$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0aef00e1-21d6-32a8-81c8-12572262254a.roa File: 0aef00e1-21d6-32a8-81c8-12572262254a.roa (raw, json) Hash identifier: D58H8Rj1idDwK345b9QC8aybeAGpvcBKMwIg9+Czxeg= Subject key identifier: 97:7F:4D:69:8B:D1:74:8D:E5:94:B8:A3:24:66:65:41:B0:F9:13:22 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC172AF095AFE Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0aef00e1-21d6-32a8-81c8-12572262254a.roa Signing time: Sat 13 Jun 2020 18:55:25 +0000 ROA not before: Sat 13 Jun 2020 04:00:00 +0000 ROA not after: Sat 06 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:09:5a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 04:00:00 2020 GMT Not After : Apr 6 04:00:00 2030 GMT Subject: CN=f45de006-8749-4ee4-a0ae-e48ff21b7c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:09:8e:59:88:d2:e5:8c:6a:b5:f6:8b:08: 64:0e:b5:c5:75:25:22:5e:a8:3c:78:14:e2:06:86: 0d:86:42:c0:db:b3:c5:d8:68:7a:03:e8:a7:05:42: 60:74:43:69:df:3d:7e:2c:98:dd:07:96:0e:86:06: 04:71:85:6f:8d:b8:89:ab:be:32:87:58:d1:1c:64: 3b:8d:30:f7:9c:82:83:4a:87:83:7e:58:1f:34:28: 4f:40:7d:3f:bb:f9:be:cc:27:9f:2b:e0:cd:04:b8: a5:5d:31:2f:ab:0d:3f:99:72:45:fc:65:00:d0:50: fd:a1:7a:11:f1:8e:22:44:7a:6a:8c:a5:4c:80:2d: ac:39:ab:b1:82:40:62:58:b7:a5:90:7b:98:88:ec: 45:c1:ef:e3:01:cf:d4:62:79:9f:1c:65:45:87:77: 10:88:9a:7d:09:56:58:41:61:e5:ba:23:ce:f8:db: a4:02:04:5a:eb:e6:0e:7f:66:1e:87:84:27:2a:e8: 6b:d6:f5:93:bf:ef:9c:14:37:e6:30:37:ca:62:be: 9a:72:04:fb:4a:49:1a:62:67:49:7e:f2:93:2b:56: 1e:f6:e0:40:85:ce:da:19:77:70:b6:48:38:8d:16: 92:7a:b3:b0:22:94:df:c9:62:c9:42:04:c5:74:62: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7F:4D:69:8B:D1:74:8D:E5:94:B8:A3:24:66:65:41:B0:F9:13:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0aef00e1-21d6-32a8-81c8-12572262254a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:64:8a:92:86:52:f9:38:61:9f:d7:e3:28:97:80:26:e4:00: 55:33:7d:6e:c0:e4:dc:c8:e6:af:da:a3:9b:00:bc:12:e5:66: 79:97:4f:f8:b6:20:2c:87:43:94:47:89:d8:0c:5a:3d:3b:d7: 8c:42:4e:1b:4b:49:39:72:20:7b:72:66:7f:1b:99:1e:d2:22: b7:f4:6d:ce:9d:79:be:70:14:53:bb:af:11:bc:ab:9c:bc:83: ee:6c:79:27:ce:52:49:d1:a2:60:b5:bb:c5:02:6d:d2:c0:bb: 4a:3f:1e:ed:7f:7d:34:0e:00:d4:21:b5:41:15:dd:92:78:e1: 53:8f:0b:41:d3:f2:38:12:53:4b:07:1b:81:4f:7f:bc:fa:74: c9:f3:11:f1:7f:60:25:98:19:7f:1b:ef:87:17:10:fb:43:ac: 2a:92:c7:b2:1e:be:08:a6:7d:15:21:da:8a:32:df:80:35:34: 8f:4e:c7:42:42:db:ad:4d:08:81:6e:5a:da:e6:35:c5:40:b1: 46:a6:5d:a3:ec:a6:de:13:f8:c8:d8:e5:f8:98:9f:28:9d:a4: 20:45:56:94:36:4a:74:41:26:97:af:3f:53:32:3e:f0:c1:e9: 3d:7e:02:7c:1e:20:df:50:48:ba:92:5d:68:e3:b3:d6:e9:14: a9:40:6f:c4 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8JWv4wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDA0MDYwNDAwMDBaMC8xLTArBgNVBAMTJGY0 NWRlMDA2LTg3NDktNGVlNC1hMGFlLWU0OGZmMjFiN2M4ZDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANjuCY5ZiNLljGq19osIZA61xXUlIl6oPHgU4gaG DYZCwNuzxdhoegPopwVCYHRDad89fiyY3QeWDoYGBHGFb424iau+ModY0RxkO40w 95yCg0qHg35YHzQoT0B9P7v5vswnnyvgzQS4pV0xL6sNP5lyRfxlANBQ/aF6EfGO IkR6aoylTIAtrDmrsYJAYli3pZB7mIjsRcHv4wHP1GJ5nxxlRYd3EIiafQlWWEFh 5bojzvjbpAIEWuvmDn9mHoeEJyroa9b1k7/vnBQ35jA3ymK+mnIE+0pJGmJnSX7y kytWHvbgQIXO2hl3cLZIOI0WknqzsCKU38liyUIExXRiii0CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBSXf01pi9F0jeWUuKMkZmVBsPkTIjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzBhZWYwMGUxLTIxZDYtMzJh OC04MWM4LTEyNTcyMjYyMjU0YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEARQvejBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAbWSKkoZS+Thhn9fjKJeAJuQAVTN9bsDk3Mjmr9qjmwC8EuVmeZdP+LYgLIdD lEeJ2AxaPTvXjEJOG0tJOXIge3JmfxuZHtIit/Rtzp15vnAUU7uvEbyrnLyD7mx5 J85SSdGiYLW7xQJt0sC7Sj8e7X99NA4A1CG1QRXdknjhU48LQdPyOBJTSwcbgU9/ vPp0yfMR8X9gJZgZfxvvhxcQ+0OsKpLHsh6+CKZ9FSHaijLfgDU0j07HQkLbrU0I gW5a2uY1xUCxRqZdo+ym3hP4yNjl+JifKJ2kIEVWlDZKdEEml68/UzI+8MHpPX4C fB4g31BIupJdaOOz1ukUqUBvxA== -----END CERTIFICATE-----Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org