$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8d4f609-5f27-3177-b569-af0fc38f8c93.roa File: b8d4f609-5f27-3177-b569-af0fc38f8c93.roa (raw, json) Hash identifier: KZ9A6xEhLUiaIgj3hQYB+lMY6BBdjy9nZpwLcL7q+Sw= Subject key identifier: E5:B6:2B:9E:99:74:3C:10:D7:26:A7:4D:85:57:2D:70:77:DE:61:70 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328576D51CC73C042CFC16E646AAD32 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8d4f609-5f27-3177-b569-af0fc38f8c93.roa Signing time: Wed 13 Nov 2019 10:59:03 +0000 ROA not before: Tue 10 Apr 2018 04:00:00 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 209.139.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:64:6a:ad:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 10 04:00:00 2018 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=23fc7421-6747-4e94-9c03-4f41001db9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c6:d0:d9:21:de:ab:da:32:34:86:49:22:38: a9:05:26:4e:91:3e:c9:a8:0b:91:b0:7f:8c:e8:b5: 28:1d:20:69:95:dc:50:2e:46:ec:5d:a9:e0:45:d7: 9f:7f:cb:49:cd:31:3a:05:e5:6b:eb:ee:16:6f:0d: b3:ea:d1:c9:48:20:f9:7f:22:c1:6e:e0:9f:e6:f9: 2b:05:8c:ca:6a:dc:69:ff:5d:c8:25:35:fa:89:66: fd:08:d5:1f:95:a0:10:fb:24:0d:88:d3:2d:a7:3b: 5a:90:f8:05:08:a3:f8:e7:8e:c7:e9:3d:d3:82:0a: bf:75:65:00:dd:d1:10:8d:cb:ec:9b:a2:05:e5:b5: ce:cc:1a:9b:34:58:3b:42:9a:a3:73:fc:1a:5b:f0: b4:a5:34:36:f4:bf:a6:c7:25:62:6d:31:2a:84:fd: 78:64:d0:a6:c9:1d:f7:c1:c2:45:c1:d0:33:5e:09: e2:01:01:5a:66:76:64:0d:c7:dc:4c:cb:11:95:ef: 9c:1f:cf:c0:04:d2:0e:f7:1e:14:ec:bd:23:48:d5: a2:3f:88:18:29:9d:98:c3:45:e6:b2:63:f1:3b:f2: 89:5e:a7:cb:17:38:a2:b0:24:b5:9e:d2:a9:5f:4f: d3:28:33:f9:ad:d1:cf:e2:d5:d5:18:df:24:52:4b: a4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B6:2B:9E:99:74:3C:10:D7:26:A7:4D:85:57:2D:70:77:DE:61:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8d4f609-5f27-3177-b569-af0fc38f8c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.139.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b4:2f:02:b0:73:8b:f7:d7:de:9f:16:e9:c0:d1:3b:18:a5: ca:2b:6c:f2:16:bb:7a:fd:90:e6:fe:2f:04:fd:76:ff:ce:c3: 5e:0c:a8:a0:ba:54:52:a1:5c:5d:98:45:e3:02:ea:b6:9a:26: fd:5a:78:d4:a2:2a:ed:4a:69:8e:fd:ac:27:b1:d0:63:08:b9: d5:42:24:9d:4d:f4:cf:a6:c7:15:6c:3f:b6:45:16:e3:90:3d: b6:df:4d:05:71:db:ab:53:3e:f4:da:59:23:07:66:9d:d3:76: 86:d1:47:f4:a5:c7:aa:eb:76:2a:2a:c2:c3:22:5b:ba:83:d1: 53:b0:5c:90:7c:0d:09:e2:a4:44:d4:d4:5e:3c:b5:fc:d6:48: 36:6d:7b:c6:2a:a3:39:88:48:e5:0e:f6:5e:a3:4c:2e:c3:6c: 6a:ea:cb:bb:28:57:18:c7:ce:33:b1:62:d2:c7:04:57:0f:af: 98:3a:17:dd:3d:f0:59:1e:f9:bb:a3:32:92:af:75:23:c1:bd: 03:68:3f:46:60:cb:00:14:cd:c4:d7:02:75:d7:a7:be:16:ff: ff:98:15:45:3f:77:f8:f3:4d:a5:d7:6b:89:86:15:a4:16:bc: df:20:5d:60:a3:44:67:d6:3c:ec:96:df:cb:43:1c:d7:bd:22: 44:a9:98:d8 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbmRqrTIwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3 ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDIz ZmM3NDIxLTY3NDctNGU5NC05YzAzLTRmNDEwMDFkYjljZjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOvG0Nkh3qvaMjSGSSI4qQUmTpE+yagLkbB/jOi1 KB0gaZXcUC5G7F2p4EXXn3/LSc0xOgXla+vuFm8Ns+rRyUgg+X8iwW7gn+b5KwWM ymrcaf9dyCU1+olm/QjVH5WgEPskDYjTLac7WpD4BQij+OeOx+k904IKv3VlAN3R EI3L7JuiBeW1zswamzRYO0Kao3P8GlvwtKU0NvS/psclYm0xKoT9eGTQpskd98HC RcHQM14J4gEBWmZ2ZA3H3EzLEZXvnB/PwATSDvceFOy9I0jVoj+IGCmdmMNF5rJj 8TvyiV6nyxc4orAktZ7SqV9P0ygz+a3Rz+LV1RjfJFJLpKMCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBTltiuemXQ8ENcmp02FVy1wd95hcDCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2I4ZDRmNjA5LTVmMjctMzE3 Ny1iNTY5LWFmMGZjMzhmOGM5My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5 N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3 MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9GLADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAQ7QvArBzi/fX3p8W6cDROxilyits8ha7ev2Q5v4vBP12/87DXgyooLpUUqFc XZhF4wLqtpom/Vp41KIq7Uppjv2sJ7HQYwi51UIknU30z6bHFWw/tkUW45A9tt9N BXHbq1M+9NpZIwdmndN2htFH9KXHqut2KirCwyJbuoPRU7BckHwNCeKkRNTUXjy1 /NZINm17xiqjOYhI5Q72XqNMLsNsaurLuyhXGMfOM7Fi0scEVw+vmDoX3T3wWR75 u6Mykq91I8G9A2g/RmDLABTNxNcCddenvhb//5gVRT93+PNNpddriYYVpBa83yBd YKNEZ9Y87Jbfy0Mc170iRKmY2A== -----END CERTIFICATE-----Generated at Sat Apr 20 02:47:22 2024 by rpki-client on console-ams.rpki-client.org