$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3f5679fc-ffe1-3f4d-81d0-4ad68783a501.roa File: 3f5679fc-ffe1-3f4d-81d0-4ad68783a501.roa (raw, json) Hash identifier: HCyOrQOzf754meQ06iyjBS483qSPqJNOutaU+wCJzTg= Subject key identifier: D4:77:5A:BB:86:D4:29:99:38:01:75:AF:AB:45:51:8F:7F:9D:4C:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F62229E Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3f5679fc-ffe1-3f4d-81d0-4ad68783a501.roa Signing time: Wed 08 Jul 2020 17:03:47 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Tue 05 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 20.40.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:62:22:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Mar 5 05:00:00 2030 GMT Subject: CN=fc2b64fa-2b4c-4f72-bc0c-4f688ffeb8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:b3:66:7a:29:40:ea:0e:de:b9:9c:dc:c8: ab:84:10:7c:54:5c:cf:df:a9:31:a7:1f:de:e1:b0: a2:64:91:50:7d:43:2f:86:93:4d:06:2a:7e:04:16: fd:d8:cb:cb:f3:00:c7:e3:78:d4:73:3d:3a:7e:01: 07:28:4e:67:ed:ce:e5:4a:57:75:e2:ee:46:b0:a1: 68:62:25:18:0c:38:40:f6:a7:db:fa:fe:c5:fe:c1: 99:a9:71:34:23:85:40:9b:fa:be:43:f2:07:9b:84: f9:7c:29:4b:89:f4:3b:ec:1a:d8:6e:68:5d:fa:07: 19:09:4f:2f:06:5f:99:b0:64:e9:af:ba:ea:ff:fe: 10:28:d7:d8:09:8d:b7:53:c2:88:d7:91:b6:ac:01: 62:58:c7:1b:18:06:aa:1c:d4:e8:fb:08:11:5d:bc: d0:05:7f:1c:62:52:89:48:78:f3:e4:cd:ba:d3:d4: 20:d9:75:c8:a4:2c:10:ee:17:07:09:48:e0:71:88: 10:a6:d8:f1:06:1e:cd:7b:b4:1c:a3:b2:d9:fa:af: b6:86:f9:00:2b:27:6f:ae:14:29:7a:64:1a:e1:6f: 70:17:39:14:72:e4:da:74:cc:57:8f:93:5f:96:9c: 6f:c0:05:1a:29:ce:72:15:e4:83:52:61:db:48:72: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:77:5A:BB:86:D4:29:99:38:01:75:AF:AB:45:51:8F:7F:9D:4C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3f5679fc-ffe1-3f4d-81d0-4ad68783a501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.40.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a5:f0:19:37:dd:9d:79:44:7b:53:2a:4b:b3:81:70:0d:45: 58:09:03:b0:05:c1:1a:07:76:2f:da:80:76:6f:e8:db:9d:e3: ad:cd:26:78:51:f5:1c:5d:71:f7:86:ae:6b:7d:76:ed:dd:15: be:42:65:45:a8:45:5b:ea:6b:17:70:f8:6e:33:9e:9e:3e:84: 2c:eb:0b:65:a6:a3:37:92:8b:aa:cc:04:e0:0c:a7:f5:41:38: f8:3f:f5:10:1c:bf:67:74:58:69:8e:6f:0e:94:45:8b:2f:5d: 2b:4a:5c:c9:63:f0:d1:95:b8:0f:02:2e:93:00:7d:db:64:88: 71:62:d4:1a:97:c5:35:ab:1a:de:f9:82:84:6d:da:58:f6:bb: f8:93:30:cd:e4:34:ba:de:2e:47:c0:db:65:a0:78:d3:2d:18: ba:85:ae:92:3a:59:65:fc:1a:af:97:2a:a4:b7:02:89:62:d6: 33:cd:bc:47:47:19:55:8f:ba:64:c1:ce:74:fc:a7:b3:39:1f: 13:41:e3:7b:25:fe:43:8c:07:2d:c1:28:86:a5:57:2e:5d:b4: ef:91:c2:58:77:bb:57:33:93:5c:29:fc:d2:fb:75:d0:9c:e6: 7c:67:45:63:37:19:08:b2:62:d4:8d:c1:28:1c:ea:f3:66:4e: 4f:46:c9:a2 -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9iIp4wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDAzMDUwNTAwMDBaMC8xLTArBgNVBAMTJGZj MmI2NGZhLTJiNGMtNGY3Mi1iYzBjLTRmNjg4ZmZlYjhmNjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMkVs2Z6KUDqDt65nNzIq4QQfFRcz9+pMacf3uGw omSRUH1DL4aTTQYqfgQW/djLy/MAx+N41HM9On4BByhOZ+3O5UpXdeLuRrChaGIl GAw4QPan2/r+xf7BmalxNCOFQJv6vkPyB5uE+XwpS4n0O+wa2G5oXfoHGQlPLwZf mbBk6a+66v/+ECjX2AmNt1PCiNeRtqwBYljHGxgGqhzU6PsIEV280AV/HGJSiUh4 8+TNutPUINl1yKQsEO4XBwlI4HGIEKbY8QYezXu0HKOy2fqvtob5ACsnb64UKXpk GuFvcBc5FHLk2nTMV4+TX5acb8AFGinOchXkg1Jh20hynX8CAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBTUd1q7htQpmTgBda+rRVGPf51MBjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzNmNTY3OWZjLWZmZTEtM2Y0 ZC04MWQwLTRhZDY4NzgzYTUwMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAxQoMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQCEpfAZN92deUR7UypLs4FwDUVYCQOwBcEaB3Yv2oB2b+jbneOtzSZ4UfUcXXH3 hq5rfXbt3RW+QmVFqEVb6msXcPhuM56ePoQs6wtlpqM3kouqzATgDKf1QTj4P/UQ HL9ndFhpjm8OlEWLL10rSlzJY/DRlbgPAi6TAH3bZIhxYtQal8U1qxre+YKEbdpY 9rv4kzDN5DS63i5HwNtloHjTLRi6ha6SOlll/BqvlyqktwKJYtYzzbxHRxlVj7pk wc50/KezOR8TQeN7Jf5DjActwSiGpVcuXbTvkcJYd7tXM5NcKfzS+3XQnOZ8Z0Vj NxkIsmLUjcEoHOrzZk5PRsmi -----END CERTIFICATE-----Generated at Sat Jun 1 23:05:16 2024 by rpki-client on console-ams.rpki-client.org