$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a28fa6d6-c28e-3c34-baca-81e472b579af.roa File: a28fa6d6-c28e-3c34-baca-81e472b579af.roa (raw, json) Hash identifier: 4NuzrsK5kPaeAGaTUu5VOL5ZBa1bjrMLyNJXAQma5L8= Subject key identifier: 64:8C:4A:30:34:C5:52:C4:67:0E:E6:58:75:0D:3D:B5:BA:BA:2B:DA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC17324D317C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a28fa6d6-c28e-3c34-baca-81e472b579af.roa Signing time: Mon 06 Jul 2020 15:51:20 +0000 ROA not before: Mon 06 Jul 2020 04:00:00 +0000 ROA not after: Fri 12 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Jun 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d3:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 6 04:00:00 2020 GMT Not After : Apr 12 04:00:00 2030 GMT Subject: CN=a8201702-4c0a-4bf8-82eb-0073872227dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:09:d1:04:6a:f0:8b:83:dc:e9:83:81:ca:23: e8:0c:ee:87:26:d7:f1:05:c8:a8:f7:a7:f5:5c:7f: 75:20:d7:59:81:fc:cd:17:7f:5f:e4:fc:d6:dc:a5: bd:b1:d5:0e:7c:e3:59:e9:db:fd:26:ef:8f:9b:3b: ba:6f:a0:00:9d:c4:7c:b6:47:f4:51:7a:4c:cc:0b: 45:c0:2e:0b:06:0d:51:ed:f5:46:01:ef:4b:8f:c8: bc:d1:58:09:60:fe:c3:8f:d0:93:cc:bc:01:1c:33: 90:f7:57:50:42:be:92:47:5f:c3:1c:ad:6c:85:28: fa:53:23:1f:56:3c:b6:aa:20:4c:db:d2:79:2e:2a: 24:8d:33:69:db:8e:c5:84:ce:20:f0:b8:5c:d7:12: c9:ab:b6:e6:83:96:26:20:fb:01:7f:af:ad:24:d8: e2:fc:82:72:c1:a1:0e:78:a7:f0:be:56:24:59:63: 0d:c8:39:d7:38:4d:4b:3f:3a:72:41:48:4c:26:8f: f4:ae:5c:51:f7:be:4c:37:68:f4:e1:da:9f:08:c9: 6d:1b:12:0d:60:64:f8:e5:55:c7:58:df:0e:33:86: ca:53:3a:d0:aa:b3:3c:3b:73:c4:c3:e4:65:e5:f2: 19:09:1e:cc:fe:93:3c:41:ed:88:ef:44:a0:98:d3: 4a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:4A:30:34:C5:52:C4:67:0E:E6:58:75:0D:3D:B5:BA:BA:2B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a28fa6d6-c28e-3c34-baca-81e472b579af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:51:22:bc:76:39:90:cf:77:62:d9:84:8c:22:f8:04:4f:a6: 02:fe:57:a7:79:4f:57:be:5d:ef:69:1e:56:39:e3:af:6b:51: 99:e1:26:51:d8:bc:98:04:80:6d:a9:3e:d7:8b:af:2b:2c:f7: 8c:97:08:df:e6:ba:52:3a:b2:45:3d:0a:53:04:45:37:e9:68: 92:b7:43:f1:c3:90:ee:f8:60:5b:18:cd:ae:4d:13:b1:bd:47: c8:97:71:ea:8b:6f:c7:15:4d:a0:15:b9:83:c4:9b:71:33:ff: 35:f9:67:eb:69:1c:b9:59:b8:21:40:5a:c5:09:10:13:b6:2c: e8:be:4a:51:76:eb:c8:e8:21:29:2a:2a:37:e9:87:da:c2:f4: d9:19:b2:b8:f1:12:ff:19:99:be:1f:3e:db:4f:28:90:a1:22: 5a:dc:1c:fc:ae:0f:8b:8e:49:17:7e:c0:2d:2e:8b:66:5a:5e: 27:b1:72:9b:2b:eb:29:04:be:5f:d3:85:6e:6a:6c:23:a7:db: 90:c0:5c:8d:23:17:71:c0:1c:bc:72:ab:0f:8a:a8:31:74:40: 01:52:e0:da:72:39:38:69:d4:23:e0:10:02:18:71:5c:62:ee: 9e:19:e1:f4:d5:f8:32:e0:42:f0:16:b3:4f:94:a8:a9:a2:83: 80:af:cd:64 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyTTF8AwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDYwNDAwMDBaFw0zMDA0MTIwNDAwMDBaMC8xLTArBgNVBAMTJGE4 MjAxNzAyLTRjMGEtNGJmOC04MmViLTAwNzM4NzIyMjdkYzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOMJ0QRq8IuD3OmDgcoj6AzuhybX8QXIqPen9Vx/ dSDXWYH8zRd/X+T81tylvbHVDnzjWenb/Sbvj5s7um+gAJ3EfLZH9FF6TMwLRcAu CwYNUe31RgHvS4/IvNFYCWD+w4/Qk8y8ARwzkPdXUEK+kkdfwxytbIUo+lMjH1Y8 tqogTNvSeS4qJI0zaduOxYTOIPC4XNcSyau25oOWJiD7AX+vrSTY4vyCcsGhDnin 8L5WJFljDcg51zhNSz86ckFITCaP9K5cUfe+TDdo9OHanwjJbRsSDWBk+OVVx1jf DjOGylM60KqzPDtzxMPkZeXyGQkezP6TPEHtiO9EoJjTSk0CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBRkjEowNMVSxGcO5lh1DT21uror2jCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2EyOGZhNmQ2LWMyOGUtM2Mz NC1iYWNhLTgxZTQ3MmI1NzlhZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvKDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAfVEivHY5kM93YtmEjCL4BE+mAv5Xp3lPV75d72keVjnjr2tRmeEmUdi8mASA bak+14uvKyz3jJcI3+a6UjqyRT0KUwRFN+lokrdD8cOQ7vhgWxjNrk0Tsb1HyJdx 6otvxxVNoBW5g8SbcTP/Nfln62kcuVm4IUBaxQkQE7Ys6L5KUXbryOghKSoqN+mH 2sL02RmyuPES/xmZvh8+208okKEiWtwc/K4Pi45JF37ALS6LZlpeJ7FymyvrKQS+ X9OFbmpsI6fbkMBcjSMXccAcvHKrD4qoMXRAAVLg2nI5OGnUI+AQAhhxXGLunhnh 9NX4MuBC8BazT5SoqaKDgK/NZA== -----END CERTIFICATE-----Generated at Tue Jun 25 03:11:33 2024 by rpki-client on console-fra.rpki-client.org