$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa File: 1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa (raw, json) Hash identifier: //4Ch7LfU88kggTAE3LJYLolP7te3KHLRIDP+RPQ0pA= Subject key identifier: 42:1A:05:58:55:D5:FD:CF:56:5B:C5:1C:DB:9E:E9:BB:3A:B3:50:43 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC172AF0EE6C7 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa Signing time: Sat 13 Jun 2020 19:01:28 +0000 ROA not before: Sat 13 Jun 2020 04:00:00 +0000 ROA not after: Tue 09 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.39.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0e:e6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 04:00:00 2020 GMT Not After : Apr 9 04:00:00 2030 GMT Subject: CN=2d659ee1-c4bf-4f1f-971a-144222497c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:bd:78:b3:c8:d5:21:2a:3d:79:d8:cc:47: 6a:5c:24:e1:87:5b:60:cb:fc:7d:b0:75:6f:e7:73: d6:8d:e9:e8:cd:19:17:ed:72:a9:20:5f:e6:86:fd: 95:e0:7e:b1:c4:34:68:4a:27:02:2b:12:b8:2d:3a: 0f:1c:9f:30:d9:72:6c:54:0d:73:22:d7:18:a7:d8: a8:68:e3:76:c3:98:cb:26:82:0b:2a:21:39:93:ca: fe:37:f7:32:92:be:8c:fd:ae:70:82:77:b8:3e:9f: c9:a7:3b:11:1b:d7:6e:ec:f4:7a:4c:4d:ba:dc:d3: 42:54:09:ce:e5:fd:32:18:1f:1b:c7:be:8b:44:65: 6c:ae:7f:1e:60:0c:63:ec:d0:90:34:37:7b:9d:66: 2b:de:74:0b:e9:ea:f0:2f:11:8d:92:16:0d:50:78: cd:58:f3:56:42:ea:5f:b8:ec:d6:e2:ac:a0:89:86: c6:86:7b:2c:d4:8b:6d:bf:53:4b:71:3e:a2:45:bb: 29:4b:13:ed:bf:a0:f2:76:ba:14:e7:f2:f7:a0:ff: 8a:65:84:6c:bd:fc:6d:51:6f:2f:bc:a3:e4:66:1c: 9b:c0:95:e5:ba:06:ee:5e:4f:e9:49:cf:9d:55:6b: 3b:32:fa:35:51:10:e4:40:07:69:21:62:bd:a8:18: e8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:05:58:55:D5:FD:CF:56:5B:C5:1C:DB:9E:E9:BB:3A:B3:50:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.39.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:be:63:ff:9a:16:70:4e:ef:08:2f:97:19:50:97:b0:2a:33: 41:29:16:c7:af:be:5b:4e:b9:86:0e:3e:94:6b:50:46:9e:fe: 38:c0:4d:3c:4e:0b:ca:89:6e:21:a6:70:6d:2a:60:38:32:81: 77:2a:55:3c:8e:80:1e:9f:b5:2f:1e:16:81:56:1d:ec:f0:fe: 10:78:0b:b7:60:a1:d2:41:07:23:fd:fd:6a:39:ec:94:58:a2: ce:e6:06:d8:33:3b:7b:af:12:50:35:17:c2:eb:95:a2:2b:2d: e6:3b:8f:a8:1d:71:da:0b:04:13:b5:ce:82:5d:67:76:ad:46: 9e:3b:9f:71:72:45:64:59:1b:c6:1f:68:2a:c7:bc:3e:35:9b: 2b:7a:1d:9f:1a:a2:0f:b7:55:30:4b:77:7c:f3:0f:7c:e4:6c: 92:6b:d7:95:05:f7:33:30:a2:2d:31:5e:9f:1e:ee:aa:e4:42: f9:65:f5:47:c5:f5:aa:3f:a0:d4:3a:b8:2d:cb:72:27:42:1f: 27:5b:be:bb:b0:bc:a0:59:db:9b:57:64:17:09:a1:45:82:6e: b2:14:49:0f:8d:93:9c:fa:14:82:31:a7:c0:69:c4:17:ff:32: 15:0e:35:68:ad:12:82:5a:5d:4b:48:3d:62:39:ad:b3:d7:a1: b4:c5:62:e7 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8O5scwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDA0MDkwNDAwMDBaMC8xLTArBgNVBAMTJDJk NjU5ZWUxLWM0YmYtNGYxZi05NzFhLTE0NDIyMjQ5N2M0NTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAM3OvXizyNUhKj152MxHalwk4YdbYMv8fbB1b+dz 1o3p6M0ZF+1yqSBf5ob9leB+scQ0aEonAisSuC06DxyfMNlybFQNcyLXGKfYqGjj dsOYyyaCCyohOZPK/jf3MpK+jP2ucIJ3uD6fyac7ERvXbuz0ekxNutzTQlQJzuX9 MhgfG8e+i0RlbK5/HmAMY+zQkDQ3e51mK950C+nq8C8RjZIWDVB4zVjzVkLqX7js 1uKsoImGxoZ7LNSLbb9TS3E+okW7KUsT7b+g8na6FOfy96D/imWEbL38bVFvL7yj 5GYcm8CV5boG7l5P6UnPnVVrOzL6NVEQ5EAHaSFivagY6MsCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBRCGgVYVdX9z1ZbxRzbnum7OrNQQzCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzFiNGI0MzliLWNjYzUtMzlh Yy1hMzQ4LWFhMzc2MTNlYTJmNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEARQnOjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAM75j/5oWcE7vCC+XGVCXsCozQSkWx6++W065hg4+lGtQRp7+OMBNPE4Lyolu IaZwbSpgODKBdypVPI6AHp+1Lx4WgVYd7PD+EHgLt2Ch0kEHI/39ajnslFiizuYG 2DM7e68SUDUXwuuVoist5juPqB1x2gsEE7XOgl1ndq1GnjufcXJFZFkbxh9oKse8 PjWbK3odnxqiD7dVMEt3fPMPfORskmvXlQX3MzCiLTFenx7uquRC+WX1R8X1qj+g 1Dq4LctyJ0IfJ1u+u7C8oFnbm1dkFwmhRYJushRJD42TnPoUgjGnwGnEF/8yFQ41 aK0SglpdS0g9Yjmts9ehtMVi5w== -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:35 2025 by rpki-client