$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa File: 8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa (raw, json) Hash identifier: NDiwlgGbOEjlry9yahsURMNgZTWvWFxFVM+6PkvyabM= Subject key identifier: F8:2C:AA:70:E5:B4:5A:54:5D:3A:12:C9:13:60:FF:79:02:ED:E9:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC17329CD3F95 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa Signing time: Tue 07 Jul 2020 15:03:03 +0000 ROA not before: Tue 07 Jul 2020 04:00:00 +0000 ROA not after: Sat 09 Mar 2030 05:00:00 +0000 asID: 8070 IP address blocks: 2001:489a:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:29:cd:3f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 7 04:00:00 2020 GMT Not After : Mar 9 05:00:00 2030 GMT Subject: CN=4ea848bd-9768-451f-91f0-5062acec8a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:33:e5:54:cc:4e:fd:16:2b:42:01:f6:c3: b9:86:62:9b:35:ba:d1:85:44:79:ee:07:a7:ce:c7: 7f:b8:72:ee:e8:29:74:30:75:40:a7:90:f4:69:a4: 09:a7:a1:00:cb:26:60:70:25:a0:4c:01:fc:c2:b2: 2d:5e:ac:96:c2:25:69:b6:95:5e:81:66:48:fd:12: 8d:b0:c9:f8:21:de:a9:4a:45:7f:af:9b:86:c1:d3: 99:26:b3:6f:16:d6:73:d3:ae:70:e6:8d:fb:a2:99: 41:dc:13:d5:e0:f6:4c:ed:5e:7a:80:25:c6:c5:60: f5:e7:f7:99:4a:a8:11:f7:64:62:db:52:80:2e:d6: 54:8b:74:8f:f5:f5:47:e6:2e:1c:81:57:5d:45:c7: e1:20:a5:e4:26:a4:b0:15:1d:7e:7d:2f:5f:fa:30: f7:b5:24:a0:69:52:9d:3c:7b:aa:08:ec:dd:c4:0f: b8:26:24:b8:e6:4d:f7:60:ea:ba:14:16:e2:16:81: 15:be:e0:79:08:fa:c0:e4:d8:2c:27:95:0d:ff:ef: da:e5:bf:25:5a:1d:2a:4e:07:e7:0d:da:0e:d3:81: ce:d3:90:9c:70:84:f3:76:c0:7e:84:86:f8:19:fb: 08:8e:ce:92:58:b8:25:27:16:c6:02:76:85:9f:46: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2C:AA:70:E5:B4:5A:54:5D:3A:12:C9:13:60:FF:79:02:ED:E9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2001:489a:2000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8d:38:b9:29:c5:dd:9e:46:8d:f2:f9:2b:31:f0:bf:e8:16: 73:31:9c:35:28:b7:88:5d:59:01:a6:5b:55:43:55:14:98:61: a5:21:2d:51:7e:12:27:33:28:0b:9c:d1:ca:0b:1d:47:8e:0e: 6d:82:2a:14:ff:6c:94:e2:3c:2d:2c:62:99:5f:2d:40:62:f2: 95:c6:8c:fb:60:d6:a3:90:18:17:58:b9:27:b1:a7:83:b0:7c: 5d:e9:54:8f:16:15:e3:32:fb:29:5d:6e:9e:7c:91:00:cd:c8: e1:d4:bd:86:2f:82:d4:a1:21:9e:ae:d1:39:f5:0f:fb:f3:4d: 0f:91:d8:8d:41:a0:bb:33:b1:94:4c:e0:0e:66:7e:61:3f:86: 05:b5:76:ed:9b:c0:07:41:8d:2b:bc:56:53:04:af:8b:59:ed: 3a:a2:73:ce:c8:dc:57:24:a8:0b:e8:9a:fc:29:a3:c8:4e:71: 3a:7e:61:c4:4c:0d:ea:dd:a1:07:80:ff:a0:f1:ce:69:41:7a: f1:2e:95:2d:1f:73:6a:aa:8b:6c:23:30:9e:c6:e5:b3:b5:38: f9:8e:0b:32:e6:2e:6f:69:b7:31:55:43:53:b4:80:61:69:d1: cd:af:6c:e5:cf:86:f1:cc:0f:d1:20:f9:fa:b0:a3:13:87:90: 23:7a:d9:63 -----BEGIN CERTIFICATE----- MIIGQTCCBSugAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcynNP5UwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDcwNDAwMDBaFw0zMDAzMDkwNTAwMDBaMC8xLTArBgNVBAMTJDRl YTg0OGJkLTk3NjgtNDUxZi05MWYwLTUwNjJhY2VjOGE5MTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKocM+VUzE79FitCAfbDuYZimzW60YVEee4Hp87H f7hy7ugpdDB1QKeQ9GmkCaehAMsmYHAloEwB/MKyLV6slsIlabaVXoFmSP0SjbDJ +CHeqUpFf6+bhsHTmSazbxbWc9OucOaN+6KZQdwT1eD2TO1eeoAlxsVg9ef3mUqo EfdkYttSgC7WVIt0j/X1R+YuHIFXXUXH4SCl5CaksBUdfn0vX/ow97UkoGlSnTx7 qgjs3cQPuCYkuOZN92DquhQW4haBFb7geQj6wOTYLCeVDf/v2uW/JVodKk4H5w3a DtOBztOQnHCE83bAfoSG+Bn7CI7Okli4JScWxgJ2hZ9GVTECAwEAAaOCA1cwggNT MB0GA1UdDgQWBBT4LKpw5bRaVF06EskTYP95Au3p6DCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzhhOGE5ZmUxLWM4MjItMzIy NS04YTIxLTM0YTZlMjRhZDI1Yi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSABSJogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQEL A4IBAQCNjTi5KcXdnkaN8vkrMfC/6BZzMZw1KLeIXVkBpltVQ1UUmGGlIS1RfhIn MygLnNHKCx1Hjg5tgioU/2yU4jwtLGKZXy1AYvKVxoz7YNajkBgXWLknsaeDsHxd 6VSPFhXjMvspXW6efJEAzcjh1L2GL4LUoSGertE59Q/7800PkdiNQaC7M7GUTOAO Zn5hP4YFtXbtm8AHQY0rvFZTBK+LWe06onPOyNxXJKgL6Jr8KaPITnE6fmHETA3q 3aEHgP+g8c5pQXrxLpUtH3NqqotsIzCexuWztTj5jgsy5i5vabcxVUNTtIBhadHN r2zlz4bxzA/RIPn6sKMTh5Ajetlj -----END CERTIFICATE-----Generated at Sun Jun 16 13:45:33 2024 by rpki-client on console-fra.rpki-client.org