$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa File: 8062e060-9cf8-3aa1-9295-7f24747f9829.roa (raw, json) Hash identifier: w6Xs5qZHG3048JDciIQcYgRDqSx2bnqKOXHdEBJh4CE= Subject key identifier: 39:A3:32:F7:F5:89:45:8D:EC:BD:43:AC:89:29:B2:AC:02:0F:E1:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC17324D2AD94 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa Signing time: Mon 06 Jul 2020 15:50:53 +0000 ROA not before: Mon 06 Jul 2020 04:00:00 +0000 ROA not after: Sat 23 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d2:ad:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 6 04:00:00 2020 GMT Not After : Mar 23 04:00:00 2030 GMT Subject: CN=7dd01b30-494e-468d-8343-ccdf9eade5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c9:7e:d8:e4:c0:d7:5f:c9:68:33:92:68:2d: 79:a1:5a:2b:31:c3:c6:55:39:72:12:7a:f4:eb:15: 46:ad:01:5b:96:f9:22:6d:cd:79:21:44:f5:5d:e6: b5:3c:a2:f9:14:c2:59:44:2b:05:7b:b2:48:49:ee: 5b:e5:96:ef:37:e4:bb:48:be:80:c6:f6:0e:3b:ba: 40:f2:16:72:0c:fb:7d:f3:2c:c1:bd:09:7d:0a:9e: d7:4a:2b:74:b7:ce:ad:75:c1:9d:88:e7:5a:43:2e: b6:06:ec:0c:32:6c:b8:12:c0:d9:d2:96:5b:99:2b: d2:91:ea:6b:4c:9f:c9:5f:67:9c:a6:3a:c6:d9:85: 11:b4:f9:39:84:d7:a6:bd:ce:af:ac:9c:0e:a1:bb: 13:88:02:ed:32:32:16:ee:a9:ad:88:ed:3e:c5:f8: e6:bc:5a:9e:a2:26:14:4d:a2:3b:48:f1:7e:31:75: 08:49:16:7e:51:08:0c:cf:a5:69:ed:98:e5:84:18: f6:2a:aa:1a:97:85:cd:16:0d:85:12:9f:d9:44:20: 78:66:16:8c:af:a2:d1:89:ab:de:02:35:35:bb:21: b8:b4:3a:74:77:45:71:45:16:3d:8f:80:6b:57:79: b5:27:53:0d:0d:02:6f:26:93:f9:58:60:e0:df:8a: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:32:F7:F5:89:45:8D:EC:BD:43:AC:89:29:B2:AC:02:0F:E1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0b:04:bc:aa:bb:0e:78:47:80:b5:4e:c5:7a:66:f5:6c:38: 76:f2:fa:c6:dc:30:6e:0e:e5:86:4a:18:fe:85:9f:ab:1f:b2: 49:0f:c7:b0:61:b4:44:c0:8b:b4:ad:47:ae:55:2f:07:a2:ee: 96:2e:b2:02:f7:89:65:29:7e:ae:62:6e:ed:b2:27:5b:ad:3a: b4:7c:1f:2e:41:40:b1:f1:9a:df:f6:a9:26:b8:aa:db:5a:40: ee:91:b9:c8:66:73:44:a2:0e:87:86:75:56:50:00:50:b5:c8: c1:3d:c4:20:b9:8b:31:8f:2b:4d:2f:d0:51:41:eb:4e:d3:df: 13:89:e8:db:a6:24:ed:dc:d8:d9:94:8e:8e:78:7c:d3:a9:c0: 64:4e:9e:88:d0:00:2b:da:6e:db:69:ef:1d:27:66:6f:11:5f: 59:c8:4f:17:5f:f5:db:17:54:9a:53:ac:cf:a9:46:e1:8c:d8: 9f:1c:fb:a6:9f:c3:66:d1:5b:df:85:9a:9b:08:fc:f3:7c:e6: f9:3e:76:f3:41:2f:b4:3a:6e:1d:d7:c6:27:50:24:e3:ed:f2: 8e:b2:cb:9f:8b:d0:10:0c:3d:58:af:ba:6d:6c:6a:86:44:7d: f5:af:30:36:db:12:3f:31:0d:66:40:af:52:c6:43:84:d2:9b: 8d:1c:1d:bd -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyTSrZQwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDYwNDAwMDBaFw0zMDAzMjMwNDAwMDBaMC8xLTArBgNVBAMTJDdk ZDAxYjMwLTQ5NGUtNDY4ZC04MzQzLWNjZGY5ZWFkZTVmZDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAO/JftjkwNdfyWgzkmgteaFaKzHDxlU5chJ69OsV Rq0BW5b5Im3NeSFE9V3mtTyi+RTCWUQrBXuySEnuW+WW7zfku0i+gMb2Dju6QPIW cgz7ffMswb0JfQqe10ordLfOrXXBnYjnWkMutgbsDDJsuBLA2dKWW5kr0pHqa0yf yV9nnKY6xtmFEbT5OYTXpr3Or6ycDqG7E4gC7TIyFu6prYjtPsX45rxanqImFE2i O0jxfjF1CEkWflEIDM+lae2Y5YQY9iqqGpeFzRYNhRKf2UQgeGYWjK+i0Ymr3gI1 NbshuLQ6dHdFcUUWPY+Aa1d5tSdTDQ0CbyaT+Vhg4N+KAFsCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQ5ozL39YlFjey9Q6yJKbKsAg/hvTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzgwNjJlMDYwLTljZjgtM2Fh MS05Mjk1LTdmMjQ3NDdmOTgyOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvNDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAJwsEvKq7DnhHgLVOxXpm9Ww4dvL6xtwwbg7lhkoY/oWfqx+ySQ/HsGG0RMCL tK1HrlUvB6Luli6yAveJZSl+rmJu7bInW606tHwfLkFAsfGa3/apJriq21pA7pG5 yGZzRKIOh4Z1VlAAULXIwT3EILmLMY8rTS/QUUHrTtPfE4no26Yk7dzY2ZSOjnh8 06nAZE6eiNAAK9pu22nvHSdmbxFfWchPF1/12xdUmlOsz6lG4YzYnxz7pp/DZtFb 34Wamwj883zm+T5280EvtDpuHdfGJ1Ak4+3yjrLLn4vQEAw9WK+6bWxqhkR99a8w NtsSPzENZkCvUsZDhNKbjRwdvQ== -----END CERTIFICATE-----Generated at Mon Jun 24 07:08:02 2024 by rpki-client on console-fra.rpki-client.org