$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa File: 9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa (raw, json) Hash identifier: 9871DpUxG9Sg1XKmW3EQ+nXtcHu/0Qk1nL0BAWbf2tw= Subject key identifier: 2D:95:55:29:E4:00:A9:07:89:0F:A1:34:A8:44:EC:C4:99:E7:50:53 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285847CBA47E6EEE5C9D24E5E19980 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa Signing time: Thu 07 Nov 2024 02:00:28 +0000 ROA not before: Thu 07 Nov 2024 02:00:28 +0000 ROA not after: Wed 05 Feb 2025 02:00:28 +0000 asID: 401299 IP address blocks: 66.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cb:a4:7e:6e:ee:5c:9d:24:e5:e1:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Nov 7 02:00:28 2024 GMT Not After : Feb 5 02:00:28 2025 GMT Subject: CN=c7a879f1-f522-4aee-8280-41172508c906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:26:eb:5a:63:74:94:f7:74:e7:92:a3:13:36: c1:9b:4e:f5:6b:2c:15:c6:80:47:d1:7c:fe:90:6c: 63:b5:bc:a9:0f:16:6a:4b:0f:7f:6c:32:30:6c:09: 37:48:23:04:3b:a7:e7:83:d0:d0:ad:f3:62:6d:66: 0e:ec:10:b3:29:f8:4c:71:f8:24:b4:8c:ac:f8:b4: d4:af:41:e9:42:97:54:1f:16:d9:97:ee:18:e0:f7: 7a:d5:24:44:f8:71:59:87:08:ba:60:c9:a9:55:ba: d0:ad:a4:45:d8:ae:01:31:20:36:3f:7e:97:26:b6: fc:f7:e2:4a:6c:45:29:46:b1:7b:8b:63:c6:b8:ff: 77:82:83:f2:ad:b2:0f:fc:2b:7c:f6:de:a1:c6:d8: ac:95:55:dd:9e:67:1c:ed:c6:1a:d0:31:26:a1:f2: 42:b7:7c:35:1c:e7:a1:7e:ba:be:7a:f3:bf:59:cb: 47:28:83:b1:d8:20:68:5e:38:56:ed:3d:0c:99:f1: 3c:16:7e:09:8a:53:4f:f4:48:85:c5:9c:ae:6e:61: 94:f8:8d:01:ef:ad:6d:86:c8:d1:95:d4:12:23:30: fc:98:91:47:32:ea:ea:a1:4c:57:1a:e8:45:a8:cf: 76:c6:32:9a:9f:dc:de:34:8e:90:36:88:cc:10:f8: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:95:55:29:E4:00:A9:07:89:0F:A1:34:A8:44:EC:C4:99:E7:50:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:91:ae:3c:75:b8:07:5f:74:b9:fb:06:e3:d1:1b:28:a5:d8: 7e:78:31:91:58:49:55:ad:41:3d:20:00:e9:1a:36:a0:a6:d9: 67:21:7c:d0:dd:a0:de:10:3c:fd:8f:91:c4:58:75:07:61:92: 6a:e5:a6:27:67:1b:b2:7a:ef:c0:b9:01:86:22:68:4a:8b:f1: 47:2c:aa:4c:12:b6:5d:74:cd:3e:60:e6:a6:51:fc:e9:6a:50: ff:08:a5:09:17:61:75:f9:33:95:da:19:b7:f6:16:95:b6:cd: 80:09:64:11:04:3c:5e:33:9e:9a:f4:74:1b:08:14:a1:f1:15: 57:6d:ea:52:36:90:3b:68:b0:68:f1:03:10:fc:db:d8:34:d9: e5:eb:f4:68:4b:ed:7c:50:30:43:16:54:f1:63:c6:28:f9:51: be:23:38:88:8d:62:ab:ba:67:a3:6e:57:bc:77:70:0d:aa:47: e7:a0:a5:47:c1:d5:f3:d9:96:5a:59:5b:57:35:44:57:8d:ad: 2c:7c:23:3b:11:05:02:68:b4:26:d0:1d:7c:e0:a7:cb:53:71: a3:fc:ec:db:25:ff:9e:cc:42:7a:6f:af:8f:fa:28:7d:64:9c: 80:7e:e6:0e:3f:a2:ea:56:5e:27:6f:80:d0:02:2a:20:e8:51: ac:36:43:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfLpH5u7lydJOXhmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTEwNzAyMDAyOFoXDTI1MDIwNTAyMDAyOFowLzEtMCsGA1UEAxMk YzdhODc5ZjEtZjUyMi00YWVlLTgyODAtNDExNzI1MDhjOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiibrWmN0lPd055KjEzbBm071aywVxoBH0Xz+ kGxjtbypDxZqSw9/bDIwbAk3SCMEO6fng9DQrfNibWYO7BCzKfhMcfgktIys+LTU r0HpQpdUHxbZl+4Y4Pd61SRE+HFZhwi6YMmpVbrQraRF2K4BMSA2P36XJrb89+JK bEUpRrF7i2PGuP93goPyrbIP/Ct89t6hxtislVXdnmcc7cYa0DEmofJCt3w1HOeh frq+evO/WctHKIOx2CBoXjhW7T0MmfE8Fn4JilNP9EiFxZyubmGU+I0B761thsjR ldQSIzD8mJFHMurqoUxXGuhFqM92xjKan9zeNI6QNojMEPiOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2VVSnkAKkHiQ+hNKhE7MSZ51BTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOWU3ZTA1N2EtZDA3Zi0z NTFkLWIyODEtYTJjNmNmNzEzYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWRrjx1uAdfdLn7BuPRGyil2H54MZFYSVWtQT0gAOkaNqCm2WchfNDd oN4QPP2PkcRYdQdhkmrlpidnG7J678C5AYYiaEqL8UcsqkwStl10zT5g5qZR/Olq UP8IpQkXYXX5M5XaGbf2FpW2zYAJZBEEPF4znpr0dBsIFKHxFVdt6lI2kDtosGjx AxD829g02eXr9GhL7XxQMEMWVPFjxij5Ub4jOIiNYqu6Z6NuV7x3cA2qR+egpUfB 1fPZllpZW1c1RFeNrSx8IzsRBQJotCbQHXzgp8tTcaP87Nsl/57MQnpvr4/6KH1k nIB+5g4/oupWXidvgNACKiDoUaw2Q1A= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:50 2024 by rpki-client on console-fra.rpki-client.org