$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa File: cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa (raw, json) Hash identifier: M39U+hHU/kyAex9r9VzmHG9PLmDHih1qJRy6Iv7Bccg= Subject key identifier: 0E:36:59:94:77:84:35:B3:B4:40:B8:60:57:CD:5F:96:F1:C0:50:E6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328576D51CC73C042CFC16677788FFD Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa Signing time: Mon 15 Oct 2018 11:24:41 +0000 ROA not before: Mon 15 Oct 2018 04:00:00 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 129.250.113.32/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 May 2023 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:78:8f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 15 04:00:00 2018 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=ad17a1b1-1a76-4515-b9c2-07246d680336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:20:d6:b6:08:36:27:be:07:93:15:0f:30: 57:a4:9a:d8:0d:5e:c8:6e:ae:87:bb:4b:43:b2:df: cf:3d:94:10:20:18:2f:d2:65:40:0c:5a:f3:f0:1a: e0:53:8b:56:d1:05:b0:19:a1:fb:e7:11:e8:0e:91: 04:b4:ec:77:44:61:29:e4:78:24:ec:b7:d6:83:6d: b1:2f:7d:fe:fd:e9:34:09:bb:77:0f:13:59:35:fe: f5:e7:59:c1:4b:2c:ad:84:d8:3a:9b:e0:66:68:e8: ca:f9:56:4e:39:d5:7b:61:75:d6:45:4a:be:9c:46: ea:ca:2a:78:d9:c3:64:05:0d:94:83:2f:6b:9a:3b: 59:3f:84:f3:a0:2e:77:e8:2a:2a:98:17:c7:e5:27: c7:88:aa:04:9e:6b:9a:b1:da:a4:ef:ec:a8:cd:c3: a6:bb:a5:cf:33:38:46:31:25:38:8b:ea:bb:d7:d2: 0c:06:49:28:5c:eb:f9:fb:67:63:f2:1d:03:cf:94: e2:5b:ee:a6:c0:f8:ad:29:26:dd:8e:82:ce:0a:fb: 6d:3e:89:ac:d7:2b:7d:13:da:1c:5c:5c:a8:34:dd: 20:6f:b1:ea:1e:8b:7e:29:ea:aa:2e:b8:1d:5b:7b: bf:64:5d:6a:b1:5f:33:ae:a1:1c:43:00:ad:31:9b: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:59:94:77:84:35:B3:B4:40:B8:60:57:CD:5F:96:F1:C0:50:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.113.32/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2c:98:56:8f:3b:bb:5c:13:9a:f7:17:0e:8a:9b:ba:56:2f: 77:98:c6:04:4a:66:ae:80:e5:1a:ce:3f:12:4c:d7:53:cb:3f: 31:07:40:58:3e:11:35:5c:f6:14:99:c1:a0:19:e7:90:a7:e4: 03:43:a6:4b:3e:64:3e:ce:4a:01:81:d0:f0:02:9a:2f:ba:47: a1:58:26:70:b3:9f:a8:a5:fb:d3:ec:5b:0a:e4:e3:48:4e:d4: 82:c9:19:af:0a:56:e2:f0:66:08:48:bc:33:bc:56:68:f7:ef: 50:40:0d:0e:61:ef:28:bc:b6:2b:63:cb:4e:f4:df:5f:a0:ea: 08:24:44:97:3d:a7:1e:dc:75:cd:f6:6c:b7:3e:c2:e0:63:a7: c8:d3:ef:f1:f5:28:4d:f7:a8:ac:5e:08:38:8d:b9:9b:ed:71: 71:a8:96:70:22:53:b5:4e:51:66:d0:83:4a:c2:0c:38:bb:a9: 23:bc:ad:16:e6:b9:25:e8:c5:37:25:0b:6b:5a:81:c3:bb:57: 3c:ef:46:d4:0d:33:c0:6f:8e:4e:1e:6e:a6:c0:c8:5f:5d:31: 97:a9:ac:88:e8:52:f0:59:32:23:c1:24:c3:5f:c3:7a:8a:b1: a3:8b:2c:77:a6:32:1b:69:6f:55:f3:e8:9c:37:a0:db:b5:75: 3e:56:87:27 -----BEGIN CERTIFICATE----- MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZnd4j/0wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3 ZjAeFw0xODEwMTUwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGFk MTdhMWIxLTFhNzYtNDUxNS1iOWMyLTA3MjQ2ZDY4MDMzNjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALHfINa2CDYnvgeTFQ8wV6Sa2A1eyG6uh7tLQ7Lf zz2UECAYL9JlQAxa8/Aa4FOLVtEFsBmh++cR6A6RBLTsd0RhKeR4JOy31oNtsS99 /v3pNAm7dw8TWTX+9edZwUssrYTYOpvgZmjoyvlWTjnVe2F11kVKvpxG6soqeNnD ZAUNlIMva5o7WT+E86Aud+gqKpgXx+Unx4iqBJ5rmrHapO/sqM3DprulzzM4RjEl OIvqu9fSDAZJKFzr+ftnY/IdA8+U4lvupsD4rSkm3Y6Czgr7bT6JrNcrfRPaHFxc qDTdIG+x6h6Lfinqqi64HVt7v2RdarFfM66hHEMArTGbtV0CAwEAAaOCA1YwggNS MB0GA1UdDgQWBBQONlmUd4Q1s7RAuGBXzV+W8cBQ5jCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2NhYzJiMmQ3LTVmZGMtM2Rl ZS1hMDNiLWU0NjYyYTBlMTYyOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5 N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3 MTRkOTdmLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFA4H6cSAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD ggEBAIUsmFaPO7tcE5r3Fw6Km7pWL3eYxgRKZq6A5RrOPxJM11PLPzEHQFg+ETVc 9hSZwaAZ55Cn5ANDpks+ZD7OSgGB0PACmi+6R6FYJnCzn6il+9PsWwrk40hO1ILJ Ga8KVuLwZghIvDO8Vmj371BADQ5h7yi8titjy07031+g6ggkRJc9px7cdc32bLc+ wuBjp8jT7/H1KE33qKxeCDiNuZvtcXGolnAiU7VOUWbQg0rCDDi7qSO8rRbmuSXo xTclC2tagcO7VzzvRtQNM8Bvjk4ebqbAyF9dMZeprIjoUvBZMiPBJMNfw3qKsaOL LHemMhtpb1Xz6Jw3oNu1dT5Whyc= -----END CERTIFICATE-----Generated at Wed May 3 13:22:15 2023 by rpki-client on console-ams.rpki-client.org