$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aecafe98-b48c-38a3-86ac-7e5aa900e340.roa File: aecafe98-b48c-38a3-86ac-7e5aa900e340.roa (raw, json) Hash identifier: tFUI54Gt8MNnflalo4ZU05YujfM/0h15X84EY0hyjXk= Subject key identifier: 0D:C6:0D:7A:AD:C3:34:67:D4:88:6E:28:D2:C6:19:82:25:F5:65:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC16762296C71 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aecafe98-b48c-38a3-86ac-7e5aa900e340.roa Signing time: Fri 30 Nov 2018 01:09:01 +0000 ROA not before: Thu 29 Nov 2018 05:00:00 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 162.158.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:6c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 29 05:00:00 2018 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=5b5bf7d3-aac0-43df-b56f-fc59c8741d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:1e:52:12:6c:24:9d:34:7f:7b:57:09:f1: ae:f6:88:9c:69:b0:40:e7:7c:25:0e:3b:11:2e:41: cb:ab:c9:a4:07:f3:37:4c:42:42:a1:01:75:cf:19: ab:75:a2:c4:f7:7e:f9:96:e7:db:cd:74:f7:53:96: 51:48:4f:7d:1f:58:c2:b3:a3:04:84:2e:dd:e3:3d: c1:25:89:27:dc:43:28:61:55:16:c3:ef:c1:d3:69: ee:f8:96:6c:26:1f:8e:d5:97:ff:47:90:37:94:a9: d7:9e:a3:f5:61:07:d1:a8:80:58:f0:a2:93:f1:49: 1c:0a:9c:4c:da:d6:70:7b:9d:a8:d6:d1:82:0e:16: ec:3d:b3:81:c2:78:df:75:a7:18:30:4c:18:71:d3: 9e:51:63:0c:1f:90:5c:59:df:a5:72:2c:43:9b:dc: 3e:3b:2b:fa:a7:cf:9b:a1:41:30:58:3e:4b:26:52: 3b:df:4e:35:2a:cd:47:e5:4a:79:c8:19:c4:34:e6: 94:1f:21:94:a0:fc:94:1d:a2:3f:e7:f8:26:c5:41: 9e:29:d9:28:88:39:a5:67:54:bc:f4:88:a6:84:b9: 82:90:da:2e:24:e0:bc:6d:35:a2:63:72:77:d5:a1: 8e:9f:11:97:f0:76:4b:c4:5e:d0:02:3f:84:ac:4f: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:0D:7A:AD:C3:34:67:D4:88:6E:28:D2:C6:19:82:25:F5:65:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aecafe98-b48c-38a3-86ac-7e5aa900e340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f5:9d:ef:8e:1e:a9:37:64:ab:64:ef:1b:05:7f:d5:b9:95: da:c0:4d:fd:eb:b0:80:d4:38:27:72:e0:f5:f5:63:ea:38:2c: ea:01:ed:63:d5:22:db:74:cb:f0:12:ea:5a:8e:9c:22:bf:01: 6f:0a:30:05:77:4d:be:55:8b:3e:ea:12:12:2d:c1:06:27:d9: 5e:16:29:a9:59:82:8b:67:75:4a:44:a6:0e:77:ae:dd:33:4e: 4e:db:58:d8:05:ba:64:4c:34:08:96:88:eb:89:e6:1e:7b:c9: ee:fd:8f:30:0a:6d:58:53:70:39:0f:9c:79:93:4b:24:01:b8: 02:a1:6a:06:95:9c:b5:e5:17:ef:d3:6c:1d:14:d6:ee:53:05: b9:a2:59:a2:3e:49:85:e0:e0:34:83:d4:92:16:f3:a2:cf:78: 68:b0:bf:8e:ee:89:75:eb:bf:0a:e3:1e:84:78:22:9f:d6:6d: 5b:d7:eb:44:e5:4f:6f:ba:98:cc:22:8f:b3:3c:60:88:03:b9: bd:13:87:e0:30:34:2f:88:e7:e9:52:f4:c7:cd:e8:93:09:1e: c0:1a:33:05:2e:f7:63:92:3b:e1:a7:bf:ec:87:ca:57:cf:92: d4:98:88:4d:d6:68:bb:a2:64:5b:1b:cf:b3:7f:5f:3b:90:1a: a6:8f:95:78 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IpbHEwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDVi NWJmN2QzLWFhYzAtNDNkZi1iNTZmLWZjNTljODc0MWQ2YjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK+DHlISbCSdNH97VwnxrvaInGmwQOd8JQ47ES5B y6vJpAfzN0xCQqEBdc8Zq3WixPd++Zbn281091OWUUhPfR9YwrOjBIQu3eM9wSWJ J9xDKGFVFsPvwdNp7viWbCYfjtWX/0eQN5Sp156j9WEH0aiAWPCik/FJHAqcTNrW cHudqNbRgg4W7D2zgcJ433WnGDBMGHHTnlFjDB+QXFnfpXIsQ5vcPjsr+qfPm6FB MFg+SyZSO99ONSrNR+VKecgZxDTmlB8hlKD8lB2iP+f4JsVBninZKIg5pWdUvPSI poS5gpDaLiTgvG01omNyd9Whjp8Rl/B2S8Re0AI/hKxPOOUCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQNxg16rcM0Z9SIbijSxhmCJfVl8zCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2FlY2FmZTk4LWI0OGMtMzhh My04NmFjLTdlNWFhOTAwZTM0MC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqKenDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAJPWd744eqTdkq2TvGwV/1bmV2sBN/euwgNQ4J3Lg9fVj6jgs6gHtY9Ui23TL 8BLqWo6cIr8BbwowBXdNvlWLPuoSEi3BBifZXhYpqVmCi2d1SkSmDneu3TNOTttY 2AW6ZEw0CJaI64nmHnvJ7v2PMAptWFNwOQ+ceZNLJAG4AqFqBpWcteUX79NsHRTW 7lMFuaJZoj5JheDgNIPUkhbzos94aLC/ju6Jdeu/CuMehHgin9ZtW9frROVPb7qY zCKPszxgiAO5vROH4DA0L4jn6VL0x83okwkewBozBS73Y5I74ae/7IfKV8+S1JiI TdZou6JkWxvPs39fO5Aapo+VeA== -----END CERTIFICATE-----Generated at Sat May 11 02:48:10 2024 by rpki-client on console-fra.rpki-client.org