$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db69d36b-40d7-36ab-8e57-452a5fdecc43.roa File: db69d36b-40d7-36ab-8e57-452a5fdecc43.roa (raw, json) Hash identifier: 6VMkg1QHHoZ4NiiDFzS2pdiKtkku147P6JiCqZpY1Ac= Subject key identifier: FA:F9:70:8F:04:6F:2D:08:BC:DC:85:DE:8B:1A:FA:45:FF:51:91:FC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328576D51CC73C042CFC16D7F77D28D Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db69d36b-40d7-36ab-8e57-452a5fdecc43.roa Signing time: Mon 30 Sep 2019 00:00:22 +0000 ROA not before: Tue 10 Apr 2018 04:00:00 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 396370 IP address blocks: 165.254.21.224/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:77:d2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 10 04:00:00 2018 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=3dcaa14e-801d-4134-a9ea-387265b47cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:28:b2:96:09:58:ae:6c:7c:be:d7:4c:1f: 7a:b5:4d:cc:1d:04:dc:0e:ae:92:d6:bd:dd:27:08: 6d:1c:02:b3:b1:ba:b4:6f:30:9d:d9:14:14:f5:46: db:46:9d:a4:72:2d:00:67:55:95:59:b1:02:3c:8b: ca:dc:96:a3:a8:6a:3e:5d:0c:89:f9:d1:e7:bd:56: 3f:d1:2e:c5:90:c4:33:96:8c:46:c1:bd:ad:81:9d: c0:6f:39:0e:f0:96:bf:3e:38:6d:31:f6:c0:51:db: 31:0e:da:39:f0:db:38:cf:c0:ae:ce:9a:d3:2f:b2: c2:3f:1e:99:43:3c:8e:d8:5b:cb:52:7c:6b:3b:fd: 58:3e:09:93:44:d1:98:3b:59:a4:13:3b:f5:67:19: 05:da:7d:da:1a:21:70:ab:56:27:0e:42:a6:fe:7d: 17:42:d0:58:af:1a:96:f6:e0:96:93:46:b0:cc:cf: 1c:ed:d2:33:82:a7:0b:c5:1f:d3:02:05:48:04:46: ca:63:43:16:9a:c9:5d:a7:bf:2c:ea:94:2d:e8:d9: 18:83:0f:af:dc:e0:db:59:2a:3e:fa:57:4f:d9:82: 48:2c:e9:b2:7b:66:c6:59:17:da:fd:58:b0:da:c0: 50:64:c8:e0:12:16:e8:d9:32:00:8c:01:b4:64:88: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F9:70:8F:04:6F:2D:08:BC:DC:85:DE:8B:1A:FA:45:FF:51:91:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db69d36b-40d7-36ab-8e57-452a5fdecc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.21.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c7:2b:d9:ca:23:e7:85:30:c3:23:75:af:53:b4:0c:0c:a6: 66:2d:72:23:0b:35:72:49:50:ab:c8:a8:b1:1f:d6:42:f3:5d: d9:a0:81:14:8a:9f:2e:01:b6:af:c2:8f:6e:71:15:17:82:9e: 35:d8:6d:c1:97:75:e2:c6:c5:4c:5a:21:61:72:ec:42:80:17: 5a:91:5d:28:64:11:a8:83:7e:f0:88:a7:54:79:34:e0:23:d3: 17:18:b9:34:46:3c:f4:c2:89:26:bc:12:67:3b:15:35:4c:81: 22:0a:98:ec:bd:3e:80:42:9f:58:54:47:92:f5:cc:0f:38:32: 0d:5e:74:c4:de:c2:b3:3e:55:63:ea:84:b2:c2:d7:60:26:d1: 0d:57:17:e2:9c:8b:e6:12:f6:dc:3a:16:8f:1a:4c:96:1c:e8: d4:21:84:d4:93:d1:7f:41:5e:d7:a7:c1:90:ae:91:3f:9a:69: 92:8a:21:d4:1a:66:2d:9e:c2:f8:64:18:22:72:f3:16:06:30: 7d:39:76:c5:5f:5c:e6:6a:24:8e:a3:d3:bb:2d:a9:79:3d:59: 43:17:34:79:f0:8e:79:ae:f2:14:5b:d9:3d:7a:5c:24:51:d7: 7a:8a:15:49:09:67:7d:5f:d0:f8:f1:bc:92:c3:3b:79:d5:30: 0a:4c:56:e3 -----BEGIN CERTIFICATE----- MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbX930o0wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3 ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDNk Y2FhMTRlLTgwMWQtNDEzNC1hOWVhLTM4NzI2NWI0N2NjNjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANLyKLKWCViubHy+10wferVNzB0E3A6ukta93ScI bRwCs7G6tG8wndkUFPVG20adpHItAGdVlVmxAjyLytyWo6hqPl0MifnR571WP9Eu xZDEM5aMRsG9rYGdwG85DvCWvz44bTH2wFHbMQ7aOfDbOM/Ars6a0y+ywj8emUM8 jthby1J8azv9WD4Jk0TRmDtZpBM79WcZBdp92hohcKtWJw5Cpv59F0LQWK8alvbg lpNGsMzPHO3SM4KnC8Uf0wIFSARGymNDFprJXae/LOqULejZGIMPr9zg21kqPvpX T9mCSCzpsntmxlkX2v1YsNrAUGTI4BIW6NkyAIwBtGSIECkCAwEAAaOCA1YwggNS MB0GA1UdDgQWBBT6+XCPBG8tCLzchd6LGvpF/1GR/DCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2RiNjlkMzZiLTQwZDctMzZh Yi04ZTU3LTQ1MmE1ZmRlY2M0My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5 N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3 MTRkOTdmLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBKX+FeAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD ggEBAAPHK9nKI+eFMMMjda9TtAwMpmYtciMLNXJJUKvIqLEf1kLzXdmggRSKny4B tq/Cj25xFReCnjXYbcGXdeLGxUxaIWFy7EKAF1qRXShkEaiDfvCIp1R5NOAj0xcY uTRGPPTCiSa8Emc7FTVMgSIKmOy9PoBCn1hUR5L1zA84Mg1edMTewrM+VWPqhLLC 12Am0Q1XF+Kci+YS9tw6Fo8aTJYc6NQhhNST0X9BXtenwZCukT+aaZKKIdQaZi2e wvhkGCJy8xYGMH05dsVfXOZqJI6j07stqXk9WUMXNHnwjnmu8hRb2T16XCRR13qK FUkJZ31f0PjxvJLDO3nVMApMVuM= -----END CERTIFICATE-----Generated at Thu Apr 25 22:41:47 2024 by rpki-client on console-fra.rpki-client.org