$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d7e99b17-bd1e-3606-9805-62837feec2a0.roa File: d7e99b17-bd1e-3606-9805-62837feec2a0.roa (raw, json) Hash identifier: pYUxiQT5XmklfGJt5Ypk5QARHdKsylF3yt04AH0/s7E= Subject key identifier: 22:AF:2B:1E:FC:AC:1F:31:6D:ED:BE:01:73:09:CE:28:13:E2:D4:01 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858476D934E50DE62B71A258F9340 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d7e99b17-bd1e-3606-9805-62837feec2a0.roa Signing time: Fri 04 Oct 2024 09:19:52 +0000 ROA not before: Fri 04 Oct 2024 09:19:52 +0000 ROA not after: Thu 02 Jan 2025 10:19:52 +0000 asID: 174 IP address blocks: 50.7.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6d:93:4e:50:de:62:b7:1a:25:8f:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 4 09:19:52 2024 GMT Not After : Jan 2 10:19:52 2025 GMT Subject: CN=d2865a29-bbe7-4678-b26e-c8a461124268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:42:f0:20:4f:69:75:c4:40:83:f9:f0:e4: d9:31:bd:b3:35:be:0f:1e:13:a0:ab:5e:11:fb:8c: a0:4a:49:e8:3e:43:7b:79:1b:e1:f0:01:b4:cf:c7: 53:77:28:10:c3:65:73:45:d2:6e:dc:d1:0c:6c:5e: fd:20:09:63:b7:f9:99:ac:fd:16:b6:52:77:3b:0c: b5:8c:65:f8:3c:0d:9d:20:f3:4b:94:b7:bf:00:04: e8:94:76:4c:5c:e2:f1:b1:98:a7:da:ea:fa:b0:6b: e6:b9:b9:52:b2:64:47:95:50:d0:23:e6:a4:0a:fc: 0a:70:34:18:b3:49:c0:f4:af:03:fc:8b:c8:cf:e3: b1:4c:3a:58:1e:c5:86:30:9e:3c:cb:6d:37:b1:f2: 36:e4:0a:4d:79:9d:ea:c5:1b:4e:e5:08:cb:55:77: a2:f2:02:a5:3d:ed:47:e0:ac:16:11:92:bd:16:18: 6d:27:0e:32:dd:5f:0a:fa:24:41:6c:72:32:6f:aa: 26:a4:86:ab:e6:ea:d4:50:05:fd:d4:92:58:fc:45: b0:73:f9:8e:55:09:cd:9b:7a:62:29:93:f6:e8:f5: fb:66:2e:3d:f4:8b:8b:bf:9c:8c:f5:8f:fb:55:42: cf:d0:46:e6:d2:4f:85:5c:7f:e6:66:d0:7e:48:bb: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AF:2B:1E:FC:AC:1F:31:6D:ED:BE:01:73:09:CE:28:13:E2:D4:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d7e99b17-bd1e-3606-9805-62837feec2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:1e:b3:03:11:ef:3e:ce:64:d8:37:59:30:4b:85:55:4f:f6: f2:9c:96:de:9e:b9:ca:2a:3b:c3:73:61:d6:17:1e:c4:f4:8b: 51:09:49:e2:3d:91:d4:21:28:21:95:e1:15:7b:1a:58:8e:ba: 10:ce:fb:ad:2b:58:41:2e:d1:72:b0:2e:69:56:bb:41:1a:69: 44:79:22:eb:6b:ef:f4:08:d3:fe:e8:81:50:51:b4:27:ab:32: 17:13:db:b4:41:41:d5:25:37:d4:0f:b6:4d:f3:3e:aa:c4:75: 13:45:d4:36:53:ff:da:f6:5d:8b:80:75:4e:92:52:b7:c6:b1: 9d:75:4d:37:d3:2a:9f:16:df:58:5d:be:60:8e:18:4d:7a:23: 2f:1b:18:87:12:53:8d:0c:76:30:f5:bd:58:92:73:5b:96:48: 0a:74:5f:af:88:92:18:ac:20:27:60:0e:3b:95:cf:b3:40:60: 11:d5:5c:69:8e:aa:a2:ae:1f:d7:42:5d:ad:b8:14:80:eb:33: 75:26:d3:93:ad:e3:c3:fb:5c:19:0f:42:02:71:e3:89:60:63: ea:a8:11:64:83:eb:4c:93:0f:ff:96:1a:f0:d4:19:df:71:14: 23:23:9f:63:79:fe:49:1b:db:a7:69:1b:35:bd:06:b1:08:4f: 99:bd:62:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdtk05Q3mK3GiWPk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTAwNDA5MTk1MloXDTI1MDEwMjEwMTk1MlowLzEtMCsGA1UEAxMk ZDI4NjVhMjktYmJlNy00Njc4LWIyNmUtYzhhNDYxMTI0MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/hC8CBPaXXEQIP58OTZMb2zNb4PHhOgq14R +4ygSknoPkN7eRvh8AG0z8dTdygQw2VzRdJu3NEMbF79IAljt/mZrP0WtlJ3Owy1 jGX4PA2dIPNLlLe/AATolHZMXOLxsZin2ur6sGvmublSsmRHlVDQI+akCvwKcDQY s0nA9K8D/IvIz+OxTDpYHsWGMJ48y203sfI25ApNeZ3qxRtO5QjLVXei8gKlPe1H 4KwWEZK9FhhtJw4y3V8K+iRBbHIyb6ompIar5urUUAX91JJY/EWwc/mOVQnNm3pi KZP26PX7Zi499IuLv5yM9Y/7VULP0Ebm0k+FXH/mZtB+SLs91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKvKx78rB8xbe2+AXMJzigT4tQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDdlOTliMTctYmQxZS0z NjA2LTk4MDUtNjI4MzdmZWVjMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYeswMR7z7OZNg3WTBLhVVP9vKclt6eucoqO8NzYdYXHsT0i1EJSeI9 kdQhKCGV4RV7GliOuhDO+60rWEEu0XKwLmlWu0EaaUR5Iutr7/QI0/7ogVBRtCer MhcT27RBQdUlN9QPtk3zPqrEdRNF1DZT/9r2XYuAdU6SUrfGsZ11TTfTKp8W31hd vmCOGE16Iy8bGIcSU40MdjD1vViSc1uWSAp0X6+IkhisICdgDjuVz7NAYBHVXGmO qqKuH9dCXa24FIDrM3Um05Ot48P7XBkPQgJx44lgY+qoEWSD60yTD/+WGvDUGd9x FCMjn2N5/kkb26dpGzW9BrEIT5m9Yoc= -----END CERTIFICATE-----Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org