$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa File: 1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa (raw, json) Hash identifier: 10bAEr0RPblHGs2jzb/kWPdYSWsDnoj1s1Q5/I9C2wY= Subject key identifier: B0:E8:8D:57:5D:A8:EF:44:73:9C:53:AD:A1:A5:10:8B:FF:9F:54:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC16A9B9EB81E Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa Signing time: Thu 09 May 2019 08:03:51 +0000 ROA not before: Thu 09 May 2019 04:00:00 +0000 ROA not after: Mon 26 Jul 2027 04:00:00 +0000 asID: 13335 IP address blocks: 162.158.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:9b:9e:b8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 9 04:00:00 2019 GMT Not After : Jul 26 04:00:00 2027 GMT Subject: CN=49d3723b-fcfd-43aa-ac27-5acc20745134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:52:3a:93:7a:06:08:92:2a:ff:06:63:11: 5e:b5:a9:b0:0e:38:d8:05:83:2e:23:d9:a6:e2:ae: f4:00:cc:dc:56:0f:47:a2:8e:10:bb:08:d6:af:6e: 34:b0:4f:ae:c3:5d:ed:4c:83:68:fc:16:f6:4a:60: ae:c5:99:9c:ee:0d:35:7d:98:f2:82:0f:9f:c5:49: ab:65:1d:63:38:38:8b:d3:3b:30:0f:21:50:a3:1a: b1:36:c8:c6:94:39:8f:b3:3b:0a:16:b6:bb:14:a9: 31:02:ef:11:ef:9e:74:1b:7d:6d:47:51:67:01:43: d6:e5:a3:cf:37:58:27:f4:01:89:98:26:49:0f:c8: e8:4e:c4:ca:d1:08:5e:2b:ac:40:e0:31:cd:59:f5: 71:b7:2e:74:fd:f6:fa:2d:4e:d4:06:f4:94:d4:ad: c1:23:95:8f:b5:c2:07:d6:99:a4:33:fa:10:27:81: 7b:56:1d:2a:9a:be:d9:17:82:64:f4:74:c0:f9:05: c1:2a:a2:ea:13:46:6f:72:8c:8a:d9:da:5a:54:44: 4c:c2:25:11:2e:2b:5b:9f:04:ef:0f:f4:9e:fd:a9: 4b:ae:25:b5:50:00:c9:bd:2d:37:c3:ab:ce:43:d6: 58:91:8b:09:31:ed:6a:a6:b2:81:36:c3:5f:04:f6: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:8D:57:5D:A8:EF:44:73:9C:53:AD:A1:A5:10:8B:FF:9F:54:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9b:a7:47:8f:f4:8d:ff:17:17:5b:a0:18:2b:24:c0:49:34: c0:ec:50:c3:a6:b4:77:a6:75:08:8e:e0:8d:13:64:56:61:fb: 23:d3:d8:10:5a:2f:8e:24:cf:f6:91:2d:00:77:5f:df:d7:5f: 18:4a:fc:04:84:e3:ea:95:99:f5:f0:26:3b:21:88:66:4d:54: a4:bd:a4:e0:98:5f:06:4c:bd:dd:36:70:00:0d:7d:77:a4:32: b5:b9:5e:a8:cd:7d:37:74:86:f3:9c:75:c2:ce:08:74:82:02: b3:32:19:78:7c:dd:2c:1a:1f:42:5c:a7:d0:aa:dd:a8:ec:a4: d8:1e:ef:cd:eb:cb:c5:09:6d:68:da:ac:b1:76:d0:d6:31:e5: 89:51:e7:63:d6:67:f5:83:cc:a6:d3:54:13:12:6e:c3:c7:14: 89:13:dc:09:42:5c:ee:ed:c8:06:ff:af:0c:98:be:e7:59:9c: aa:25:e5:7a:03:d1:a3:27:37:86:c5:ea:45:77:cc:b6:a4:2a: 12:a9:95:7e:e4:72:62:fc:4a:15:79:cb:20:c3:c4:23:34:dc: f2:7e:39:43:cd:f0:a4:29:5e:82:23:9b:3e:7c:4a:e1:04:86: 7b:4b:ed:bf:39:53:51:82:69:72:46:1b:75:ab:55:e6:46:76: 68:96:c6:f2 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BapueuB4wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xOTA1MDkwNDAwMDBaFw0yNzA3MjYwNDAwMDBaMC8xLTArBgNVBAMTJDQ5 ZDM3MjNiLWZjZmQtNDNhYS1hYzI3LTVhY2MyMDc0NTEzNDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMVlUjqTegYIkir/BmMRXrWpsA442AWDLiPZpuKu 9ADM3FYPR6KOELsI1q9uNLBPrsNd7UyDaPwW9kpgrsWZnO4NNX2Y8oIPn8VJq2Ud Yzg4i9M7MA8hUKMasTbIxpQ5j7M7Cha2uxSpMQLvEe+edBt9bUdRZwFD1uWjzzdY J/QBiZgmSQ/I6E7EytEIXiusQOAxzVn1cbcudP32+i1O1Ab0lNStwSOVj7XCB9aZ pDP6ECeBe1YdKpq+2ReCZPR0wPkFwSqi6hNGb3KMitnaWlRETMIlES4rW58E7w/0 nv2pS64ltVAAyb0tN8OrzkPWWJGLCTHtaqaygTbDXwT2CjUCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBSw6I1XXajvRHOcU62hpRCL/59UhTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzFlYWE2YTUyLWY2NTAtM2U1 ZC05YjVlLTc5NTY3OTFhNjUxZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKezjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAhpunR4/0jf8XF1ugGCskwEk0wOxQw6a0d6Z1CI7gjRNkVmH7I9PYEFovjiTP 9pEtAHdf39dfGEr8BITj6pWZ9fAmOyGIZk1UpL2k4JhfBky93TZwAA19d6Qytble qM19N3SG85x1ws4IdIICszIZeHzdLBofQlyn0KrdqOyk2B7vzevLxQltaNqssXbQ 1jHliVHnY9Zn9YPMptNUExJuw8cUiRPcCUJc7u3IBv+vDJi+51mcqiXlegPRoyc3 hsXqRXfMtqQqEqmVfuRyYvxKFXnLIMPEIzTc8n45Q83wpClegiObPnxK4QSGe0vt vzlTUYJpckYbdatV5kZ2aJbG8g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:45 2025 by rpki-client