$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4034bd1-2330-3868-bf3e-9e3f270ecc39.roa File: a4034bd1-2330-3868-bf3e-9e3f270ecc39.roa (raw, json) Hash identifier: 9k6cT9xf7C4kqnqArUuSIKx5sq1fFbaHgbAYQICUFe4= Subject key identifier: 86:40:9F:63:A7:B2:4D:8E:C1:60:98:02:69:43:AB:10:83:C2:2F:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC16EC4A20C5C Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4034bd1-2330-3868-bf3e-9e3f270ecc39.roa Signing time: Mon 02 Dec 2019 03:23:04 +0000 ROA not before: Mon 02 Dec 2019 05:00:00 +0000 ROA not after: Fri 18 Feb 2028 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:c4:a2:0c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 2 05:00:00 2019 GMT Not After : Feb 18 05:00:00 2028 GMT Subject: CN=2f5f518d-01d9-4986-bd08-b5244c09dcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:8f:96:6e:ba:cf:cd:5b:40:8a:a4:e0:e3: 05:72:73:52:2d:d8:d3:ab:49:25:8a:30:d5:14:e7: 76:21:ab:cc:c8:b5:1c:07:b8:91:1a:20:1d:9b:61: ce:63:26:06:db:16:9f:4b:d3:8e:8f:f0:47:22:1d: 57:c4:ed:f0:45:f7:68:d8:4f:fc:50:e5:d4:d3:c1: 93:35:6d:1d:18:17:86:b4:9c:6e:b8:07:f1:d5:60: e3:94:6e:fb:4c:9a:99:fa:cc:e3:65:56:f1:e8:91: e8:d8:fb:be:35:ae:c2:db:7f:63:69:81:72:8c:5e: be:36:f9:02:b6:14:92:88:46:10:b3:f1:64:9c:fd: 46:48:d0:1f:53:06:84:5b:8b:0f:34:19:ed:10:5e: 64:f9:33:22:d8:c8:24:af:02:ab:ed:1d:c6:55:d4: 74:50:95:05:14:34:6b:a0:18:be:79:c3:56:cd:99: 4a:87:46:61:02:95:d0:06:a0:a5:bb:ad:a9:45:85: 23:35:e2:ce:5d:50:2c:23:6e:71:99:37:91:be:ff: a3:6c:52:6e:ec:21:82:bf:b5:f8:ea:c2:c4:a0:5f: e5:4e:79:f2:43:5a:14:13:52:9a:9f:86:07:77:bf: 74:ec:c5:c9:ea:26:57:8e:71:a9:97:35:34:fe:ac: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:40:9F:63:A7:B2:4D:8E:C1:60:98:02:69:43:AB:10:83:C2:2F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4034bd1-2330-3868-bf3e-9e3f270ecc39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:d7:09:91:2a:32:2b:63:4d:d0:b2:dc:be:bc:88:4b:e4:05: a7:53:85:10:61:8f:13:ef:96:70:94:b2:14:26:83:e5:1b:9e: a5:10:9b:79:fc:26:79:4d:8d:a5:02:bb:10:9c:41:c6:81:c6: 6c:2e:12:f0:80:f5:b2:08:7e:97:fa:b5:43:13:d9:33:77:a8: 6e:7c:66:2b:fc:c7:c8:fa:cf:f8:27:f1:f4:74:41:4f:11:e0: ce:fc:aa:19:b8:ef:ed:a9:b0:22:81:ee:15:38:59:c9:1c:bf: d6:6f:f0:c2:2f:76:68:2d:9d:6e:a9:83:fc:9d:70:96:10:02: 50:8b:0e:5f:1f:5a:16:76:84:48:22:9e:bc:78:6f:ae:43:c3: 12:3f:53:50:ef:33:1e:2a:13:ab:f4:c9:e7:22:e4:5a:11:85: 4c:48:31:31:2a:12:1c:0d:dd:8d:a7:12:a1:6a:9a:52:8c:a4: f6:74:ab:b4:52:43:f4:e0:dd:f3:41:85:a4:51:1a:a3:4a:b0: 96:62:c6:c4:0e:a9:29:22:a9:b5:4a:ed:74:22:f8:66:49:7e: f1:08:91:8d:6d:11:85:80:88:d8:11:0f:ec:db:89:ac:26:2a: 2a:ed:53:5f:00:d3:cc:f7:22:ed:d8:5c:b9:46:19:94:73:6a: 11:23:12:94 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbsSiDFwwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xOTEyMDIwNTAwMDBaFw0yODAyMTgwNTAwMDBaMC8xLTArBgNVBAMTJDJm NWY1MThkLTAxZDktNDk4Ni1iZDA4LWI1MjQ0YzA5ZGNmNjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMuxj5Zuus/NW0CKpODjBXJzUi3Y06tJJYow1RTn diGrzMi1HAe4kRogHZthzmMmBtsWn0vTjo/wRyIdV8Tt8EX3aNhP/FDl1NPBkzVt HRgXhrScbrgH8dVg45Ru+0yamfrM42VW8eiR6Nj7vjWuwtt/Y2mBcoxevjb5ArYU kohGELPxZJz9RkjQH1MGhFuLDzQZ7RBeZPkzItjIJK8Cq+0dxlXUdFCVBRQ0a6AY vnnDVs2ZSodGYQKV0AagpbutqUWFIzXizl1QLCNucZk3kb7/o2xSbuwhgr+1+OrC xKBf5U558kNaFBNSmp+GB3e/dOzFyeomV45xqZc1NP6sHYECAwEAAaOCA1UwggNR MB0GA1UdDgQWBBSGQJ9jp7JNjsFgmAJpQ6sQg8IvbDCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2E0MDM0YmQxLTIzMzAtMzg2 OC1iZjNlLTllM2YyNzBlY2MzOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxEgTBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAttcJkSoyK2NN0LLcvryIS+QFp1OFEGGPE++WcJSyFCaD5RuepRCbefwmeU2N pQK7EJxBxoHGbC4S8ID1sgh+l/q1QxPZM3eobnxmK/zHyPrP+Cfx9HRBTxHgzvyq Gbjv7amwIoHuFThZyRy/1m/wwi92aC2dbqmD/J1wlhACUIsOXx9aFnaESCKevHhv rkPDEj9TUO8zHioTq/TJ5yLkWhGFTEgxMSoSHA3djacSoWqaUoyk9nSrtFJD9ODd 80GFpFEao0qwlmLGxA6pKSKptUrtdCL4Zkl+8QiRjW0RhYCI2BEP7NuJrCYqKu1T XwDTzPci7dhcuUYZlHNqESMSlA== -----END CERTIFICATE-----Generated at Sat May 11 02:51:09 2024 by rpki-client on console-ams.rpki-client.org