$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa File: cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa (raw, json) Hash identifier: NpbwSoQNV4gUi2z591C88qEHrx2O/ChvJy+Nkn6+/h4= Subject key identifier: FA:6B:B3:66:B8:14:19:7D:AB:91:44:4E:F8:04:D5:78:ED:25:EC:16 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328576D51CC73C042CFC16E392E685B Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa Signing time: Tue 05 Nov 2019 01:29:33 +0000 ROA not before: Tue 10 Apr 2018 04:00:00 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 199.224.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:39:2e:68:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 10 04:00:00 2018 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=48e37bd9-0c4a-4d00-a135-ae1da1068a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:e6:51:16:6e:ac:71:5f:09:a9:64:c3:44: 57:56:2e:4f:81:3d:a7:eb:31:9a:e8:4a:21:1d:dd: 75:4b:d6:f1:54:3d:f4:f7:71:fc:18:21:65:e2:e7: 1b:f3:50:b6:0c:8e:a2:1b:66:56:3f:84:c1:2b:c5: 99:4c:62:2f:35:b0:05:df:1c:62:46:35:50:b8:7f: 45:b9:12:55:13:b5:b8:13:12:a9:6a:c5:1b:3e:d0: 7a:8d:f3:7c:24:a3:5f:bc:57:e8:09:bd:a6:eb:f0: 8d:17:65:ac:09:fd:a5:b6:44:94:1d:91:85:f0:5e: 3e:43:02:23:dd:e4:8d:51:5a:37:7d:4b:33:08:b9: 21:0f:2d:de:97:2d:31:8d:9d:ed:fb:92:48:15:ac: c6:f1:81:21:8f:85:f5:d3:58:3e:e6:c2:26:e6:75: 50:62:56:06:f6:10:2b:ee:41:2d:f1:a1:94:dc:b8: 71:46:98:e1:65:b8:75:07:58:a8:ac:56:f4:63:7a: 54:b4:7c:81:b4:1d:e8:b8:b8:13:24:db:6b:1c:35: 8f:7f:68:f6:b4:00:81:47:22:07:d5:c0:a3:57:32: c4:7c:b9:46:72:28:20:d9:30:b9:d4:05:11:65:7e: 21:44:a4:27:fb:81:01:0c:c6:fb:20:c3:91:22:5c: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:B3:66:B8:14:19:7D:AB:91:44:4E:F8:04:D5:78:ED:25:EC:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.224.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:87:34:73:7d:dc:cf:ce:f3:9d:12:b8:d4:5d:62:55:55:a1: 5b:ec:6c:6b:d6:15:33:cf:ae:d9:78:c5:85:0b:81:67:7f:28: a1:73:ec:7e:9c:71:4d:32:c6:06:46:4f:f1:5d:06:4e:83:48: d2:f5:84:fb:0a:c8:34:55:c4:26:2e:17:08:7a:04:db:55:de: 36:fe:c3:6a:8e:6f:e9:ce:f9:65:7f:3b:b6:f0:6a:93:b5:d8: a4:82:b9:43:01:75:0e:34:99:bb:23:52:12:53:0b:33:25:01: 44:ae:90:df:c8:cc:04:ec:45:52:20:a2:d0:0d:20:86:9c:eb: d5:d9:bc:38:f1:a8:0c:bb:d6:94:10:ad:a6:b3:af:e9:8a:16: 13:14:ba:4c:f4:12:d0:6e:84:92:02:54:04:29:57:5f:b6:23: ca:11:51:11:db:13:d1:8c:23:e2:cb:95:7a:68:7b:26:36:a1: 72:2a:ae:4a:0a:ff:0a:92:ea:6e:ea:96:2c:21:8a:b0:74:0c: 14:a2:6f:8c:7b:48:11:37:8c:38:c0:62:57:60:a5:ee:a6:42: ab:b4:f2:ae:16:7b:d0:06:f4:77:ff:40:97:c9:59:3a:cd:2d: a0:9e:07:b6:e7:5e:ee:d7:a7:0e:a6:0e:b1:1e:56:8b:99:2c: be:89:6e:e8 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbjkuaFswCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3 ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDQ4 ZTM3YmQ5LTBjNGEtNGQwMC1hMTM1LWFlMWRhMTA2OGE3ODCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALXc5lEWbqxxXwmpZMNEV1YuT4E9p+sxmuhKIR3d dUvW8VQ99Pdx/BghZeLnG/NQtgyOohtmVj+EwSvFmUxiLzWwBd8cYkY1ULh/RbkS VRO1uBMSqWrFGz7Qeo3zfCSjX7xX6Am9puvwjRdlrAn9pbZElB2RhfBePkMCI93k jVFaN31LMwi5IQ8t3pctMY2d7fuSSBWsxvGBIY+F9dNYPubCJuZ1UGJWBvYQK+5B LfGhlNy4cUaY4WW4dQdYqKxW9GN6VLR8gbQd6Li4EyTbaxw1j39o9rQAgUciB9XA o1cyxHy5RnIoINkwudQFEWV+IUSkJ/uBAQzG+yDDkSJchfsCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBT6a7NmuBQZfauRRE74BNV47SXsFjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2NkMmNkNmQ4LThhNGQtMzIz Ny1iNmZmLWJmOGRjMjUxZTZjMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5 N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3 MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMfgADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEApYc0c33cz87znRK41F1iVVWhW+xsa9YVM8+u2XjFhQuBZ38ooXPsfpxxTTLG BkZP8V0GToNI0vWE+wrINFXEJi4XCHoE21XeNv7Dao5v6c75ZX87tvBqk7XYpIK5 QwF1DjSZuyNSElMLMyUBRK6Q38jMBOxFUiCi0A0ghpzr1dm8OPGoDLvWlBCtprOv 6YoWExS6TPQS0G6EkgJUBClXX7YjyhFREdsT0Ywj4suVemh7JjahciquSgr/CpLq buqWLCGKsHQMFKJvjHtIETeMOMBiV2Cl7qZCq7TyrhZ70Ab0d/9Al8lZOs0toJ4H tude7tenDqYOsR5Wi5ksvolu6A== -----END CERTIFICATE-----Generated at Tue Apr 16 16:31:00 2024 by rpki-client on console-fra.rpki-client.org