$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a85b6e44-2d05-3f3d-9b55-86cd0df64d71.roa File: a85b6e44-2d05-3f3d-9b55-86cd0df64d71.roa (raw, json) Hash identifier: McZx+1k7uPcZ5UdxNamuKJ3QHO/ljZvA1zBfrRFB/dE= Subject key identifier: 1A:43:D1:27:0E:24:59:80:5A:4A:75:D7:53:66:71:1F:7F:3C:80:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC16CADFF10EE Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a85b6e44-2d05-3f3d-9b55-86cd0df64d71.roa Signing time: Tue 20 Aug 2019 07:47:50 +0000 ROA not before: Tue 20 Aug 2019 04:00:00 +0000 ROA not after: Sat 06 Nov 2027 04:00:00 +0000 asID: 202623 IP address blocks: 198.41.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:ad:ff:10:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 20 04:00:00 2019 GMT Not After : Nov 6 04:00:00 2027 GMT Subject: CN=692e822c-0e04-446e-a932-cc06ea549ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:12:28:e5:31:40:fa:3d:f5:20:6c:88:b4: f9:d0:a6:3f:8a:6f:7e:bf:c5:94:02:7d:a6:34:1d: d5:0d:ab:3b:e3:7c:fe:17:b9:60:98:89:bf:79:3c: f0:a1:06:c1:af:84:96:86:cc:2e:c0:12:5f:81:47: 6e:a3:3a:28:36:35:58:45:65:70:08:74:dc:7f:3c: 06:77:89:93:9b:92:9c:b7:c6:16:60:65:4b:f8:6f: 48:fe:d9:f8:11:6a:e0:b0:ad:bb:29:12:aa:76:75: c1:0b:a8:5b:93:c3:8c:5e:d5:43:d8:33:96:27:26: cf:37:73:a2:05:4b:6f:6e:72:81:d2:c1:2d:52:4e: 5f:6e:4e:6d:5e:c4:b6:ff:04:f8:71:c1:15:72:a5: ba:e3:91:96:b7:a8:c0:76:f3:78:8f:73:ad:01:98: 91:4d:9c:5b:d9:8e:02:64:12:9c:5e:5f:b9:a8:ee: 61:d9:d3:68:09:4e:fd:09:23:57:b5:43:b0:b3:e0: 16:1a:a6:91:6d:3e:4d:04:f1:7a:02:21:e3:4a:d2: 52:38:19:9e:53:6c:12:5c:25:51:44:b2:9b:91:5a: 18:0f:94:dd:31:87:82:fe:09:05:75:20:b6:93:8c: 64:f3:8e:25:48:69:c4:f3:01:ad:50:3b:8b:7c:1b: eb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:43:D1:27:0E:24:59:80:5A:4A:75:D7:53:66:71:1F:7F:3C:80:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a85b6e44-2d05-3f3d-9b55-86cd0df64d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:34:7a:87:01:d6:b1:e0:98:63:3a:82:68:ed:fc:49:88:b0: 6e:35:ee:1d:c0:41:52:e3:0c:73:c9:00:a1:52:8b:42:f9:c9: b0:c2:92:b7:8c:2a:da:02:1e:61:fc:62:57:eb:fb:7a:83:4f: e3:cd:18:2c:86:de:99:1d:45:bb:78:d7:cb:49:07:7a:ad:87: 3c:4e:e1:5e:a8:d4:0e:fe:62:3e:3b:51:73:c5:16:66:f7:4c: 76:ce:e4:44:f7:89:6b:c9:65:e2:5b:c9:cd:63:5b:0f:97:75: 5f:b3:72:42:b5:54:26:ee:20:fe:b8:f0:6c:2b:d5:3c:77:32: 52:97:e8:e7:98:a2:bd:fa:d3:a8:07:b2:61:0b:9a:cc:db:ae: 0c:43:1a:70:4d:09:58:19:2f:e3:11:d7:fe:91:94:f5:d1:3c: 8c:6c:1e:7b:88:d8:32:fb:91:23:3c:39:d2:00:03:fc:00:15: 64:43:9a:69:19:4c:b3:65:9a:41:32:9d:cb:f4:f0:5a:72:31: 73:bd:4b:af:ef:32:85:4e:fb:5e:f8:e8:ce:7c:8b:a8:c8:90: a2:5d:20:9d:78:45:ad:e9:3e:de:31:87:00:67:8c:f4:7f:aa: 4b:63:a2:d9:4e:17:d1:92:67:f8:80:3c:72:e1:17:27:1f:7c: 5e:db:8b:bb -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbK3/EO4wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xOTA4MjAwNDAwMDBaFw0yNzExMDYwNDAwMDBaMC8xLTArBgNVBAMTJDY5 MmU4MjJjLTBlMDQtNDQ2ZS1hOTMyLWNjMDZlYTU0OWZmNjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJr1EijlMUD6PfUgbIi0+dCmP4pvfr/FlAJ9pjQd 1Q2rO+N8/he5YJiJv3k88KEGwa+ElobMLsASX4FHbqM6KDY1WEVlcAh03H88BneJ k5uSnLfGFmBlS/hvSP7Z+BFq4LCtuykSqnZ1wQuoW5PDjF7VQ9gzlicmzzdzogVL b25ygdLBLVJOX25ObV7Etv8E+HHBFXKluuORlreowHbzeI9zrQGYkU2cW9mOAmQS nF5fuajuYdnTaAlO/QkjV7VDsLPgFhqmkW0+TQTxegIh40rSUjgZnlNsElwlUUSy m5FaGA+U3TGHgv4JBXUgtpOMZPOOJUhpxPMBrVA7i3wb60UCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQaQ9EnDiRZgFpKdddTZnEffzyAdzCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2E4NWI2ZTQ0LTJkMDUtM2Yz ZC05YjU1LTg2Y2QwZGY2NGQ3MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMYp/TBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAJjR6hwHWseCYYzqCaO38SYiwbjXuHcBBUuMMc8kAoVKLQvnJsMKSt4wq2gIe YfxiV+v7eoNP480YLIbemR1Fu3jXy0kHeq2HPE7hXqjUDv5iPjtRc8UWZvdMds7k RPeJa8ll4lvJzWNbD5d1X7NyQrVUJu4g/rjwbCvVPHcyUpfo55iivfrTqAeyYQua zNuuDEMacE0JWBkv4xHX/pGU9dE8jGwee4jYMvuRIzw50gAD/AAVZEOaaRlMs2Wa QTKdy/TwWnIxc71Lr+8yhU77XvjoznyLqMiQol0gnXhFrek+3jGHAGeM9H+qS2Oi 2U4X0ZJn+IA8cuEXJx98XtuLuw== -----END CERTIFICATE-----Generated at Sat May 11 15:25:13 2024 by rpki-client on console-ams.rpki-client.org