$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa File: 96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa (raw, json) Hash identifier: fk2yyeRJOHWBn7Lbx31612u9wmTrpch4+pTOuOPebfY= Subject key identifier: 78:23:E4:BF:02:25:D7:4C:91:5E:69:BD:0C:EE:36:81:8A:5A:AC:08 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485E35B08BD8F88C3EA8A09A80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 29802 IP address blocks: 91.191.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:b0:8b:d8:f8:8c:3e:a8:a0:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=85f8a8b6-eb83-43f0-8ae1-5347a87d977d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:a3:35:82:94:bf:6f:20:13:74:e8:a0:c6: ab:b3:03:aa:78:e1:e4:5e:36:7d:65:97:12:5b:d4: 30:5e:a2:20:d9:a7:d1:09:05:bd:34:ac:5f:24:f7: 3e:c0:a9:ea:f2:a0:33:c8:81:c8:a6:c3:49:36:0b: a2:81:0b:df:74:65:2b:e6:81:69:7f:b8:29:4a:f3: f8:c0:01:d5:47:82:85:65:80:5f:31:4e:62:86:99: 11:00:35:f9:de:9e:89:44:af:ec:87:a4:e3:8a:a8: 1f:2c:46:d6:87:20:60:ac:b1:eb:25:f5:d3:db:d2: 6a:6a:89:e2:68:5b:85:e3:79:37:80:55:86:93:39: e5:65:44:d6:29:f0:03:29:09:dd:28:fd:a0:e4:a5: 06:84:c0:ab:ec:e8:42:81:cc:4d:13:e0:8a:28:4f: c1:34:e5:fd:73:49:d9:ef:99:dd:5c:50:23:1a:f9: a4:f1:79:7c:71:a6:79:c2:2d:9a:d4:4f:cd:09:7d: 7a:e2:38:1b:b5:49:c9:35:67:30:f0:51:17:ac:8b: 03:4c:83:2d:b3:ef:79:9e:03:83:19:74:44:bb:d6: ce:43:33:5e:a6:77:1f:50:e5:1c:6c:27:bc:6b:6c: 73:ac:16:1f:f0:de:7d:d2:13:cd:5e:54:ce:b2:d8: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:23:E4:BF:02:25:D7:4C:91:5E:69:BD:0C:EE:36:81:8A:5A:AC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e5:6b:f0:5f:f1:40:c0:fe:d4:b7:4d:e8:40:be:41:38:f1: e7:70:f6:30:a1:0c:8a:df:a3:e7:bc:c3:76:e4:f6:ef:f4:2f: f3:40:a8:6f:98:83:6d:58:f3:8b:89:6d:15:da:be:d4:08:e0: fe:4c:27:89:f5:15:97:ca:a4:ba:dd:9c:f7:35:e7:aa:aa:44: e9:5a:22:af:0a:88:4e:18:ff:fd:1f:97:f1:fe:39:0a:b6:f8: e1:dd:ed:bf:6a:c5:c9:40:ce:53:95:09:09:ba:3f:e4:dc:44: be:57:ea:0c:45:a7:a5:f2:db:da:7d:13:75:de:35:26:29:05: cd:80:d4:34:96:ae:12:4b:29:87:5c:80:cc:d3:62:5d:6f:b2: 52:12:91:28:8e:d0:ea:17:de:35:4b:d3:ec:21:15:8f:3a:c1: 3e:e7:c2:42:72:0f:e6:52:c1:7f:1b:5d:7e:9a:27:73:de:71: 87:0b:84:00:3d:4c:1c:63:66:9f:f5:5d:dc:7a:70:f6:5b:2e: 3a:cc:79:1e:6a:06:f4:ca:94:27:93:3e:55:61:fe:16:c1:e6: 22:fb:ea:49:a2:ab:38:17:9b:62:38:2e:2d:f0:cc:1e:73:dd: 71:f4:5f:31:59:64:d9:97:7f:4e:29:79:99:89:a4:dd:ce:0c: 36:ee:bd:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNbCL2PiMPqigmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk ODVmOGE4YjYtZWI4My00M2YwLThhZTEtNTM0N2E4N2Q5NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlqjNYKUv28gE3TooMarswOqeOHkXjZ9ZZcS W9QwXqIg2afRCQW9NKxfJPc+wKnq8qAzyIHIpsNJNguigQvfdGUr5oFpf7gpSvP4 wAHVR4KFZYBfMU5ihpkRADX53p6JRK/sh6TjiqgfLEbWhyBgrLHrJfXT29Jqaoni aFuF43k3gFWGkznlZUTWKfADKQndKP2g5KUGhMCr7OhCgcxNE+CKKE/BNOX9c0nZ 75ndXFAjGvmk8Xl8caZ5wi2a1E/NCX164jgbtUnJNWcw8FEXrIsDTIMts+95ngOD GXREu9bOQzNepncfUOUcbCe8a2xzrBYf8N590hPNXlTOstg+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgj5L8CJddMkV5pvQzuNoGKWqwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOTZjM2Y1NTgtZDQxZi0z NzEzLThlYWQtYzU0ZWVhZjJmZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW7/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfla/Bf8UDA/tS3TehAvkE48edw9jChDIrfo+e8w3bk9u/0L/NAqG+Y g21Y84uJbRXavtQI4P5MJ4n1FZfKpLrdnPc156qqROlaIq8KiE4Y//0fl/H+OQq2 +OHd7b9qxclAzlOVCQm6P+TcRL5X6gxFp6Xy29p9E3XeNSYpBc2A1DSWrhJLKYdc gMzTYl1vslISkSiO0OoX3jVL0+whFY86wT7nwkJyD+ZSwX8bXX6aJ3PecYcLhAA9 TBxjZp/1Xdx6cPZbLjrMeR5qBvTKlCeTPlVh/hbB5iL76kmiqzgXm2I4Li3wzB5z 3XH0XzFZZNmXf04peZmJpN3ODDbuveI= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:00 2025 by rpki-client