$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa File: f5f4a6f1-995d-3517-a463-04c47c4433da.roa (raw, json) Hash identifier: R9BrOXXQMf9aMfJJs6h5LgR3TYNSr4xxC1qwzcvM6iw= Subject key identifier: 55:14:11:F7:1B:E0:66:F5:21:72:5F:68:39:1B:75:3D:2A:8D:22:BC Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285845BD48E64D984936F8FDC6EA80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa Signing time: Thu 02 May 2024 13:00:34 +0000 ROA not before: Thu 02 May 2024 13:00:34 +0000 ROA not after: Wed 31 Jul 2024 13:00:34 +0000 asID: 29802 IP address blocks: 23.111.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:48:e6:4d:98:49:36:f8:fd:c6:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: May 2 13:00:34 2024 GMT Not After : Jul 31 13:00:34 2024 GMT Subject: CN=02ea1d32-50cf-405a-91c6-516eae3f54ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:36:02:b6:2a:a6:4e:56:65:b8:e4:aa:d2:91: 87:eb:cb:40:e3:8d:d7:8d:28:6c:91:89:ce:a8:b3: a4:78:1d:3f:0c:79:8a:38:1f:5a:0c:b3:60:3d:a2: 46:bc:90:6e:90:e1:f0:82:73:60:3e:45:94:05:01: fa:a8:3a:5d:c7:9a:97:a3:fe:aa:83:55:47:b8:89: 8a:03:05:9f:ec:38:36:4b:fc:c4:13:5e:2c:46:d4: 55:da:3c:97:e9:b8:8b:cf:13:c5:30:85:ef:e6:4b: 36:9e:23:05:58:9a:a9:a9:04:de:fa:0b:c4:7a:b3: 42:81:ea:68:d3:17:98:f7:31:d6:b1:36:33:ae:47: 69:bc:59:f3:b3:c1:46:a1:94:54:78:0f:33:bb:28: 8d:b3:b2:2e:3d:80:14:c4:04:c4:95:30:5b:a5:c4: 5b:0e:1e:0c:4b:1b:04:a0:f1:fe:a6:69:35:eb:63: 44:90:0b:72:5c:33:58:2c:41:08:05:29:2d:53:c0: ee:1b:f7:8d:d5:2e:9a:88:b0:4a:e4:85:c3:81:76: f5:86:d6:d9:47:89:16:27:b0:83:9d:30:c1:83:1b: 33:fd:7e:d9:37:4c:4a:9c:a5:eb:ab:37:a2:1f:d1: d7:b3:23:a4:ee:0a:6f:45:1c:d3:02:32:c9:7c:3d: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:14:11:F7:1B:E0:66:F5:21:72:5F:68:39:1B:75:3D:2A:8D:22:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.111.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:09:5a:8f:72:63:e1:83:46:4d:20:ae:cf:65:14:49:47:6b: be:28:00:aa:5c:af:6d:cb:c0:53:5d:b2:27:9f:22:b1:1c:e6: 10:55:fc:a3:06:93:25:be:37:74:13:97:94:c7:84:15:49:53: 64:24:98:a2:03:32:54:45:53:85:ca:56:ba:98:81:ae:d4:81: b1:42:be:2b:9d:ed:76:c6:fa:ec:85:f0:08:47:95:85:a5:a1: 45:95:e3:f5:ee:48:bc:d4:5d:2c:78:3a:16:eb:96:d2:0a:44: ca:55:a2:e6:e5:d4:af:c5:23:b0:b0:19:2e:c0:71:b4:5b:df: 12:0f:0a:ea:8b:ee:71:8a:b9:50:27:f7:0a:50:4a:10:23:a7: 34:00:2b:c4:a5:e4:0a:ce:65:ea:2d:b4:4b:68:6b:40:ed:7a: a0:8b:f0:c0:97:33:06:97:ca:0b:24:9c:81:6f:4b:aa:9d:08: ca:c8:50:f1:e1:24:ac:9d:80:e9:03:a7:96:19:4f:72:bc:73: e5:0f:45:fd:38:da:9f:ca:aa:cc:a4:a5:0a:4c:e8:69:35:62: 1b:72:bd:e1:d3:92:30:41:87:fb:67:1a:06:5b:d9:3d:b7:1d: 32:c1:7f:c0:91:b5:70:48:65:ce:b1:3a:bf:f6:44:86:fc:0f: f8:7e:18:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9SOZNmEk2+P3G6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk MDJlYTFkMzItNTBjZi00MDVhLTkxYzYtNTE2ZWFlM2Y1NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DYCtiqmTlZluOSq0pGH68tA443XjShskYnO qLOkeB0/DHmKOB9aDLNgPaJGvJBukOHwgnNgPkWUBQH6qDpdx5qXo/6qg1VHuImK AwWf7Dg2S/zEE14sRtRV2jyX6biLzxPFMIXv5ks2niMFWJqpqQTe+gvEerNCgepo 0xeY9zHWsTYzrkdpvFnzs8FGoZRUeA8zuyiNs7IuPYAUxATElTBbpcRbDh4MSxsE oPH+pmk162NEkAtyXDNYLEEIBSktU8DuG/eN1S6aiLBK5IXDgXb1htbZR4kWJ7CD nTDBgxsz/X7ZN0xKnKXrqzeiH9HXsyOk7gpvRRzTAjLJfD2gtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUUEfcb4Gb1IXJfaDkbdT0qjSK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZjVmNGE2ZjEtOTk1ZC0z NTE3LWE0NjMtMDRjNDdjNDQzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGF2+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsJWo9yY+GDRk0grs9lFElHa74oAKpcr23LwFNdsiefIrEc5hBV/KMG kyW+N3QTl5THhBVJU2QkmKIDMlRFU4XKVrqYga7UgbFCviud7XbG+uyF8AhHlYWl oUWV4/XuSLzUXSx4OhbrltIKRMpVoubl1K/FI7CwGS7AcbRb3xIPCuqL7nGKuVAn 9wpQShAjpzQAK8Sl5ArOZeottEtoa0DteqCL8MCXMwaXygsknIFvS6qdCMrIUPHh JKydgOkDp5YZT3K8c+UPRf042p/KqsykpQpM6Gk1YhtyveHTkjBBh/tnGgZb2T23 HTLBf8CRtXBIZc6xOr/2RIb8D/h+GHQ= -----END CERTIFICATE-----Generated at Fri May 3 03:24:04 2024 by rpki-client on console-ams.rpki-client.org