$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aef4407d-0e5a-34d8-8126-37aa68d4334c.roa File: aef4407d-0e5a-34d8-8126-37aa68d4334c.roa (raw, json) Hash identifier: NnU8BlliVLgqWvSefdXSZscMWqgehdSPU2PsY+iZS3Y= Subject key identifier: 2A:4D:ED:EC:9C:69:11:5D:75:37:CD:4B:0D:D2:9D:AD:69:B1:F4:26 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC1676228C248 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aef4407d-0e5a-34d8-8126-37aa68d4334c.roa Signing time: Fri 30 Nov 2018 01:08:17 +0000 ROA not before: Thu 29 Nov 2018 05:00:00 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 198.41.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:c2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 29 05:00:00 2018 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=ea3ea970-a9da-4781-80fd-a0cb9a36fe68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:ce:04:a0:bd:cd:90:35:49:aa:be:fa:13: da:6c:17:a9:d7:32:08:07:3b:f0:88:30:e6:9b:21: 70:80:b9:02:54:f1:b4:09:9c:b6:f9:9d:68:ae:d2: de:e2:23:f4:8f:44:d3:38:99:e3:68:cc:7a:bf:58: 1d:4d:4e:ea:b1:bc:97:96:bd:cc:d2:9b:64:88:a2: 7f:f2:72:da:f2:cf:7b:82:67:0a:2e:48:97:37:36: 35:4e:b1:b7:d4:3a:4f:a7:22:54:3c:2a:7c:2d:75: 89:cb:0a:77:4b:34:9a:b8:79:cd:3a:58:0d:32:20: 78:d4:77:62:d7:68:3d:04:67:47:b6:45:6a:57:f1: 28:6b:79:2c:28:c2:26:ad:84:f1:57:d1:47:1a:73: d9:15:3a:57:78:5b:dc:89:8a:b6:1c:76:f5:ea:63: 24:00:64:84:d6:96:49:38:ca:06:ec:b9:99:c7:9b: 7c:92:04:c4:60:69:ef:b4:31:fc:2b:91:80:0d:af: 37:48:51:88:5c:04:37:ec:ad:36:1b:98:7d:38:a1: 3d:9a:f4:5b:ed:96:37:21:d6:a7:5a:be:f0:ef:6d: b2:8e:08:61:2d:aa:13:b3:6b:5e:90:39:3e:f9:40: a5:7e:47:54:84:78:fe:64:fc:aa:24:88:d6:db:45: ce:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4D:ED:EC:9C:69:11:5D:75:37:CD:4B:0D:D2:9D:AD:69:B1:F4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aef4407d-0e5a-34d8-8126-37aa68d4334c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:22:96:e8:8e:1e:64:03:df:44:94:af:c7:9f:94:62:4c:8b: 55:e4:e9:32:d9:13:d7:ac:03:4a:b8:49:05:eb:24:91:37:df: 80:4a:a0:93:4f:e5:76:a6:ba:8e:d7:c3:2f:70:38:fb:60:9d: 09:ca:4c:c4:65:f1:c0:97:e6:c6:47:42:8b:07:14:e7:1d:2d: 81:fc:7f:bf:24:fb:20:c8:59:e7:41:b8:aa:9a:9d:ba:34:2a: 41:0d:50:c7:0b:11:32:29:4d:c9:ca:ff:24:55:30:f8:d8:33: cf:50:55:c9:9b:92:c0:92:d4:5b:1f:ab:03:24:39:8e:f6:7b: a2:c6:a1:a7:68:e0:b8:30:d0:bd:d6:5c:19:c3:45:ea:12:ec: b9:28:87:b4:d9:e2:97:19:e2:1f:07:fc:2b:12:b6:77:3c:cd: 3a:b7:f7:ff:f3:bc:6c:c3:71:0d:38:e6:b8:60:90:05:94:e9: ad:b5:f3:57:01:f5:cc:aa:ec:77:b1:06:8b:ac:d1:94:1a:db: d4:ab:95:99:5c:17:d2:02:82:79:20:f7:87:3d:8c:ef:ad:6e: 82:7a:91:94:94:98:7e:39:a9:c4:fa:99:15:38:ee:4a:4e:cd: 8b:5e:48:8a:a5:30:2a:83:e0:a8:f8:dd:61:82:00:a0:63:dc: 09:0d:6d:3e -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IowkgwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGVh M2VhOTcwLWE5ZGEtNDc4MS04MGZkLWEwY2I5YTM2ZmU2ODCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANMlzgSgvc2QNUmqvvoT2mwXqdcyCAc78Igw5psh cIC5AlTxtAmctvmdaK7S3uIj9I9E0ziZ42jMer9YHU1O6rG8l5a9zNKbZIiif/Jy 2vLPe4JnCi5Ilzc2NU6xt9Q6T6ciVDwqfC11icsKd0s0mrh5zTpYDTIgeNR3Ytdo PQRnR7ZFalfxKGt5LCjCJq2E8VfRRxpz2RU6V3hb3ImKthx29epjJABkhNaWSTjK Buy5mcebfJIExGBp77Qx/CuRgA2vN0hRiFwEN+ytNhuYfTihPZr0W+2WNyHWp1q+ 8O9tso4IYS2qE7NrXpA5PvlApX5HVIR4/mT8qiSI1ttFzoUCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQqTe3snGkRXXU3zUsN0p2tabH0JjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2FlZjQ0MDdkLTBlNWEtMzRk OC04MTI2LTM3YWE2OGQ0MzM0Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcYp1jBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEArCKW6I4eZAPfRJSvx5+UYkyLVeTpMtkT16wDSrhJBeskkTffgEqgk0/ldqa6 jtfDL3A4+2CdCcpMxGXxwJfmxkdCiwcU5x0tgfx/vyT7IMhZ50G4qpqdujQqQQ1Q xwsRMilNycr/JFUw+Ngzz1BVyZuSwJLUWx+rAyQ5jvZ7osahp2jguDDQvdZcGcNF 6hLsuSiHtNnilxniHwf8KxK2dzzNOrf3//O8bMNxDTjmuGCQBZTprbXzVwH1zKrs d7EGi6zRlBrb1KuVmVwX0gKCeSD3hz2M761ugnqRlJSYfjmpxPqZFTjuSk7Ni15I iqUwKoPgqPjdYYIAoGPcCQ1tPg== -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:48 2025 by rpki-client