$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa File: ea2f508b-c908-363a-83c1-c21d843b61c0.roa (raw, json) Hash identifier: lDT3uEGGnfoiDSVHuath491qnbLl/0UTI8/T7VQKGA4= Subject key identifier: E7:94:B7:E4:A3:EC:48:C1:3D:BB:21:DD:75:99:8E:AD:86:11:E5:ED Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858486695B9E4D4295200D25A6300 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 29802 IP address blocks: 23.92.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:b9:e4:d4:29:52:00:d2:5a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=44e8adfb-e183-4dc5-86ea-c4ef02065fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:2c:13:a2:67:58:f3:53:3c:44:87:ee:c1: 7b:d4:aa:f9:86:20:4a:88:79:0f:59:5f:82:93:d8: 9e:ce:69:a1:15:af:5d:01:c0:5c:ff:3e:e5:01:e5: bd:8f:a3:eb:7e:d3:ef:26:60:42:ab:9d:48:11:e0: 7b:3d:c6:69:09:16:55:59:4a:79:59:0e:72:06:ba: 9d:c8:de:27:32:e7:3c:a2:fa:66:66:bf:d2:0c:17: b3:9b:0d:8c:62:74:46:61:0d:50:13:16:81:06:f6: 1e:d8:32:14:55:f5:a6:58:93:1f:87:3c:f7:98:85: c9:67:13:36:53:09:2a:40:06:44:f8:12:03:68:7a: a5:1f:76:8c:1a:1a:35:a2:02:de:f1:93:8b:15:23: ec:72:7a:29:db:18:ff:bb:0b:59:ea:cc:72:14:52: 9b:bb:48:1c:0c:3a:dc:b6:05:7b:08:78:81:7d:bf: 32:31:45:37:8e:ff:29:c6:1a:46:ea:00:c6:0f:3f: 18:01:d8:89:e8:42:63:4a:40:3e:b5:c3:54:f8:8d: e7:60:83:03:64:d6:5f:d9:52:7a:4f:e4:ef:80:e5: 8b:f9:17:0c:8d:0f:8d:27:b5:bf:7b:25:76:53:34: 6b:d2:ee:82:d9:cf:c1:0b:ff:83:39:c1:cb:d7:3f: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:B7:E4:A3:EC:48:C1:3D:BB:21:DD:75:99:8E:AD:86:11:E5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.92.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6c:3b:01:2a:c9:d8:1b:59:2a:70:6c:03:a3:9e:ad:bc:de: 29:d7:2e:2b:6c:15:17:cb:4a:22:35:b8:bb:14:8e:07:29:33: ff:a2:cd:40:54:31:66:f2:81:e3:f8:b4:e8:f0:2e:b4:5a:41: ae:af:29:8e:e3:9c:32:75:5a:54:97:02:ea:59:3a:e2:93:e4: db:85:5e:a1:de:46:b4:f1:61:7c:69:ed:76:62:98:1a:6d:92: 3a:12:91:c3:5a:f0:c3:e7:08:5d:b3:5f:97:a7:c8:68:6e:8c: db:a7:41:b7:9b:0f:f0:91:95:47:39:f1:d3:f1:e3:ba:6d:77: d4:0a:e9:77:ad:16:14:22:16:29:90:3f:bf:8c:39:c7:90:43: 82:76:b4:cd:b9:be:9e:4a:ed:dc:be:3c:c4:0a:c7:4e:37:a2: 14:63:de:c5:79:82:ef:2a:4b:10:cf:d0:35:23:81:21:38:f1: 01:15:46:70:02:f8:7e:63:81:94:cb:d2:48:6a:68:6c:c7:f5: 7e:89:97:60:d8:94:b9:1b:c3:95:a1:ad:f9:30:6d:c0:89:e0: 48:19:b9:91:8a:fb:88:db:ac:9b:3e:b3:c7:26:4a:07:5d:3e: 8a:a3:02:7e:12:0a:ae:91:d2:40:d2:71:5e:b4:df:7a:e3:05: e8:8a:9f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbnk1ClSANJaYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NDRlOGFkZmItZTE4My00ZGM1LTg2ZWEtYzRlZjAyMDY1ZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIIsE6JnWPNTPESH7sF71Kr5hiBKiHkPWV+C k9iezmmhFa9dAcBc/z7lAeW9j6PrftPvJmBCq51IEeB7PcZpCRZVWUp5WQ5yBrqd yN4nMuc8ovpmZr/SDBezmw2MYnRGYQ1QExaBBvYe2DIUVfWmWJMfhzz3mIXJZxM2 UwkqQAZE+BIDaHqlH3aMGho1ogLe8ZOLFSPscnop2xj/uwtZ6sxyFFKbu0gcDDrc tgV7CHiBfb8yMUU3jv8pxhpG6gDGDz8YAdiJ6EJjSkA+tcNU+I3nYIMDZNZf2VJ6 T+TvgOWL+RcMjQ+NJ7W/eyV2UzRr0u6C2c/BC/+DOcHL1z+jaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeUt+Sj7EjBPbsh3XWZjq2GEeXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZWEyZjUwOGItYzkwOC0z NjNhLTgzYzEtYzIxZDg0M2I2MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF1xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdsOwEqydgbWSpwbAOjnq283inXLitsFRfLSiI1uLsUjgcpM/+izUBU MWbygeP4tOjwLrRaQa6vKY7jnDJ1WlSXAupZOuKT5NuFXqHeRrTxYXxp7XZimBpt kjoSkcNa8MPnCF2zX5enyGhujNunQbebD/CRlUc58dPx47ptd9QK6XetFhQiFimQ P7+MOceQQ4J2tM25vp5K7dy+PMQKx043ohRj3sV5gu8qSxDP0DUjgSE48QEVRnAC +H5jgZTL0khqaGzH9X6Jl2DYlLkbw5WhrfkwbcCJ4EgZuZGK+4jbrJs+s8cmSgdd PoqjAn4SCq6R0kDScV6033rjBeiKnxg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:31 2025 by rpki-client