$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f955a70-6c0c-3bcd-ac6b-463cdf713869.roa File: 2f955a70-6c0c-3bcd-ac6b-463cdf713869.roa (raw, json) Hash identifier: QQ+k1dUscOTcgenAGqNg2XF9Dq4Bgvti6uEMgTzan1c= Subject key identifier: 81:90:F0:7F:B2:7A:B6:39:74:2D:B3:51:7B:65:E6:38:A0:FC:16:06 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC16762295219 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f955a70-6c0c-3bcd-ac6b-463cdf713869.roa Signing time: Fri 30 Nov 2018 01:08:54 +0000 ROA not before: Thu 29 Nov 2018 05:00:00 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 162.158.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:52:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 29 05:00:00 2018 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=9eaecd68-16f5-44f7-aa40-e509b043c5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:e4:a2:3b:98:85:27:8b:0f:44:87:d8:87: de:0d:a0:fb:78:1a:70:b8:93:a0:01:54:69:42:0c: a7:09:d6:47:53:b9:2c:f6:70:8e:9a:8b:cb:f9:86: 33:fe:af:5e:ef:d3:6d:5f:1d:b1:a4:55:d9:d0:ad: 08:1f:b9:2b:ff:ae:32:12:b6:0a:07:3a:ed:7a:33: 5d:02:e7:6f:99:bd:c3:aa:0c:05:46:9b:92:2c:60: dc:b0:37:d8:a5:5d:9b:a6:62:a8:9b:25:d1:6f:09: a2:02:c8:6f:df:f1:5a:80:cf:50:da:0a:10:ed:db: e7:11:91:d5:68:62:ca:64:da:6e:89:e2:f6:f5:eb: f6:2b:d2:a4:bd:32:e7:46:f7:9b:ff:d8:9c:d8:a6: 1a:e2:b3:06:89:7d:47:19:c3:63:9e:d8:0c:03:f9: ba:25:bb:b0:f0:97:1f:d4:29:06:7d:5e:ab:d6:0f: 5b:27:80:c8:3b:37:b0:04:69:49:43:d7:22:a3:db: c1:87:f5:ca:60:a7:0c:de:f0:8c:ae:6a:cc:84:a1: 5f:3d:ea:20:ef:8a:71:cf:02:c7:27:37:09:a4:f3: dc:bb:81:bf:66:9b:ab:3a:9b:6d:e3:b5:9a:b5:f4: f2:50:58:d1:97:f5:b9:bd:19:0f:7a:1c:8e:24:05: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:90:F0:7F:B2:7A:B6:39:74:2D:B3:51:7B:65:E6:38:A0:FC:16:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f955a70-6c0c-3bcd-ac6b-463cdf713869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:53:8e:1e:12:76:36:83:f6:49:47:94:89:82:24:a5:f7:0b: 25:13:57:2c:52:08:ee:48:2d:ff:cf:3b:0f:c6:05:c0:3d:11: 5b:d5:6a:23:56:51:47:80:49:26:08:bb:78:cd:3d:fe:64:7a: fc:78:fb:15:e2:cc:d5:4e:c6:3a:16:45:51:32:67:6b:68:d6: 25:d2:66:85:22:16:11:49:99:6c:83:92:5c:eb:96:10:a7:2f: d1:61:cf:e9:73:b0:d6:f8:d1:19:26:f6:64:8a:1b:cc:44:28: d0:a8:6d:78:37:ed:da:f3:96:86:28:50:9f:8d:a9:76:cc:d9: d0:76:b0:c2:7a:72:1c:85:9f:c7:22:1b:3b:f1:bf:03:b0:58: 0d:2f:5a:97:04:ae:3e:2e:4e:95:fe:a6:f7:b0:d1:46:1d:ba: 74:a7:40:46:35:47:86:9e:8c:a3:b1:98:49:de:8d:f2:c4:7d: ff:aa:ef:19:16:08:14:c1:23:57:fe:38:b2:16:b0:27:47:0a: 04:ec:8e:72:f1:8d:29:13:c4:c5:6c:66:94:af:65:22:31:81: 3f:bd:7d:49:3c:d9:7a:e0:93:97:40:47:e1:e5:6a:90:6a:31: 9c:0e:cb:b3:91:d4:36:70:d5:28:c3:a1:3a:77:a8:27:45:c2: 9d:30:48:73 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IpUhkwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDll YWVjZDY4LTE2ZjUtNDRmNy1hYTQwLWU1MDliMDQzYzVlNTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK5p5KI7mIUniw9Eh9iH3g2g+3gacLiToAFUaUIM pwnWR1O5LPZwjpqLy/mGM/6vXu/TbV8dsaRV2dCtCB+5K/+uMhK2Cgc67XozXQLn b5m9w6oMBUabkixg3LA32KVdm6ZiqJsl0W8JogLIb9/xWoDPUNoKEO3b5xGR1Whi ymTaboni9vXr9ivSpL0y50b3m//YnNimGuKzBol9RxnDY57YDAP5uiW7sPCXH9Qp Bn1eq9YPWyeAyDs3sARpSUPXIqPbwYf1ymCnDN7wjK5qzIShXz3qIO+Kcc8Cxyc3 CaTz3LuBv2abqzqbbeO1mrX08lBY0Zf1ub0ZD3ocjiQFVe8CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBSBkPB/snq2OXQts1F7ZeY4oPwWBjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzJmOTU1YTcwLTZjMGMtM2Jj ZC1hYzZiLTQ2M2NkZjcxMzg2OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqKefDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEALVOOHhJ2NoP2SUeUiYIkpfcLJRNXLFII7kgt/887D8YFwD0RW9VqI1ZRR4BJ Jgi7eM09/mR6/Hj7FeLM1U7GOhZFUTJna2jWJdJmhSIWEUmZbIOSXOuWEKcv0WHP 6XOw1vjRGSb2ZIobzEQo0KhteDft2vOWhihQn42pdszZ0HawwnpyHIWfxyIbO/G/ A7BYDS9alwSuPi5Olf6m97DRRh26dKdARjVHhp6Mo7GYSd6N8sR9/6rvGRYIFMEj V/44shawJ0cKBOyOcvGNKRPExWxmlK9lIjGBP719STzZeuCTl0BH4eVqkGoxnA7L s5HUNnDVKMOhOneoJ0XCnTBIcw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:46 2025 by rpki-client