$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a53d00d-8470-36a3-a9d0-d886323f1345.roa File: 3a53d00d-8470-36a3-a9d0-d886323f1345.roa (raw, json) Hash identifier: fYpYFvP4I/+jk0RYvWBro3ZWfRJi2Qw8AUq0JG056yw= Subject key identifier: 35:9D:97:A3:71:7E:E0:F8:CC:6F:C3:31:2B:72:97:CF:DE:36:D8:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC1676228A7D6 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a53d00d-8470-36a3-a9d0-d886323f1345.roa Signing time: Fri 30 Nov 2018 01:08:10 +0000 ROA not before: Thu 29 Nov 2018 05:00:00 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 104.18.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:a7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 29 05:00:00 2018 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=d3c7a291-9bb7-4a62-b412-cfcc68a06eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ee:af:bd:a7:d7:a3:0d:8a:25:9a:19:80:8e: 31:0a:d9:7e:1e:81:84:d1:ba:09:67:78:30:a7:c8: 1b:fc:93:d9:78:49:e6:4a:30:f7:07:dc:1b:5e:55: 1a:5f:5d:46:2a:79:68:29:89:26:61:e7:49:c3:4b: 44:be:85:bf:a2:8f:2b:7c:18:81:ed:0f:14:b3:b2: a2:e9:75:a5:0b:f0:64:d3:a1:68:7d:ff:c6:d5:3d: 5b:18:ab:c9:65:cf:38:57:dd:32:dc:7b:18:62:aa: e2:ec:df:96:56:db:14:af:17:6d:cb:18:50:f2:4b: a3:b7:19:9d:bc:8a:2a:a4:16:43:03:9d:c4:a8:d0: 72:c1:1d:9e:8e:93:76:2d:9b:5d:ec:1f:e9:9c:84: 03:f1:28:05:7f:85:64:51:13:8d:c9:5a:61:ab:ba: 03:74:8c:8a:94:7e:3c:40:34:93:4d:b5:15:98:0a: b9:f4:50:3b:91:4d:3a:f6:2c:1d:03:ea:6c:82:51: e5:0e:11:d8:6d:dc:98:6c:c7:70:82:d4:9d:8e:ee: 44:be:69:5c:47:92:fa:82:f2:e6:25:86:00:6b:47: eb:a2:ba:44:7c:54:02:54:fb:28:c6:ef:00:e7:ce: 5e:58:5c:86:ec:c3:2a:a8:1e:89:ea:5f:f6:31:a4: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9D:97:A3:71:7E:E0:F8:CC:6F:C3:31:2B:72:97:CF:DE:36:D8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a53d00d-8470-36a3-a9d0-d886323f1345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6c:9b:21:96:d7:32:40:ce:45:25:7e:3d:06:8c:01:4b:28: 98:68:2f:3b:3a:32:45:b1:b9:e2:d1:e8:64:3f:a5:46:42:c5: 42:a1:94:4d:74:63:34:c2:24:94:4e:e6:76:77:ed:af:e5:62: ca:0b:dd:21:03:e9:81:fb:78:01:be:8d:96:eb:6a:bd:41:5c: 16:b4:32:7e:dd:da:79:e0:50:b8:43:2c:52:ce:11:8d:bf:be: 2e:35:ba:2c:e0:34:e6:e4:6b:16:08:7b:32:1f:28:6a:81:a5: ca:c8:8b:25:9d:37:e7:a4:ce:10:91:d3:4e:bd:ea:1a:de:8a: 46:4e:99:c9:81:d0:49:fb:2a:37:94:bd:89:5b:57:b3:22:0e: b3:42:9e:f2:17:30:a3:b1:c5:3c:6e:9f:cf:12:70:a3:48:33: e4:db:b0:99:56:ff:d7:6a:75:33:fb:a6:e0:b3:51:03:56:31: 63:9b:79:92:e6:e8:80:81:fc:2f:a6:6d:a7:26:eb:44:15:d2: 48:4b:ed:2c:79:10:a5:05:ee:37:fd:38:79:1a:ce:8c:07:bc: 4f:22:06:b7:4e:03:e1:c5:23:25:70:4f:d2:5d:b5:4b:44:9f: 45:18:61:7b:0e:0d:5c:cf:06:bd:e0:11:77:02:db:ec:28:a9: 18:3b:af:6a -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Iop9YwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGQz YzdhMjkxLTliYjctNGE2Mi1iNDEyLWNmY2M2OGEwNmVhYzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANLur72n16MNiiWaGYCOMQrZfh6BhNG6CWd4MKfI G/yT2XhJ5kow9wfcG15VGl9dRip5aCmJJmHnScNLRL6Fv6KPK3wYge0PFLOyoul1 pQvwZNOhaH3/xtU9WxiryWXPOFfdMtx7GGKq4uzfllbbFK8XbcsYUPJLo7cZnbyK KqQWQwOdxKjQcsEdno6Tdi2bXewf6ZyEA/EoBX+FZFETjclaYau6A3SMipR+PEA0 k021FZgKufRQO5FNOvYsHQPqbIJR5Q4R2G3cmGzHcILUnY7uRL5pXEeS+oLy5iWG AGtH66K6RHxUAlT7KMbvAOfOXlhchuzDKqgeiepf9jGkey0CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQ1nZejcX7g+MxvwzErcpfP3jbYCTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzNhNTNkMDBkLTg0NzAtMzZh My1hOWQwLWQ4ODYzMjNmMTM0NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgSkDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAqmybIZbXMkDORSV+PQaMAUsomGgvOzoyRbG54tHoZD+lRkLFQqGUTXRjNMIk lE7mdnftr+ViygvdIQPpgft4Ab6NlutqvUFcFrQyft3aeeBQuEMsUs4Rjb++LjW6 LOA05uRrFgh7Mh8oaoGlysiLJZ0356TOEJHTTr3qGt6KRk6ZyYHQSfsqN5S9iVtX syIOs0Ke8hcwo7HFPG6fzxJwo0gz5NuwmVb/12p1M/um4LNRA1YxY5t5kubogIH8 L6ZtpybrRBXSSEvtLHkQpQXuN/04eRrOjAe8TyIGt04D4cUjJXBP0l21S0SfRRhh ew4NXM8GveARdwLb7CipGDuvag== -----END CERTIFICATE-----Generated at Sat May 11 15:25:06 2024 by rpki-client on console-ams.rpki-client.org