$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa File: aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa (raw, json) Hash identifier: Zp6L5iz69F72r/ODpvJTSz+mxvWXXbRLZhxJ32cKbds= Subject key identifier: E7:99:4D:3D:E9:35:D1:01:7C:D0:80:6F:91:AD:75:04:07:80:82:EF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC1676228B252 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa Signing time: Fri 30 Nov 2018 01:08:13 +0000 ROA not before: Thu 29 Nov 2018 05:00:00 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 104.18.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:b2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 29 05:00:00 2018 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=0c22b7f8-bd1b-4d69-87ab-40ae017391aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:28:4a:8f:98:af:e0:57:b6:d7:92:e5:b5: e2:a1:fe:e3:fd:0d:ee:05:9a:0f:6a:11:e3:e8:f5: 1a:13:75:7a:61:8c:0e:ce:03:4b:60:d3:f1:f0:0c: ae:b4:20:cf:12:31:34:4d:a9:50:90:e1:c0:98:5c: 96:2d:ab:27:01:d5:4f:18:9d:d0:db:89:86:22:bc: fa:ee:42:4e:b0:04:34:9d:ad:c8:f6:11:a0:98:0f: bf:d8:ce:0a:8e:df:f8:da:32:58:43:1a:42:2c:1c: 48:55:ac:38:dd:c8:87:54:f9:23:fe:8c:e7:fe:53: 2c:ab:f1:b8:6e:80:48:61:5a:00:78:08:61:14:41: 10:e6:bd:6e:70:04:db:05:de:08:ca:8b:01:a1:3e: 3c:3d:48:77:fd:c8:58:a3:d8:14:21:ab:3d:c3:ec: 54:08:be:ba:ac:63:fc:24:4b:08:84:ba:7e:9a:49: 83:0f:b1:c5:8c:02:ea:ae:ba:e5:4d:c5:01:92:5e: 6d:56:96:7e:9c:b3:d8:d9:c7:4b:9a:b0:5b:fc:a8: c2:1d:92:f6:2a:c0:41:3c:a3:2b:a4:86:00:47:30: f3:bc:44:90:ec:34:2d:bd:8e:1d:c5:76:9b:f9:b7: c6:30:5d:5f:91:97:eb:b1:55:43:0d:f8:bb:f7:34: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:4D:3D:E9:35:D1:01:7C:D0:80:6F:91:AD:75:04:07:80:82:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:01:41:b6:37:11:9c:79:91:0e:bd:9d:e7:34:df:c0:38:8f: f2:68:4c:d3:33:2a:85:ff:02:a0:bf:c5:73:6c:65:ae:f7:45: 50:ed:7d:95:26:7c:c6:47:39:5f:0c:4f:c3:18:ff:05:97:05: 0f:d5:6d:9b:19:7b:b3:0f:f9:40:60:e4:85:43:07:3e:0a:88: 0e:01:6b:7e:8f:b3:58:43:55:10:46:34:cf:ec:4a:64:05:30: 9b:f8:63:e7:7f:07:62:7c:9c:39:78:6b:aa:6e:ff:3c:6a:54: f6:6a:68:f5:14:81:98:ba:d0:a1:f3:49:75:3f:eb:21:a4:7b: 47:21:21:44:b5:55:7e:dd:3e:38:9f:83:72:d5:5d:04:4c:02: 90:43:e4:43:99:d3:2f:f7:d5:43:f6:53:6f:18:4f:60:02:c2: fd:10:2e:66:ce:94:0b:e3:2b:ce:9f:3d:78:44:09:b3:c5:df: 36:9f:23:5e:c2:ed:fe:5b:35:06:73:1a:37:6e:ad:c8:d8:1e: 76:01:81:87:8d:11:1e:7d:f6:b2:34:b4:f6:b5:a8:82:91:1b: ae:f5:25:38:fc:62:3b:d0:88:a5:5b:ae:9f:a9:d8:cc:6f:75: b1:7d:03:3e:4c:d3:9d:4b:da:cc:30:bc:9e:02:af:0b:f4:65: de:44:31:a5 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IoslIwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDBj MjJiN2Y4LWJkMWItNGQ2OS04N2FiLTQwYWUwMTczOTFhYTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALvLKEqPmK/gV7bXkuW14qH+4/0N7gWaD2oR4+j1 GhN1emGMDs4DS2DT8fAMrrQgzxIxNE2pUJDhwJhcli2rJwHVTxid0NuJhiK8+u5C TrAENJ2tyPYRoJgPv9jOCo7f+NoyWEMaQiwcSFWsON3Ih1T5I/6M5/5TLKvxuG6A SGFaAHgIYRRBEOa9bnAE2wXeCMqLAaE+PD1Id/3IWKPYFCGrPcPsVAi+uqxj/CRL CIS6fppJgw+xxYwC6q665U3FAZJebVaWfpyz2NnHS5qwW/yowh2S9irAQTyjK6SG AEcw87xEkOw0Lb2OHcV2m/m3xjBdX5GX67FVQw34u/c04XECAwEAAaOCA1UwggNR MB0GA1UdDgQWBBTnmU096TXRAXzQgG+RrXUEB4CC7zCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2FhM2YwODQxLWM0ODEtMzdj OC1hYjRlLWI5YjYzMDdkOTY3NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgS4DBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAOQFBtjcRnHmRDr2d5zTfwDiP8mhM0zMqhf8CoL/Fc2xlrvdFUO19lSZ8xkc5 XwxPwxj/BZcFD9Vtmxl7sw/5QGDkhUMHPgqIDgFrfo+zWENVEEY0z+xKZAUwm/hj 538HYnycOXhrqm7/PGpU9mpo9RSBmLrQofNJdT/rIaR7RyEhRLVVft0+OJ+DctVd BEwCkEPkQ5nTL/fVQ/ZTbxhPYALC/RAuZs6UC+Mrzp89eEQJs8XfNp8jXsLt/ls1 BnMaN26tyNgedgGBh40RHn32sjS09rWogpEbrvUlOPxiO9CIpVuun6nYzG91sX0D PkzTnUvazDC8ngKvC/Rl3kQxpQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:04 2025 by rpki-client