$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa File: d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa (raw, json) Hash identifier: ypHp6dWnUv93zqjtFHvMwAbSngiaoX/ydn/v+0Sx3r8= Subject key identifier: 06:AF:51:C1:C5:11:1E:BB:DE:D9:63:3A:D4:E5:F7:12:8F:A5:CA:37 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858477BF65F01857EED7B767DA300 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 29802 IP address blocks: 66.96.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:5f:01:85:7e:ed:7b:76:7d:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=a836b861-a392-48e7-9eb0-c6d299d808af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:ea:9d:02:94:0d:f6:7c:03:4e:f5:49:36: 6d:5b:49:e5:4a:56:05:8a:2d:64:20:84:61:3d:16: 6d:eb:64:7c:cc:a4:49:b1:2c:ef:6b:2b:00:b3:51: 4d:a8:29:d1:0a:42:ef:52:97:46:cd:82:a2:48:12: 36:cf:4b:4f:94:e1:85:c4:f9:aa:6e:d1:3e:86:03: 6a:c2:2d:bb:c3:d5:58:52:7e:1c:ee:61:f2:d1:f9: 97:bb:2f:93:e5:41:44:31:d7:a2:2f:ca:90:b6:0e: 11:68:ad:cd:24:d4:12:a3:34:86:de:f8:43:95:dd: ca:73:3d:8d:07:b2:54:a7:ab:37:ca:f7:da:10:94: 74:af:f7:cf:75:b8:22:8e:51:af:33:d4:03:ef:31: 6a:c3:60:44:7f:d7:f8:b0:5a:07:e1:10:68:dd:5b: 01:73:91:df:86:0d:cf:0c:31:89:06:e8:b9:c8:3c: 75:7c:2f:d1:2d:1f:39:e4:09:bb:e5:16:a0:7a:fc: bc:41:45:71:e6:cb:dd:93:8c:28:d8:99:f6:da:8b: a9:eb:88:2d:03:3d:7e:24:0b:7e:eb:9b:a8:3a:5e: 34:9f:ac:11:c9:6c:52:c2:ee:a6:31:48:f3:bb:ef: 90:6c:f9:9b:bf:63:6f:bf:d9:1d:1e:c6:37:8e:67: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AF:51:C1:C5:11:1E:BB:DE:D9:63:3A:D4:E5:F7:12:8F:A5:CA:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d11e0a6d-9262-3c31-8166-eba7e2cb163b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:77:b2:23:54:15:2d:16:25:04:c0:1d:12:08:8c:e7:a0:66: df:7a:64:d9:9d:35:98:8d:a4:37:e7:8d:85:60:2b:d6:eb:dc: 15:50:d2:1b:ca:a3:da:b1:15:6d:e7:40:08:47:10:82:6b:ab: c2:0d:e7:dc:c1:df:e4:28:23:30:bd:12:ae:08:20:38:02:31: 49:71:ea:50:9f:ee:b5:19:5a:e3:de:3f:b9:aa:9c:57:50:b0: 38:5a:30:32:9c:32:e7:12:42:37:24:40:3c:5f:2a:92:8a:eb: cd:06:34:cf:a1:86:46:f4:19:b8:c3:c7:8a:84:ab:7c:f9:ec: 7f:86:49:00:2d:22:23:74:f8:50:1a:d4:a6:a7:c4:55:e5:19: df:66:70:cd:2b:15:34:cf:92:d1:be:e7:35:41:f0:31:05:25: 4b:c8:e2:79:5d:d2:28:7c:1f:f8:ee:28:91:29:7a:b7:eb:be: f3:cb:ce:15:10:2d:16:8f:b5:cf:1b:46:eb:79:5a:32:c9:4d: 67:fb:75:f9:9d:87:2f:93:25:a6:5d:eb:90:1b:8e:c2:52:a1: 50:f8:8d:73:b2:48:68:0b:12:ad:a9:8b:89:47:0b:b7:eb:03: fd:a4:d8:68:b6:08:20:91:33:de:88:c2:9c:5c:12:bb:6a:e6: fd:5a:fc:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79l8BhX7te3Z9owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk YTgzNmI4NjEtYTM5Mi00OGU3LTllYjAtYzZkMjk5ZDgwOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyHqnQKUDfZ8A071STZtW0nlSlYFii1kIIRh PRZt62R8zKRJsSzvaysAs1FNqCnRCkLvUpdGzYKiSBI2z0tPlOGFxPmqbtE+hgNq wi27w9VYUn4c7mHy0fmXuy+T5UFEMdeiL8qQtg4RaK3NJNQSozSG3vhDld3Kcz2N B7JUp6s3yvfaEJR0r/fPdbgijlGvM9QD7zFqw2BEf9f4sFoH4RBo3VsBc5Hfhg3P DDGJBui5yDx1fC/RLR855Am75Ragevy8QUVx5svdk4wo2Jn22oup64gtAz1+JAt+ 65uoOl40n6wRyWxSwu6mMUjzu++QbPmbv2Nvv9kdHsY3jmeh2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAavUcHFER673tljOtTl9xKPpco3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDExZTBhNmQtOTI2Mi0z YzMxLTgxNjYtZWJhN2UyY2IxNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp3siNUFS0WJQTAHRIIjOegZt96ZNmdNZiNpDfnjYVgK9br3BVQ0hvK o9qxFW3nQAhHEIJrq8IN59zB3+QoIzC9Eq4IIDgCMUlx6lCf7rUZWuPeP7mqnFdQ sDhaMDKcMucSQjckQDxfKpKK680GNM+hhkb0GbjDx4qEq3z57H+GSQAtIiN0+FAa 1KanxFXlGd9mcM0rFTTPktG+5zVB8DEFJUvI4nld0ih8H/juKJEperfrvvPLzhUQ LRaPtc8bRut5WjLJTWf7dfmdhy+TJaZd65AbjsJSoVD4jXOySGgLEq2pi4lHC7fr A/2k2Gi2CCCRM96IwpxcErtq5v1a/Bo= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org