$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/57b1334f-6a70-3afd-ae86-643ec55f1fef.roa File: 57b1334f-6a70-3afd-ae86-643ec55f1fef.roa (raw, json) Hash identifier: TN8wOFyvLoBB5Fxuy8Tdz0CZZ3HsyJgN5Ax05rBwXsU= Subject key identifier: 39:FA:E3:D3:F4:38:81:86:F5:36:48:03:21:6C:98:4F:16:33:B2:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584029392E5C15741ACEDCB5A940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/57b1334f-6a70-3afd-ae86-643ec55f1fef.roa Signing time: Tue 06 Dec 2022 12:00:00 +0000 ROA not before: Tue 06 Dec 2022 12:00:00 +0000 ROA not after: Thu 14 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.157.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:29:39:2e:5c:15:74:1a:ce:dc:b5:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 6 12:00:00 2022 GMT Not After : Mar 14 04:00:00 2030 GMT Subject: CN=3be9e5fb-09a5-4b36-b59b-9dd3af56f1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:7f:7d:d5:b3:78:9d:5d:d0:c6:26:d8:23: 1b:a0:1c:fd:f5:ac:29:11:88:ef:da:4f:a7:66:24: 5c:87:65:ed:62:38:f9:cf:ba:7c:a7:b1:86:98:c9: f1:f7:65:e1:da:e4:e6:68:79:d1:b8:9f:1b:8c:12: f0:fd:43:10:0c:34:04:37:58:81:ba:24:a6:56:32: 35:c3:f9:d2:7b:84:8b:fd:5b:20:dc:b1:ba:c5:a6: bc:d5:bb:85:84:6c:ba:a1:d9:5f:89:44:9a:52:13: 51:17:79:76:b6:55:c5:6e:86:08:45:5c:86:da:3b: 1b:65:b8:39:2b:09:e7:fe:94:61:52:d8:6e:ac:93: 13:85:69:a3:a0:c8:15:03:17:61:9d:67:c9:40:c7: 75:43:c8:6c:fd:97:54:5c:02:2c:91:4a:87:21:0e: 1b:8f:03:7a:cd:22:0d:20:6a:9f:c1:8d:85:bb:58: 23:72:8b:f0:bc:f1:3c:83:a8:2c:54:80:f4:4c:93: 4c:46:eb:ef:51:83:33:53:c8:76:48:af:41:03:99: 56:f2:96:d1:b3:22:bd:6c:30:06:3e:4c:3e:f7:ee: 7f:42:b6:49:c7:ad:66:f4:38:7a:25:cc:aa:69:dc: 1d:18:b5:ca:04:a0:fe:92:6e:b7:bf:53:74:69:5a: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:E3:D3:F4:38:81:86:F5:36:48:03:21:6C:98:4F:16:33:B2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/57b1334f-6a70-3afd-ae86-643ec55f1fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ea:58:93:82:94:0e:83:24:ec:0f:59:93:5e:3d:93:f0:59: f6:13:f8:f9:1f:1d:9c:04:69:f9:82:a5:06:f1:92:48:c5:8b: f5:97:f9:fc:ea:ca:1c:c0:32:9c:18:8d:4e:12:c8:a9:94:79: 4f:0b:5e:5d:dd:d3:e6:3f:7e:68:18:97:c2:3d:9a:49:a2:68: 16:ed:bd:c6:e6:fa:fa:77:20:83:8f:37:ee:1b:21:46:ab:06: 1d:d1:e2:35:76:7a:c5:35:c2:5a:2e:66:62:ff:b9:be:7a:6a: c2:4d:f9:cc:13:4e:6d:2b:d4:cb:00:4d:92:0d:57:f7:d8:da: 59:6b:f6:23:db:05:5d:9f:0b:c1:99:45:26:05:24:d2:98:f7: de:b9:30:8a:81:4a:b0:30:4a:e9:d1:06:83:a2:2a:d2:72:b5: 10:c2:8a:bb:67:d9:e1:d2:de:93:8a:1d:de:60:91:ee:08:6d: 71:a3:46:af:63:28:97:90:23:f8:9d:fc:91:70:97:58:1e:0e: 12:d6:d7:6d:17:a0:c1:01:66:3d:ef:2e:29:9b:91:5b:f8:2f: 2d:c5:28:b8:b9:ac:83:e8:f3:0b:0d:22:85:99:4f:bb:4a:da: ba:36:09:fe:ae:54:75:75:40:27:22:9e:bf:98:0d:3d:71:97: 4c:58:ef:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEApOS5cFXQazty1qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIyMTIwNjEyMDAwMFoXDTMwMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk M2JlOWU1ZmItMDlhNS00YjM2LWI1OWItOWRkM2FmNTZmMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3V/fdWzeJ1d0MYm2CMboBz99awpEYjv2k+n ZiRch2XtYjj5z7p8p7GGmMnx92Xh2uTmaHnRuJ8bjBLw/UMQDDQEN1iBuiSmVjI1 w/nSe4SL/Vsg3LG6xaa81buFhGy6odlfiUSaUhNRF3l2tlXFboYIRVyG2jsbZbg5 Kwnn/pRhUthurJMThWmjoMgVAxdhnWfJQMd1Q8hs/ZdUXAIskUqHIQ4bjwN6zSIN IGqfwY2Fu1gjcovwvPE8g6gsVID0TJNMRuvvUYMzU8h2SK9BA5lW8pbRsyK9bDAG Pkw+9+5/QrZJx61m9Dh6JcyqadwdGLXKBKD+km63v1N0aVq/PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn649P0OIGG9TZIAyFsmE8WM7LoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTdiMTMzNGYtNmE3MC0z YWZkLWFlODYtNjQzZWM1NWYxZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ1mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnqWJOClA6DJOwPWZNePZPwWfYT+PkfHZwEafmCpQbxkkjFi/WX+fzq yhzAMpwYjU4SyKmUeU8LXl3d0+Y/fmgYl8I9mkmiaBbtvcbm+vp3IIOPN+4bIUar Bh3R4jV2esU1wlouZmL/ub56asJN+cwTTm0r1MsATZINV/fY2llr9iPbBV2fC8GZ RSYFJNKY9965MIqBSrAwSunRBoOiKtJytRDCirtn2eHS3pOKHd5gke4IbXGjRq9j KJeQI/id/JFwl1geDhLW120XoMEBZj3vLimbkVv4Ly3FKLi5rIPo8wsNIoWZT7tK 2ro2Cf6uVHV1QCcinr+YDT1xl0xY74A= -----END CERTIFICATE-----Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org