$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/314ed9ba-16ba-330a-a428-ea1fd8ef46c8.roa File: 314ed9ba-16ba-330a-a428-ea1fd8ef46c8.roa (raw, json) Hash identifier: bkvqyreMm2sl9jmLg0yRtp2MFUCzi+qSEYbbRqcOJGs= Subject key identifier: BE:44:32:52:59:D6:B4:6E:37:BB:33:95:31:87:1B:6F:6E:0D:A9:26 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328583A211027628FEF52A0624CB540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/314ed9ba-16ba-330a-a428-ea1fd8ef46c8.roa Signing time: Wed 02 Jun 2021 04:00:00 +0000 ROA not before: Wed 02 Jun 2021 04:00:00 +0000 ROA not after: Mon 15 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.196.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3a:21:10:27:62:8f:ef:52:a0:62:4c:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 2 04:00:00 2021 GMT Not After : Apr 15 04:00:00 2030 GMT Subject: CN=f4ea5a08-1b7b-471a-bf2e-3e3b1abd20e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:b6:f5:8d:b7:d7:72:72:ac:ca:52:3a:cf: d7:df:90:78:0e:3d:7e:da:d3:e7:6e:0e:11:0a:01: 7a:3b:b3:07:d8:a1:d7:4e:6f:ac:1a:92:1a:16:9f: ed:5b:de:9c:0e:9c:8d:fe:89:b3:aa:cb:0c:88:66: c0:6d:1d:ae:28:1b:6e:24:10:1e:a8:2b:9e:7c:1f: c4:63:16:5f:12:4d:0b:c0:ee:af:b5:4e:96:66:d1: e8:03:2c:87:9b:86:31:28:cd:ab:26:f8:44:ff:00: 65:f8:a9:73:1c:06:74:04:58:6e:fe:f0:2b:28:f6: 13:30:aa:85:be:52:68:6d:35:a1:18:7d:3d:d1:64: f0:4c:86:5a:a8:cc:16:af:2e:ec:af:e0:d3:b0:96: 23:00:a1:ee:09:44:3c:b0:1f:33:bc:0d:11:3f:07: 2f:35:89:4c:4d:45:a4:67:df:38:77:ee:ae:d0:e8: 31:95:e4:6f:81:be:4b:14:c2:27:cc:6c:d0:21:f4: 36:af:49:10:63:3d:ce:b6:6c:59:1a:eb:54:a1:70: 6c:46:c0:d8:db:aa:23:cc:78:98:87:45:0e:fe:f2: 69:fe:1f:42:1e:99:67:a0:29:87:ab:57:ac:95:7f: ea:2e:dc:ca:bd:e3:bc:90:07:68:d1:e6:01:37:08: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:44:32:52:59:D6:B4:6E:37:BB:33:95:31:87:1B:6F:6E:0D:A9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/314ed9ba-16ba-330a-a428-ea1fd8ef46c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.196.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0c:08:5d:2e:e2:84:ce:99:f5:8a:f4:45:d1:b4:4e:5a:91: df:23:ad:7e:89:39:a5:7e:7e:fe:42:85:7e:af:36:7a:f2:53: 9c:14:c0:31:3a:15:ed:af:c1:73:dc:21:6a:17:ce:f2:d5:e0: f2:c3:1a:45:c2:b1:82:e9:9e:ea:dd:da:91:f7:f1:18:1e:c8: 01:70:49:75:41:49:9d:62:36:4f:63:b3:0f:74:3e:00:77:4a: f9:f6:0b:de:10:7d:e0:87:96:fd:75:50:22:53:d2:a4:67:d8: 76:26:bc:07:4f:29:a3:42:6b:90:40:d6:3c:6c:2b:f4:84:f6: 03:b4:72:d3:b3:3a:db:05:8e:6f:38:8b:c5:1f:ec:b6:21:87: d0:02:b3:d2:10:5a:66:0a:39:f3:76:99:9d:0b:16:f3:fb:07: a5:ff:64:b8:fc:14:53:b1:9e:0f:68:52:32:4f:6b:d3:e1:4e: 89:2b:48:81:ef:73:1a:57:45:64:95:1f:d7:37:57:1c:fc:b4: 3c:aa:84:5d:9c:30:d0:a6:3f:4e:bf:88:a6:54:c7:0c:54:60: 40:4a:90:bb:4d:5c:1d:e8:49:6a:b4:7a:4f:fb:6b:55:18:9d: d9:33:de:26:4a:56:0a:43:a8:ea:65:41:87:fb:e3:81:0f:8b: e1:b9:84:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDohECdij+9SoGJMtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIxMDYwMjA0MDAwMFoXDTMwMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk ZjRlYTVhMDgtMWI3Yi00NzFhLWJmMmUtM2UzYjFhYmQyMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYG29Y2313JyrMpSOs/X35B4Dj1+2tPnbg4R CgF6O7MH2KHXTm+sGpIaFp/tW96cDpyN/omzqssMiGbAbR2uKBtuJBAeqCuefB/E YxZfEk0LwO6vtU6WZtHoAyyHm4YxKM2rJvhE/wBl+KlzHAZ0BFhu/vArKPYTMKqF vlJobTWhGH090WTwTIZaqMwWry7sr+DTsJYjAKHuCUQ8sB8zvA0RPwcvNYlMTUWk Z984d+6u0OgxleRvgb5LFMInzGzQIfQ2r0kQYz3OtmxZGutUoXBsRsDY26ojzHiY h0UO/vJp/h9CHplnoCmHq1eslX/qLtzKveO8kAdo0eYBNwih1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5EMlJZ1rRuN7szlTGHG29uDakmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzE0ZWQ5YmEtMTZiYS0z MzBhLWE0MjgtZWExZmQ4ZWY0NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGFMQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcMCF0u4oTOmfWK9EXRtE5akd8jrX6JOaV+fv5ChX6vNnryU5wUwDE6 Fe2vwXPcIWoXzvLV4PLDGkXCsYLpnurd2pH38RgeyAFwSXVBSZ1iNk9jsw90PgB3 Svn2C94QfeCHlv11UCJT0qRn2HYmvAdPKaNCa5BA1jxsK/SE9gO0ctOzOtsFjm84 i8Uf7LYhh9ACs9IQWmYKOfN2mZ0LFvP7B6X/ZLj8FFOxng9oUjJPa9PhTokrSIHv cxpXRWSVH9c3Vxz8tDyqhF2cMNCmP06/iKZUxwxUYEBKkLtNXB3oSWq0ek/7a1UY ndkz3iZKVgpDqOplQYf744EPi+G5hDQ= -----END CERTIFICATE-----Generated at Sun Jun 2 19:36:04 2024 by rpki-client on console-ams.rpki-client.org