$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa File: cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa (raw, json) Hash identifier: CkgXmofmg0rg2ZMGh/7Jo0k8oywh7pEYpXU5jjjyx9A= Subject key identifier: 3A:72:DD:B6:63:F5:29:81:81:4A:16:EC:B5:42:54:61:FA:75:24:9B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858477EC10F593CB82924DE957100 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 54540 IP address blocks: 144.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:0f:59:3c:b8:29:24:de:95:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=2164945f-866e-463a-b1ee-80644aaa49f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:75:36:87:b8:ea:fc:74:8a:aa:47:95:3e: 11:6f:43:3c:63:d2:c2:c2:07:65:88:dd:92:d8:06: 95:91:98:67:c0:a0:aa:0a:23:16:ad:6b:a5:24:1e: aa:2a:32:1d:5b:2d:25:a6:fd:9c:57:84:e4:b6:68: 65:9c:36:a8:fc:dc:c9:27:6c:77:43:64:23:22:ac: d2:e6:64:a6:05:f0:0e:23:71:15:6c:cf:df:19:2c: 90:21:c3:ae:44:c3:d5:4d:e1:18:15:e5:0d:0d:2b: c2:ac:52:64:67:8f:69:0f:1f:ae:97:37:04:35:b2: 87:64:06:f9:17:12:e3:0d:55:c9:98:ff:bb:21:a4: cf:49:7e:d9:cb:59:d5:7b:47:c3:9a:dc:70:a9:96: df:48:f5:43:77:10:b1:c2:8d:09:26:e7:1e:78:b1: 89:0d:ec:29:98:5a:98:b9:2f:4e:fa:83:ee:73:1e: cf:2d:88:d5:36:2c:53:d0:5d:f2:73:e3:03:a0:a4: ad:d9:5c:a7:00:67:20:e7:c5:49:6b:70:54:55:a2: 1b:9b:55:bc:70:c5:67:a5:7e:4a:cb:26:b3:cb:89: 54:35:38:13:e7:2c:ad:e7:b7:18:90:61:6d:56:81: 60:e7:89:78:2f:fc:6c:00:08:b2:a8:9d:35:83:2a: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:72:DD:B6:63:F5:29:81:81:4A:16:EC:B5:42:54:61:FA:75:24:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1b:18:74:46:80:e8:5d:cb:69:d3:48:a9:57:71:3e:e9:84: dd:56:2a:cb:d2:4a:4e:08:8d:ce:ab:9c:a4:f5:d5:32:b7:26: 9a:5e:77:23:0a:8b:86:cc:66:33:8f:cf:a3:b7:71:ea:92:79: 84:71:1a:cd:8c:53:a6:d4:8f:49:29:eb:88:d4:27:78:4c:90: 85:8d:83:31:53:43:6c:30:d6:86:7c:03:df:30:9e:87:ca:fa: 27:31:08:f6:dc:70:62:ff:a6:42:d2:a5:83:c6:83:63:10:3a: ca:a7:ed:dd:11:45:67:bb:f6:fd:75:a7:a5:8c:ca:9e:1a:f8: 32:a9:ed:b7:3b:08:9c:90:dc:a0:4a:57:f8:57:8c:51:eb:92: 4a:64:c2:56:78:a0:52:c7:9f:85:1f:e4:56:7c:57:a8:2b:4b: ad:15:19:83:a6:e5:a6:ba:a2:70:37:3d:41:1d:6b:a2:c5:5f: d6:8c:5a:f7:08:af:01:d5:10:d8:c6:d0:3a:9a:77:65:b1:ff: f0:38:f8:13:a1:e2:eb:6b:f2:c2:8a:f1:dc:2d:1a:ed:e7:e5: 83:96:99:f7:db:a8:11:48:fe:ca:e0:a2:8e:4c:7e:15:41:58: 7a:7c:07:54:9f:26:55:93:a8:02:5a:43:3c:e5:1d:77:7b:ee: c0:df:d9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wQ9ZPLgpJN6VcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk MjE2NDk0NWYtODY2ZS00NjNhLWIxZWUtODA2NDRhYWE0OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDl1Noe46vx0iqpHlT4Rb0M8Y9LCwgdliN2S 2AaVkZhnwKCqCiMWrWulJB6qKjIdWy0lpv2cV4TktmhlnDao/NzJJ2x3Q2QjIqzS 5mSmBfAOI3EVbM/fGSyQIcOuRMPVTeEYFeUNDSvCrFJkZ49pDx+ulzcENbKHZAb5 FxLjDVXJmP+7IaTPSX7Zy1nVe0fDmtxwqZbfSPVDdxCxwo0JJuceeLGJDewpmFqY uS9O+oPucx7PLYjVNixT0F3yc+MDoKSt2VynAGcg58VJa3BUVaIbm1W8cMVnpX5K yyazy4lUNTgT5yyt57cYkGFtVoFg54l4L/xsAAiyqJ01gypwnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpy3bZj9SmBgUoW7LVCVGH6dSSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvY2RhMGZhNWUtNmQ1ZC0z NzY4LWEzZGEtMjhjM2U3Yjk0MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkKgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAbGHRGgOhdy2nTSKlXcT7phN1WKsvSSk4Ijc6rnKT11TK3JppedyMK i4bMZjOPz6O3ceqSeYRxGs2MU6bUj0kp64jUJ3hMkIWNgzFTQ2ww1oZ8A98wnofK +icxCPbccGL/pkLSpYPGg2MQOsqn7d0RRWe79v11p6WMyp4a+DKp7bc7CJyQ3KBK V/hXjFHrkkpkwlZ4oFLHn4Uf5FZ8V6grS60VGYOm5aa6onA3PUEda6LFX9aMWvcI rwHVENjG0Dqad2Wx//A4+BOh4utr8sKK8dwtGu3n5YOWmffbqBFI/srgoo5MfhVB WHp8B1SfJlWTqAJaQzzlHXd77sDf2Z0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:50 2024 by rpki-client on console-fra.rpki-client.org