$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/295206d3-cafe-37a1-bf98-f53bd8e8a660.roa File: 295206d3-cafe-37a1-bf98-f53bd8e8a660.roa (raw, json) Hash identifier: p1Pk1I1o5+zPfgvhqUoCnd3KvzsjrJA8deBYEw52Nv8= Subject key identifier: 29:9B:1B:EB:56:44:22:CB:B5:D1:4D:FC:34:54:9E:50:00:77:71:A9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F645667 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/295206d3-cafe-37a1-bf98-f53bd8e8a660.roa Signing time: Wed 08 Jul 2020 17:06:11 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Tue 12 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 208.84.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:64:56:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Mar 12 04:00:00 2030 GMT Subject: CN=b4b43eb9-2eb6-48fd-80d2-ae4756b8a8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:e0:a5:bd:9a:28:56:2d:0a:41:bd:72:0d: 80:a5:33:e9:24:39:39:e7:30:6a:b6:db:75:d0:ba: bf:75:36:3c:5e:17:c8:2a:90:c4:02:bc:48:7d:9c: d6:10:3a:de:1e:10:cf:7b:e9:82:8e:ec:b5:7b:ec: 39:3a:13:e2:f7:4b:a0:3e:7a:f9:2b:8d:43:0b:ad: cd:2f:2f:85:d5:68:3e:5b:58:05:18:3d:b1:5a:0b: ea:b7:04:02:9b:1b:02:e9:0c:d0:b8:b4:99:a3:97: a6:ca:4e:b1:3d:ed:9b:33:8c:26:23:56:6c:6a:c4: 3a:8b:74:d7:a2:79:70:ff:26:d6:6c:ce:e5:7b:ce: 3d:1e:70:fd:45:d8:dc:71:1d:fe:6d:b8:97:23:7f: 29:20:6d:c9:4d:e1:d7:a5:e7:8f:d9:90:79:95:dd: dd:e6:72:f9:12:08:a6:41:94:e7:a0:15:e0:15:9d: 4a:7b:3c:db:10:04:c6:de:ea:1f:3c:df:4a:84:4b: 5f:cf:79:5f:94:9f:49:f1:59:cf:f9:8f:6f:b3:28: 8f:74:18:fb:ef:71:7b:b8:2f:50:fb:44:cb:d2:bb: b0:6c:ee:9f:ee:04:c9:d5:5f:78:c8:93:13:37:b7: ce:1f:17:d5:58:bc:aa:3f:12:b5:91:b3:b2:9b:ae: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9B:1B:EB:56:44:22:CB:B5:D1:4D:FC:34:54:9E:50:00:77:71:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/295206d3-cafe-37a1-bf98-f53bd8e8a660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 208.84.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ff:30:f1:1b:0c:87:64:a8:b9:2a:f8:4f:77:87:95:6e:d0: a0:7f:53:b9:33:49:70:be:05:b2:a4:a7:82:78:c6:9f:c4:db: 4e:0e:00:6d:ab:43:b7:e6:af:2a:65:89:11:c6:79:7b:f7:ec: 23:ab:ad:1d:88:3f:a5:29:cb:95:6d:20:d8:f5:c2:8c:5c:e1: e6:75:1b:a5:e3:da:39:41:7f:c0:9c:d9:27:5e:5c:cf:70:e9: c4:9e:a4:8f:d6:8f:35:0b:2d:0a:e1:7c:93:b1:83:06:bd:17: 75:f8:1a:c8:e0:d7:ad:48:48:65:1c:d7:7b:5c:00:f0:f7:3b: 3c:e1:af:37:b1:49:dc:ab:4d:51:55:6e:65:ba:b8:0e:cf:8c: f3:e2:d7:d6:73:a9:a1:56:08:79:6a:03:cf:73:e1:71:da:d9: 24:56:c9:d2:58:1b:60:7b:5a:6e:33:75:5a:da:6f:cc:71:08: d4:85:3d:d3:4c:12:38:5a:7a:84:5d:ef:ee:5c:57:6a:39:82: ff:83:8d:bc:35:d7:b4:2a:e1:75:57:8c:22:5d:48:33:11:4e: 6f:4f:e9:90:2a:3e:1b:1c:7c:17:3a:0e:8e:c4:63:56:bf:77: b1:2d:ab:37:9c:9a:49:4c:db:aa:f5:46:7f:84:fd:53:2e:a5: cd:d3:b9:fc -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9kVmcwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDAzMTIwNDAwMDBaMC8xLTArBgNVBAMTJGI0 YjQzZWI5LTJlYjYtNDhmZC04MGQyLWFlNDc1NmI4YThkNTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANmu4KW9mihWLQpBvXINgKUz6SQ5OecwarbbddC6 v3U2PF4XyCqQxAK8SH2c1hA63h4Qz3vpgo7stXvsOToT4vdLoD56+SuNQwutzS8v hdVoPltYBRg9sVoL6rcEApsbAukM0Li0maOXpspOsT3tmzOMJiNWbGrEOot016J5 cP8m1mzO5XvOPR5w/UXY3HEd/m24lyN/KSBtyU3h16Xnj9mQeZXd3eZy+RIIpkGU 56AV4BWdSns82xAExt7qHzzfSoRLX895X5SfSfFZz/mPb7Moj3QY++9xe7gvUPtE y9K7sGzun+4EydVfeMiTEze3zh8X1Vi8qj8StZGzspuue8MCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQpmxvrVkQiy7XRTfw0VJ5QAHdxqTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzI5NTIwNmQzLWNhZmUtMzdh MS1iZjk4LWY1M2JkOGU4YTY2MC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANBUAzBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAR/8w8RsMh2SouSr4T3eHlW7QoH9TuTNJcL4FsqSngnjGn8TbTg4AbatDt+av KmWJEcZ5e/fsI6utHYg/pSnLlW0g2PXCjFzh5nUbpePaOUF/wJzZJ15cz3DpxJ6k j9aPNQstCuF8k7GDBr0XdfgayODXrUhIZRzXe1wA8Pc7POGvN7FJ3KtNUVVuZbq4 Ds+M8+LX1nOpoVYIeWoDz3PhcdrZJFbJ0lgbYHtabjN1WtpvzHEI1IU900wSOFp6 hF3v7lxXajmC/4ONvDXXtCrhdVeMIl1IMxFOb0/pkCo+Gxx8FzoOjsRjVr93sS2r N5yaSUzbqvVGf4T9Uy6lzdO5/A== -----END CERTIFICATE-----Generated at Sun Jun 2 09:22:29 2024 by rpki-client on console-ams.rpki-client.org