$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e28df75e-d707-3bbb-95d5-6b8336de1526.roa File: e28df75e-d707-3bbb-95d5-6b8336de1526.roa (raw, json) Hash identifier: n+5ZX1FZiRDWRqtt4LA5undis1Rz67VCD1HdFTnvf/M= Subject key identifier: 47:C0:E6:DB:A4:C8:2C:9F:7D:B1:F3:D8:4D:E2:9D:01:14:C7:D8:E1 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485E35B1DF3238AC3C5C3D7BA0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e28df75e-d707-3bbb-95d5-6b8336de1526.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 29802 IP address blocks: 199.167.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:b1:df:32:38:ac:3c:5c:3d:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=af4463d4-369e-4498-821d-4c0dfacb5afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:e3:af:96:ea:32:43:f1:da:89:ee:4b:4a: 87:f8:ec:99:6c:f6:b4:ff:43:f7:15:7e:e7:a0:e4: 5d:be:d6:2b:28:6d:7d:30:bd:94:ea:a4:b7:46:22: 8d:ef:0f:83:a6:14:92:58:08:44:b2:a6:9f:f6:58: b4:cd:af:af:7c:62:f6:65:f3:af:3e:a0:6c:ce:b8: 2c:b2:5b:5c:81:5e:00:9c:86:5b:af:8b:0c:60:40: 63:09:98:a3:36:77:99:8f:8d:50:da:38:2b:66:0b: cf:5a:11:fa:94:b9:17:b0:e2:8b:fb:a5:c4:3e:76: 70:b9:32:db:9c:ab:69:c1:b8:d9:c6:10:d2:de:10: 59:e9:66:1e:1d:34:ca:b4:63:15:19:17:3e:69:04: 12:04:2a:11:fd:da:1e:1d:8e:2b:d0:38:6e:38:fb: 25:b2:6c:21:85:a9:6b:26:4b:ba:26:a0:77:f1:d2: 8a:ec:30:98:06:7c:8d:5c:85:89:0c:bc:2e:11:e7: f4:e5:02:72:c9:a7:73:12:11:01:bc:1f:34:b3:ae: de:7d:4c:99:06:a1:e6:64:72:4f:6b:be:a5:ce:24: 4e:ba:68:27:bb:45:70:fc:df:12:d5:d6:6b:d7:f6: d7:21:ab:36:42:5f:0c:32:44:9e:ad:ea:ad:50:1c: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:E6:DB:A4:C8:2C:9F:7D:B1:F3:D8:4D:E2:9D:01:14:C7:D8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e28df75e-d707-3bbb-95d5-6b8336de1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.167.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b6:7e:37:a9:30:bb:34:9b:22:5c:d6:57:f5:61:2e:59:f8: 58:1e:dc:ed:c0:d6:26:87:b6:dd:4a:f4:ef:53:2c:bd:a2:90: 96:7c:d9:35:f6:41:e2:ca:d3:87:ef:18:82:20:42:73:0c:16: d5:7f:ba:41:9d:60:65:1f:bf:0d:ba:91:3d:0c:b2:3d:0a:bb: 35:ca:d5:78:88:00:1c:5b:e4:d7:5c:e6:32:d3:13:86:f7:b7: 53:52:cc:1b:5c:66:18:95:86:9f:c8:c4:94:fa:f9:ee:32:0f: 84:7e:43:2d:9e:cb:21:fb:d7:5a:a1:c4:10:d0:f7:ee:ee:74: f8:f6:5e:b1:8a:2b:47:15:44:8c:d5:9c:bd:1f:40:30:70:dc: 5c:8b:f4:1d:22:fc:6e:09:4b:c0:c6:dc:3e:e4:b4:ef:b9:1d: 2c:11:20:d1:bf:49:2c:ef:d7:8a:97:38:d5:5b:ed:e7:df:05: e8:40:ce:35:9f:a4:33:9b:f4:f2:81:d6:ef:75:66:1c:b2:53: d8:67:19:a5:72:dd:80:20:5e:5d:9a:1c:24:01:45:e6:a8:f9: 2e:55:c2:b8:b8:f5:df:f6:b7:c0:11:9a:ad:5c:05:9f:95:10: 43:60:3d:87:a6:a6:ac:f4:80:8b:9a:88:b8:ea:36:33:52:42: 01:6c:62:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNbHfMjisPFw9e6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk YWY0NDYzZDQtMzY5ZS00NDk4LTgyMWQtNGMwZGZhY2I1YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RPjr5bqMkPx2onuS0qH+OyZbPa0/0P3FX7n oORdvtYrKG19ML2U6qS3RiKN7w+DphSSWAhEsqaf9li0za+vfGL2ZfOvPqBszrgs sltcgV4AnIZbr4sMYEBjCZijNneZj41Q2jgrZgvPWhH6lLkXsOKL+6XEPnZwuTLb nKtpwbjZxhDS3hBZ6WYeHTTKtGMVGRc+aQQSBCoR/doeHY4r0DhuOPslsmwhhalr Jku6JqB38dKK7DCYBnyNXIWJDLwuEef05QJyyadzEhEBvB80s67efUyZBqHmZHJP a76lziROumgnu0Vw/N8S1dZr1/bXIas2Ql8MMkSereqtUBypPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfA5tukyCyffbHz2E3inQEUx9jhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZTI4ZGY3NWUtZDcwNy0z YmJiLTk1ZDUtNmI4MzM2ZGUxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6eQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG2fjepMLs0myJc1lf1YS5Z+Fge3O3A1iaHtt1K9O9TLL2ikJZ82TX2 QeLK04fvGIIgQnMMFtV/ukGdYGUfvw26kT0Msj0KuzXK1XiIABxb5Ndc5jLTE4b3 t1NSzBtcZhiVhp/IxJT6+e4yD4R+Qy2eyyH711qhxBDQ9+7udPj2XrGKK0cVRIzV nL0fQDBw3FyL9B0i/G4JS8DG3D7ktO+5HSwRING/SSzv14qXONVb7effBehAzjWf pDOb9PKB1u91ZhyyU9hnGaVy3YAgXl2aHCQBReao+S5Vwri49d/2t8ARmq1cBZ+V EENgPYempqz0gIuaiLjqNjNSQgFsYgk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:45 2025 by rpki-client