$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25e8322f-2428-321c-a784-a85a0a7a9123.roa File: 25e8322f-2428-321c-a784-a85a0a7a9123.roa (raw, json) Hash identifier: CnhSGF09kNXVy8QFj+5Fqo1XLY3pNkww1D3hLyYm8Wo= Subject key identifier: 52:CE:CF:48:AD:85:5C:EE:BF:1F:BD:5C:9C:F6:7A:1D:D3:FE:8A:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC1676229F206 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25e8322f-2428-321c-a784-a85a0a7a9123.roa Signing time: Fri 30 Nov 2018 01:09:35 +0000 ROA not before: Thu 29 Nov 2018 05:00:00 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:f2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 29 05:00:00 2018 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=2f721633-d932-416e-97fe-9ad8dbe60b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:54:9b:ae:4b:6d:58:e7:a0:44:b6:d4:16:d4: 45:00:8f:d5:b5:46:e1:8e:c3:73:c2:38:3d:73:8e: fd:b8:7f:19:a0:24:c3:87:85:5c:35:7a:28:74:8e: f0:c1:fe:6a:2d:56:d4:b8:e1:9f:17:02:9a:55:15: a9:8d:5a:9a:90:cd:8a:38:1b:d5:71:9b:bf:ab:6c: 66:d6:9c:40:3e:a5:62:a4:d1:4f:26:5b:7e:fe:15: 13:93:9c:d9:e3:66:93:69:d0:fb:6a:a5:e8:24:95: 6c:59:fd:0b:fc:82:d3:59:2a:54:3f:71:71:40:c3: b9:23:b2:04:f9:84:37:35:8b:2c:6b:1b:02:a4:41: 8c:cb:48:49:3d:e2:ef:3d:00:b3:13:0a:ba:24:78: ae:31:b8:26:a5:5d:2f:89:29:f8:44:15:1d:93:07: c3:fc:be:32:e9:70:c2:97:c2:9a:f6:7f:3c:99:e0: ba:ad:f8:ae:43:e6:11:c2:75:db:55:46:d4:47:fb: 85:c3:9e:f8:eb:18:0c:76:c8:d4:a3:40:8c:1d:af: 4b:fe:41:85:ec:6a:e3:bc:e1:3f:55:17:65:ed:79: 81:11:1f:5d:5d:97:03:03:8d:b8:d7:a3:22:c1:ea: 6b:0a:09:dc:cc:f8:f3:14:f0:95:c1:bb:88:81:dc: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:CF:48:AD:85:5C:EE:BF:1F:BD:5C:9C:F6:7A:1D:D3:FE:8A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25e8322f-2428-321c-a784-a85a0a7a9123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:98:ea:42:07:f6:ba:30:f1:0e:07:f0:ba:47:1e:b8:d8:87: 7b:16:12:b4:60:8d:0b:7c:82:4b:96:66:55:8f:75:e2:ad:df: 96:3d:35:0c:bd:f5:f1:86:1f:80:4a:47:47:e8:c6:38:ce:c6: 51:4b:f8:df:6f:03:bb:21:63:4f:a3:a0:1c:d3:bf:ba:8a:03: de:07:3a:95:de:e7:c3:c7:76:13:46:c6:80:b6:0a:2b:ba:b3: 6a:ba:f9:e4:f9:b4:08:0d:6a:f5:72:a0:5d:b8:3f:87:1e:9a: 74:6c:f5:59:c3:92:55:a6:d7:6c:4b:f4:fb:90:e5:06:9d:83: 91:35:f7:9b:85:c5:92:d1:fa:c9:80:e1:16:a9:65:b2:43:25: e6:34:34:b3:10:1d:c5:8b:95:bc:bb:22:53:58:c2:e8:cb:d1: 43:00:d5:91:c5:eb:06:28:d3:50:f7:2d:3d:0f:71:8b:68:33: cf:b5:5b:8f:7c:b9:45:46:76:b2:02:75:30:b9:80:7e:99:8e: cc:a1:ae:e1:d2:49:c8:1c:51:88:34:1c:8e:bc:fc:58:77:85: 33:07:15:49:08:ae:7e:ea:96:28:89:d1:76:00:32:cd:f0:1b: 79:78:a0:43:c0:d0:55:32:e0:93:5d:6f:50:8d:81:5d:f9:90: 20:4d:1e:71 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Ip8gYwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDJm NzIxNjMzLWQ5MzItNDE2ZS05N2ZlLTlhZDhkYmU2MGI4ZDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOJUm65LbVjnoES21BbURQCP1bVG4Y7Dc8I4PXOO /bh/GaAkw4eFXDV6KHSO8MH+ai1W1LjhnxcCmlUVqY1ampDNijgb1XGbv6tsZtac QD6lYqTRTyZbfv4VE5Oc2eNmk2nQ+2ql6CSVbFn9C/yC01kqVD9xcUDDuSOyBPmE NzWLLGsbAqRBjMtIST3i7z0AsxMKuiR4rjG4JqVdL4kp+EQVHZMHw/y+MulwwpfC mvZ/PJnguq34rkPmEcJ121VG1Ef7hcOe+OsYDHbI1KNAjB2vS/5Bhexq47zhP1UX Ze15gREfXV2XAwONuNejIsHqawoJ3Mz48xTwlcG7iIHck5MCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBRSzs9IrYVc7r8fvVyc9nod0/6K1zCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzI1ZTgzMjJmLTI0MjgtMzIx Yy1hNzg0LWE4NWEwYTdhOTEyMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxEiDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEARJjqQgf2ujDxDgfwukceuNiHexYStGCNC3yCS5ZmVY914q3flj01DL318YYf gEpHR+jGOM7GUUv4328DuyFjT6OgHNO/uooD3gc6ld7nw8d2E0bGgLYKK7qzarr5 5Pm0CA1q9XKgXbg/hx6adGz1WcOSVabXbEv0+5DlBp2DkTX3m4XFktH6yYDhFqll skMl5jQ0sxAdxYuVvLsiU1jC6MvRQwDVkcXrBijTUPctPQ9xi2gzz7Vbj3y5RUZ2 sgJ1MLmAfpmOzKGu4dJJyBxRiDQcjrz8WHeFMwcVSQiufuqWKInRdgAyzfAbeXig Q8DQVTLgk11vUI2BXfmQIE0ecQ== -----END CERTIFICATE-----Generated at Sat May 11 15:25:05 2024 by rpki-client on console-ams.rpki-client.org