$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa File: 01322300-81da-31b2-bdf2-b28ab6be6832.roa (raw, json) Hash identifier: itwN0Tr/ZUX8uQ6qqBb66nDbELSHw1MGKHgtPvDrwR4= Subject key identifier: 49:AE:B1:24:D1:A2:28:CD:25:EF:45:D7:43:A5:66:48:F4:49:DB:33 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC172AB508733 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa Signing time: Sat 13 Jun 2020 01:34:40 +0000 ROA not before: Fri 12 Jun 2020 04:00:00 +0000 ROA not after: Fri 22 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:ab:50:87:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 04:00:00 2020 GMT Not After : Mar 22 04:00:00 2030 GMT Subject: CN=c3e3b3d9-5cd6-4017-90f3-e77afd7bb004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d8:ed:a5:d5:b3:fa:f1:dd:4b:46:61:b5:88: d7:06:63:4f:1c:5e:7b:f1:1b:f5:64:bc:60:be:4b: d0:28:24:e4:13:7a:f6:91:b1:85:03:45:26:4f:01: ed:87:3f:dd:1f:55:ec:12:24:22:4a:ac:0f:b6:98: 2d:6b:66:5d:9e:7c:b0:0c:2f:01:e8:a7:50:88:0b: 9b:e5:00:6f:9d:30:34:1a:53:8d:87:54:16:fa:00: 9a:4e:eb:86:bc:db:aa:71:9c:c9:45:2c:77:e4:fa: b5:f9:27:f3:fa:86:5c:80:f3:a9:9d:d1:d5:6f:54: 04:43:fd:6c:fd:83:22:2e:93:9a:98:51:aa:7d:4e: bd:02:d5:ce:cf:5d:57:0e:c5:50:f0:b5:68:44:58: 14:51:27:f3:cf:ba:24:2a:e7:7d:fa:dc:9c:94:7d: 0e:6c:5b:32:f2:fc:0f:e1:1b:ce:32:f0:31:40:b2: d4:00:27:d1:d6:b5:3e:df:9f:1f:09:1d:a6:a8:0b: 29:4d:07:ce:17:81:42:10:17:e3:46:fc:3d:44:25: eb:32:1a:97:cb:9d:fa:0a:2a:9a:1c:d5:c3:a0:86: 08:5f:72:55:f3:8e:36:c9:b4:dc:46:1d:df:bb:61: 8e:8a:cc:cf:d8:e7:bd:e8:57:24:d6:76:76:d6:a6: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AE:B1:24:D1:A2:28:CD:25:EF:45:D7:43:A5:66:48:F4:49:DB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a5:f0:48:63:87:3b:64:98:2a:55:7f:b3:7e:fe:31:e6:f7: 76:8c:66:f3:2b:10:e0:05:1a:99:13:1c:42:17:20:f6:a3:46: b6:dd:2a:ae:76:7d:b6:e5:4c:e1:57:94:a1:5c:22:31:ae:7b: 73:61:7e:15:6d:ee:04:0e:da:69:ae:93:55:86:06:d6:80:ce: 11:c2:6c:2e:21:ed:c5:89:6c:d2:30:78:16:98:75:d1:46:21: e7:16:ed:e0:e9:bd:37:4c:12:40:9e:a7:8e:58:56:7d:68:89: e2:0b:63:34:16:4f:77:d1:1e:09:50:a3:e5:fe:68:a9:c4:42: cf:a8:8f:4f:e0:1b:f5:1c:6e:88:fa:3c:e4:16:35:ef:ad:c9: 98:57:78:73:60:09:c0:73:35:68:57:c3:3b:1e:e6:37:10:08: 9a:74:d5:3d:b3:92:88:37:1f:c2:a9:f5:32:6d:fa:69:7b:ba: b4:2b:93:5b:55:fd:c6:76:e4:6c:ad:69:c8:4d:65:5f:7a:26: 9d:98:51:24:39:85:1a:7e:7c:82:df:ed:90:61:12:39:21:f4: 7f:a7:0d:ae:27:ac:c0:ee:22:23:da:0a:fa:4a:3d:27:43:b5: 63:93:06:15:00:a9:1d:dc:06:0a:a4:e4:6a:8d:80:aa:28:84: f5:37:79:6f -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcqtQhzMwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA2MTIwNDAwMDBaFw0zMDAzMjIwNDAwMDBaMC8xLTArBgNVBAMTJGMz ZTNiM2Q5LTVjZDYtNDAxNy05MGYzLWU3N2FmZDdiYjAwNDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOjY7aXVs/rx3UtGYbWI1wZjTxxee/Eb9WS8YL5L 0Cgk5BN69pGxhQNFJk8B7Yc/3R9V7BIkIkqsD7aYLWtmXZ58sAwvAeinUIgLm+UA b50wNBpTjYdUFvoAmk7rhrzbqnGcyUUsd+T6tfkn8/qGXIDzqZ3R1W9UBEP9bP2D Ii6TmphRqn1OvQLVzs9dVw7FUPC1aERYFFEn88+6JCrnffrcnJR9DmxbMvL8D+Eb zjLwMUCy1AAn0da1Pt+fHwkdpqgLKU0HzheBQhAX40b8PUQl6zIal8ud+goqmhzV w6CGCF9yVfOONsm03EYd37thjorMz9jnvehXJNZ2dtamgNcCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBRJrrEk0aIozSXvRddDpWZI9EnbMzCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzAxMzIyMzAwLTgxZGEtMzFi Mi1iZGYyLWIyOGFiNmJlNjgzMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEARQveDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAOKXwSGOHO2SYKlV/s37+Meb3doxm8ysQ4AUamRMcQhcg9qNGtt0qrnZ9tuVM 4VeUoVwiMa57c2F+FW3uBA7aaa6TVYYG1oDOEcJsLiHtxYls0jB4Fph10UYh5xbt 4Om9N0wSQJ6njlhWfWiJ4gtjNBZPd9EeCVCj5f5oqcRCz6iPT+Ab9RxuiPo85BY1 763JmFd4c2AJwHM1aFfDOx7mNxAImnTVPbOSiDcfwqn1Mm36aXu6tCuTW1X9xnbk bK1pyE1lX3omnZhRJDmFGn58gt/tkGESOSH0f6cNrieswO4iI9oK+ko9J0O1Y5MG FQCpHdwGCqTkao2AqiiE9Td5bw== -----END CERTIFICATE-----Generated at Tue Mar 11 04:58:22 2025 by rpki-client