$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/896a1122-5061-3bef-83d8-ced7c66f2eb8.roa File: 896a1122-5061-3bef-83d8-ced7c66f2eb8.roa (raw, json) Hash identifier: kogS85mJlGSJ0qyDNw2RFy7S/wOdTMTgOstM9080lpo= Subject key identifier: 73:9E:56:A7:CB:A3:DB:7E:C9:53:B7:D6:E9:D8:12:5F:E3:69:52:E6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328583D29776DB86DB7D0404FD98A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/896a1122-5061-3bef-83d8-ced7c66f2eb8.roa Signing time: Mon 07 Mar 2022 05:00:00 +0000 ROA not before: Mon 07 Mar 2022 05:00:00 +0000 ROA not after: Sun 10 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.157.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:29:77:6d:b8:6d:b7:d0:40:4f:d9:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 7 05:00:00 2022 GMT Not After : Mar 10 05:00:00 2030 GMT Subject: CN=1d129c97-2ec0-4858-8014-8731f1ba3b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:2d:3f:d4:5a:63:c6:11:0b:47:5e:85:4e: 98:e6:94:b8:bc:a9:9b:17:b1:de:25:73:1e:39:c1: ab:e9:27:cd:4a:17:9d:85:07:96:c7:7d:d1:b1:65: ab:50:c0:b7:ba:04:db:a6:c8:d5:bb:1d:b7:91:48: 9b:27:56:a7:06:71:ed:cd:93:d9:a7:6f:9f:bc:f4: f8:ab:20:a5:22:8a:12:4c:45:bd:27:36:e3:48:dc: fa:9c:43:a3:33:f6:19:c2:3e:37:40:26:d5:8d:31: bd:0d:5a:28:37:7c:ac:90:e2:36:59:6c:87:4c:60: c9:45:5c:08:ba:59:66:c0:43:0a:c1:2f:42:69:fc: 66:55:0c:93:6a:25:e4:df:5d:9c:6d:12:f0:cc:2f: b9:7e:52:dd:61:5d:1a:54:ac:45:c7:85:23:80:3b: d4:4f:81:bd:88:c5:0a:b5:6d:6b:0c:6c:f1:81:be: 2a:fa:b9:15:de:cf:ca:e4:1e:0d:3b:68:56:9b:c9: 92:be:c1:f3:f0:0b:dc:79:4a:40:90:12:09:22:a2: 52:74:58:eb:91:3c:85:80:f6:2c:2e:2b:a0:10:5d: 40:a4:97:0b:1c:c5:22:f9:d2:5f:5b:02:d4:3d:40: cc:1c:80:0e:d3:0c:5a:87:cc:b2:16:f7:80:25:5c: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9E:56:A7:CB:A3:DB:7E:C9:53:B7:D6:E9:D8:12:5F:E3:69:52:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/896a1122-5061-3bef-83d8-ced7c66f2eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c4:4d:ea:c5:f2:80:53:75:94:32:97:d9:92:af:31:66:e7: a7:3d:83:59:b5:77:87:6e:b4:2d:85:b1:ab:8b:5b:16:71:3e: f9:ae:05:fa:f5:3a:6e:f3:e1:40:4d:03:4f:eb:a2:e2:1d:c0: 43:7b:72:ee:4c:e4:e3:0f:09:4b:a5:14:1d:16:f5:63:2b:99: a8:a1:7f:66:e9:46:df:50:3a:e7:7f:f3:02:28:c3:28:71:7f: a8:d6:11:1c:91:c6:fa:e1:10:fc:02:2c:04:17:ff:5e:05:45: 62:3c:be:c6:c1:9d:28:36:73:1d:ef:70:2f:80:0e:c2:f9:38: ed:96:13:0f:3d:5b:ff:5b:64:ce:64:d4:21:05:4d:d2:f4:23: 68:ad:78:71:1e:75:89:5f:50:0d:32:6f:e5:6f:68:bb:ab:b1: b8:db:6d:01:f4:89:2a:4b:05:28:b0:90:a5:5a:47:e0:9f:39: f8:6b:75:42:b6:08:7c:63:a9:ea:9d:d9:31:33:75:b9:18:e3: c5:2b:18:c0:0e:3e:78:88:1a:83:b0:d8:54:63:c0:d3:3f:61: 46:5a:a8:af:5c:a6:48:8c:00:b4:cc:c2:4f:f3:6f:3c:cd:c5: bb:f3:1f:c3:71:84:27:7e:1d:a9:0e:a7:4d:29:cf:4e:1f:99: ea:dd:fe:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0pd224bbfQQE/ZigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIyMDMwNzA1MDAwMFoXDTMwMDMxMDA1MDAwMFowLzEtMCsGA1UEAxMk MWQxMjljOTctMmVjMC00ODU4LTgwMTQtODczMWYxYmEzYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1AtP9RaY8YRC0dehU6Y5pS4vKmbF7HeJXMe OcGr6SfNShedhQeWx33RsWWrUMC3ugTbpsjVux23kUibJ1anBnHtzZPZp2+fvPT4 qyClIooSTEW9JzbjSNz6nEOjM/YZwj43QCbVjTG9DVooN3yskOI2WWyHTGDJRVwI ullmwEMKwS9CafxmVQyTaiXk312cbRLwzC+5flLdYV0aVKxFx4UjgDvUT4G9iMUK tW1rDGzxgb4q+rkV3s/K5B4NO2hWm8mSvsHz8AvceUpAkBIJIqJSdFjrkTyFgPYs LiugEF1ApJcLHMUi+dJfWwLUPUDMHIAO0wxah8yyFveAJVyTIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOeVqfLo9t+yVO31unYEl/jaVLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODk2YTExMjItNTA2MS0z YmVmLTgzZDgtY2VkN2M2NmYyZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHETerF8oBTdZQyl9mSrzFm56c9g1m1d4dutC2FsauLWxZxPvmuBfr1 Om7z4UBNA0/rouIdwEN7cu5M5OMPCUulFB0W9WMrmaihf2bpRt9QOud/8wIowyhx f6jWERyRxvrhEPwCLAQX/14FRWI8vsbBnSg2cx3vcC+ADsL5OO2WEw89W/9bZM5k 1CEFTdL0I2iteHEedYlfUA0yb+VvaLursbjbbQH0iSpLBSiwkKVaR+CfOfhrdUK2 CHxjqeqd2TEzdbkY48UrGMAOPniIGoOw2FRjwNM/YUZaqK9cpkiMALTMwk/zbzzN xbvzH8NxhCd+HakOp00pz04fmerd/iY= -----END CERTIFICATE-----Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org