpIoITmRVq790oWErTjaj7hR0e91HrNZaL8xg6pDNSx/1PqEU geZVkvKCQfd6Qxb/e2tYAh3lGfnvM/C/CXVEhiCqwaMllhSPiQ71al2K4t9DDqoh Abaa/EagHTFY1g67AWPi9JK6AdszjHM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:00 2024 by rpki-client on console-fra.rpki-client.org