$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa File: 0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa (raw, json) Hash identifier: sgT86bIF0cLyPMQMTdoSHME99PKKTDmRsHcDTtyhCaE= Subject key identifier: 1A:A0:2C:B7:3A:31:5B:E0:89:10:85:6E:B5:E2:67:A4:18:61:2F:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC17324D29700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa Signing time: Mon 06 Jul 2020 15:50:47 +0000 ROA not before: Mon 06 Jul 2020 04:00:00 +0000 ROA not after: Sun 31 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d2:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 6 04:00:00 2020 GMT Not After : Mar 31 04:00:00 2030 GMT Subject: CN=118348c5-b8f9-4ae1-92fb-0c72a36dfc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c9:6a:d2:ef:cb:83:44:d5:7d:ea:76:9f:5e: 27:a3:fa:74:a0:ed:24:b9:a6:18:69:38:42:75:76: 65:6f:ae:62:83:23:40:3e:c5:c7:31:69:1c:4a:9a: 9e:2c:76:c7:df:7c:f7:42:07:80:e4:d4:da:d0:60: ab:cc:bc:fc:cf:c2:f2:61:46:e4:34:1d:d8:f6:32: 54:a2:77:26:57:c7:18:e5:33:d3:af:21:bf:78:1c: 1f:eb:00:3e:77:51:60:fa:eb:2a:be:87:ad:5d:83: 34:17:ae:31:c1:41:11:cc:25:ce:89:4e:94:ec:66: 11:b1:b2:e6:c1:be:2e:06:94:14:ad:25:e1:96:f1: 29:05:12:58:0b:1a:13:9e:10:62:3f:50:74:00:49: d4:98:22:a5:96:24:db:03:f8:b4:e2:b4:77:70:6d: c9:86:1c:54:d8:c1:b7:67:c1:92:19:be:5c:58:5b: 5d:45:7b:12:1a:ab:5f:60:8d:6b:01:71:f2:26:bd: b4:ec:30:41:b2:d8:74:29:89:bd:93:ce:75:2d:21: 66:c6:a0:6e:41:73:9e:22:04:ef:da:f4:98:8e:4b: 64:fa:11:2e:c3:d0:cf:e7:6a:64:f3:1f:3a:cb:dc: a3:98:52:c7:ee:a6:ec:06:a1:8d:15:67:ed:ba:69: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A0:2C:B7:3A:31:5B:E0:89:10:85:6E:B5:E2:67:A4:18:61:2F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f1:8c:08:15:c3:7f:2f:9c:bc:4f:93:f3:91:98:58:3d:2f: e6:ff:d0:b2:51:55:be:40:c4:b3:ff:e1:89:e4:07:20:2a:54: 64:45:1f:bd:70:16:8a:86:44:83:05:92:c4:9c:fc:d7:b6:ba: ca:1e:cf:4d:8d:0b:ba:e1:b2:01:44:95:16:0b:76:51:96:f2: 91:0f:31:ba:21:65:d5:34:52:37:ed:fc:f8:ca:3a:ee:07:8f: 5d:19:76:5c:99:09:6b:ec:4a:e0:5f:e7:1f:75:dd:1d:bc:2f: a0:12:af:be:0b:27:fd:a9:a2:e6:b8:25:54:83:47:70:c7:d7: cc:47:46:e5:f5:3c:a2:8d:18:a9:74:a8:85:e5:b6:fd:ae:68: d2:67:a7:de:df:61:d3:ff:85:52:c7:9d:95:f0:c4:ff:1d:52: 56:6f:8f:b8:20:8d:b8:b2:2e:bb:63:56:b3:52:a2:8a:45:33: e9:a3:bb:b9:7b:c6:24:28:bb:9d:4d:f5:26:d7:28:c9:7f:65: ac:0c:2d:54:d5:f1:25:cd:9e:64:29:08:0e:b7:68:17:4c:3d: d4:4f:6c:05:6e:16:db:26:f3:e6:03:39:1b:a9:8a:54:3a:95: d5:cd:8d:99:f3:68:15:fd:31:b3:cc:65:23:a1:76:d2:c8:02: 01:17:71:40 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyTSlwAwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDYwNDAwMDBaFw0zMDAzMzEwNDAwMDBaMC8xLTArBgNVBAMTJDEx ODM0OGM1LWI4ZjktNGFlMS05MmZiLTBjNzJhMzZkZmM0MTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOrJatLvy4NE1X3qdp9eJ6P6dKDtJLmmGGk4QnV2 ZW+uYoMjQD7FxzFpHEqanix2x99890IHgOTU2tBgq8y8/M/C8mFG5DQd2PYyVKJ3 JlfHGOUz068hv3gcH+sAPndRYPrrKr6HrV2DNBeuMcFBEcwlzolOlOxmEbGy5sG+ LgaUFK0l4ZbxKQUSWAsaE54QYj9QdABJ1JgipZYk2wP4tOK0d3BtyYYcVNjBt2fB khm+XFhbXUV7EhqrX2CNawFx8ia9tOwwQbLYdCmJvZPOdS0hZsagbkFzniIE79r0 mI5LZPoRLsPQz+dqZPMfOsvco5hSx+6m7AahjRVn7bppy9ECAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQaoCy3OjFb4IkQhW614mekGGEveDCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzBjZTBkY2ZhLTM5ODUtM2U0 OC05OGM4LWU3MzlkNGFmMDg5Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvOTBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAZ/GMCBXDfy+cvE+T85GYWD0v5v/QslFVvkDEs//hieQHICpUZEUfvXAWioZE gwWSxJz817a6yh7PTY0LuuGyAUSVFgt2UZbykQ8xuiFl1TRSN+38+Mo67gePXRl2 XJkJa+xK4F/nH3XdHbwvoBKvvgsn/ami5rglVINHcMfXzEdG5fU8oo0YqXSoheW2 /a5o0men3t9h0/+FUsedlfDE/x1SVm+PuCCNuLIuu2NWs1KiikUz6aO7uXvGJCi7 nU31JtcoyX9lrAwtVNXxJc2eZCkIDrdoF0w91E9sBW4W2ybz5gM5G6mKVDqV1c2N mfNoFf0xs8xlI6F20sgCARdxQA== -----END CERTIFICATE-----Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org