$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0a9664e3-5115-3aa6-8247-f9fee8a6b2ae.roa File: 0a9664e3-5115-3aa6-8247-f9fee8a6b2ae.roa (raw, json) Hash identifier: DZxBcvtkhnF51MLJBRq32GNa9TTyl3MirYGw/GB+z1A= Subject key identifier: 3D:47:A8:E2:33:6B:91:88:3C:AF:73:38:E8:A7:4C:BC:6D:ED:1D:9C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F623B29 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0a9664e3-5115-3aa6-8247-f9fee8a6b2ae.roa Signing time: Wed 08 Jul 2020 17:03:53 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Sat 06 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.45.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:62:3b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Apr 6 04:00:00 2030 GMT Subject: CN=4d3119c0-7495-430b-a1d6-b6c1838a90b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:64:a5:b1:f1:10:df:5f:a4:17:76:28:ae: 2a:e2:38:03:31:ef:7a:cc:2b:78:57:bc:5d:2d:d5: 5e:82:fd:56:d2:a0:83:9f:bf:f4:ae:23:68:9c:5e: b0:47:a1:6a:e3:12:42:56:8e:ef:48:eb:cc:3e:35: 81:4f:44:df:a5:e3:86:b1:74:0e:23:a4:98:6a:af: 2f:f3:49:73:be:5f:26:14:fc:df:e0:0d:9f:39:18: ed:d2:1c:88:99:ee:c8:0f:96:59:8b:92:ab:6f:31: f6:d9:66:73:c2:3b:bd:cc:a0:e2:cd:0d:85:2d:95: 05:a0:f3:57:e1:2f:1d:e2:63:cd:f8:df:cc:72:0e: 22:5b:67:f5:74:11:d1:ca:f4:46:91:ad:a7:cf:70: 2e:7a:0b:71:bb:c0:b2:58:47:66:c1:ae:25:ee:ab: 29:3b:d2:f8:11:91:00:d9:17:9e:3a:06:10:29:cf: 7b:b3:64:50:ef:a3:9d:a8:b7:7f:3e:98:42:33:f4: 6a:d1:88:94:b9:fe:d1:3f:27:c3:e9:3d:f0:94:40: 62:8d:65:fa:75:b8:03:34:11:4e:e9:58:42:af:ee: 7d:13:aa:07:a7:7e:70:5c:8a:0e:b0:5a:71:ea:11: e8:1a:10:2c:b3:3c:19:6d:ba:96:06:2c:ec:60:f4: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:47:A8:E2:33:6B:91:88:3C:AF:73:38:E8:A7:4C:BC:6D:ED:1D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0a9664e3-5115-3aa6-8247-f9fee8a6b2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.45.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4d:0b:6b:24:1a:0e:25:66:fa:6b:96:fe:9a:2d:d4:4b:74: c2:c3:df:93:59:7c:7c:9b:81:18:41:57:31:40:3c:38:92:f9: 58:ac:4c:e2:df:3b:17:78:12:e1:bf:2b:5b:56:65:f4:e6:4e: 70:d5:b1:5b:0f:95:7a:44:c2:cc:cd:56:09:f8:f5:cb:69:90: 27:4a:65:98:5e:69:f4:9e:c8:e2:35:5a:20:d8:85:33:c3:cb: c0:9c:cc:c0:e9:43:ef:45:75:3a:2e:ed:c5:e0:89:53:76:e0: e2:1f:6f:bb:57:23:cf:57:d1:18:30:9e:1a:a5:a8:06:be:01: 56:40:82:87:48:5e:f5:5a:eb:d6:9b:e7:3d:74:d2:08:16:e8: 8e:fc:a9:8d:22:b5:b0:80:8c:05:1f:bf:17:41:48:2c:7f:6f: 1b:ce:66:45:d6:91:d2:90:e6:31:8b:04:81:d9:7c:dc:1a:cf: ac:ed:4b:91:0c:0e:e4:bc:ff:20:b5:33:84:ae:dd:ef:44:a0: 01:c3:b2:13:d5:d8:82:7e:01:f5:d4:c8:27:fe:96:bd:ab:93: ca:e7:52:89:66:9b:51:af:3a:7c:5b:6c:68:ba:5c:45:20:e9: 27:d2:64:62:69:d5:d2:ba:10:f3:7c:b9:59:d7:18:69:3e:92: 11:70:fd:14 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9iOykwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDA0MDYwNDAwMDBaMC8xLTArBgNVBAMTJDRk MzExOWMwLTc0OTUtNDMwYi1hMWQ2LWI2YzE4MzhhOTBiOTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK01ZKWx8RDfX6QXdiiuKuI4AzHveswreFe8XS3V XoL9VtKgg5+/9K4jaJxesEehauMSQlaO70jrzD41gU9E36XjhrF0DiOkmGqvL/NJ c75fJhT83+ANnzkY7dIciJnuyA+WWYuSq28x9tlmc8I7vcyg4s0NhS2VBaDzV+Ev HeJjzfjfzHIOIltn9XQR0cr0RpGtp89wLnoLcbvAslhHZsGuJe6rKTvS+BGRANkX njoGECnPe7NkUO+jnai3fz6YQjP0atGIlLn+0T8nw+k98JRAYo1l+nW4AzQRTulY Qq/ufROqB6d+cFyKDrBaceoR6BoQLLM8GW26lgYs7GD0dC0CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQ9R6jiM2uRiDyvczjop0y8be0dnDCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzBhOTY2NGUzLTUxMTUtM2Fh Ni04MjQ3LWY5ZmVlOGE2YjJhZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBQtQDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAD00LayQaDiVm+muW/pot1Et0wsPfk1l8fJuBGEFXMUA8OJL5WKxM4t87F3gS 4b8rW1Zl9OZOcNWxWw+VekTCzM1WCfj1y2mQJ0plmF5p9J7I4jVaINiFM8PLwJzM wOlD70V1Oi7txeCJU3bg4h9vu1cjz1fRGDCeGqWoBr4BVkCCh0he9Vrr1pvnPXTS CBbojvypjSK1sICMBR+/F0FILH9vG85mRdaR0pDmMYsEgdl83BrPrO1LkQwO5Lz/ ILUzhK7d70SgAcOyE9XYgn4B9dTIJ/6WvauTyudSiWabUa86fFtsaLpcRSDpJ9Jk YmnV0roQ83y5WdcYaT6SEXD9FA== -----END CERTIFICATE-----Generated at Sun Jun 2 04:21:15 2024 by rpki-client on console-ams.rpki-client.org