$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ae9fca4-85e8-3d3f-9b9b-0b4095c759c7.roa File: 4ae9fca4-85e8-3d3f-9b9b-0b4095c759c7.roa (raw, json) Hash identifier: 3gbS7ohd6mniQlRsrfFRcvE616y8rKTwuwGBfxGAW58= Subject key identifier: 3C:4D:30:CF:0D:34:56:00:D3:0F:9C:37:C0:94:3F:2B:78:AE:FD:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F622F85 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ae9fca4-85e8-3d3f-9b9b-0b4095c759c7.roa Signing time: Wed 08 Jul 2020 17:03:50 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Sun 03 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 20.45.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:62:2f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Mar 3 05:00:00 2030 GMT Subject: CN=c8a30b8b-d609-430d-9c53-bf0f24601968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:65:d3:2b:69:9b:96:04:65:b5:65:0a:1e: 86:ba:fd:7d:e6:5b:ec:6f:29:60:e5:0d:5a:76:44: 64:83:6e:ae:17:50:07:41:ef:3b:5e:c3:c0:c6:eb: f5:0d:74:c0:1d:b7:dc:24:42:5c:29:2f:3e:1e:44: 75:10:07:54:df:35:43:33:65:b5:66:3c:4f:39:de: d1:4d:ee:56:b9:47:b7:86:22:24:2f:0a:27:6e:c7: f3:84:2d:19:1f:c3:9b:d5:90:33:a9:75:af:8e:71: 23:cf:fc:c3:b1:14:7a:40:55:34:80:f4:34:26:c9: 3c:58:7e:d2:fa:24:9e:fa:e4:dd:29:87:a2:5b:d4: 72:d2:98:2c:ae:c7:09:5d:45:2c:84:df:46:a2:d7: a3:0c:ec:8f:f3:54:30:27:e8:7c:22:26:f2:80:ac: 70:1f:66:09:9b:2f:c4:02:a8:df:94:23:e4:9e:3b: 1a:9f:c1:82:58:d6:a4:84:1e:6a:c2:c0:aa:d9:ff: 95:68:d4:58:01:af:fb:02:09:43:04:03:64:d2:b7: ce:78:3d:58:51:4f:9e:69:f5:d7:a4:38:e2:ab:1b: 26:de:fb:ac:75:57:00:dd:21:22:49:82:64:0a:96: f6:19:7b:f3:32:e7:58:24:10:84:f7:2d:99:3f:ba: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4D:30:CF:0D:34:56:00:D3:0F:9C:37:C0:94:3F:2B:78:AE:FD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ae9fca4-85e8-3d3f-9b9b-0b4095c759c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.45.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cc:d7:c6:8c:64:4a:6f:4d:a2:3a:b6:02:b7:98:8a:27:42: 4c:00:3b:02:62:1d:d5:70:8b:47:4d:8e:fe:c5:ec:67:68:cf: 2d:7a:b4:bd:1c:64:27:6f:8f:8f:0a:e5:e4:f9:48:d8:ed:d4: 00:6e:71:a8:96:94:9d:8f:2a:40:59:3a:7c:9f:3a:37:b7:9b: fb:11:f6:0d:7f:6b:8f:42:cd:f6:05:47:7b:55:c1:a1:a2:19: 91:33:a5:c7:5f:3c:07:0f:5f:3d:e3:18:a8:f9:9a:2a:9f:86: aa:09:41:a6:ce:70:62:f7:48:02:d6:0f:94:fe:87:e3:7b:20: f1:bf:00:65:08:48:1e:1b:7f:76:0e:7a:aa:71:a7:ce:b5:ef: ba:97:7e:c3:35:41:72:96:0f:8a:64:aa:47:dc:4f:98:50:87: 10:3d:ea:dd:2c:b9:bb:cc:60:8f:51:3b:cb:85:b5:f1:ef:b7: 8d:e6:1a:11:0e:03:c8:c2:20:79:d7:1a:95:6c:2a:e5:28:74: e3:6d:43:1c:57:e4:bb:83:9f:39:9d:eb:18:2f:62:69:e5:47: 0d:9c:53:9d:41:a0:10:2a:71:03:8b:ac:79:5c:1a:51:9e:08: 29:25:2d:b5:10:f7:0f:4b:9a:71:20:8f:1e:74:75:45:92:64: b3:ad:cf:81 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9iL4UwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDAzMDMwNTAwMDBaMC8xLTArBgNVBAMTJGM4 YTMwYjhiLWQ2MDktNDMwZC05YzUzLWJmMGYyNDYwMTk2ODCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAM9rZdMraZuWBGW1ZQoehrr9feZb7G8pYOUNWnZE ZINurhdQB0HvO17DwMbr9Q10wB233CRCXCkvPh5EdRAHVN81QzNltWY8Tzne0U3u VrlHt4YiJC8KJ27H84QtGR/Dm9WQM6l1r45xI8/8w7EUekBVNID0NCbJPFh+0vok nvrk3SmHolvUctKYLK7HCV1FLITfRqLXowzsj/NUMCfofCIm8oCscB9mCZsvxAKo 35Qj5J47Gp/BgljWpIQeasLAqtn/lWjUWAGv+wIJQwQDZNK3zng9WFFPnmn116Q4 4qsbJt77rHVXAN0hIkmCZAqW9hl78zLnWCQQhPctmT+6Aq8CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQ8TTDPDTRWANMPnDfAlD8reK79YjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzRhZTlmY2E0LTg1ZTgtM2Qz Zi05YjliLTBiNDA5NWM3NTljNy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBQtgDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAiszXxoxkSm9Nojq2AreYiidCTAA7AmId1XCLR02O/sXsZ2jPLXq0vRxkJ2+P jwrl5PlI2O3UAG5xqJaUnY8qQFk6fJ86N7eb+xH2DX9rj0LN9gVHe1XBoaIZkTOl x188Bw9fPeMYqPmaKp+GqglBps5wYvdIAtYPlP6H43sg8b8AZQhIHht/dg56qnGn zrXvupd+wzVBcpYPimSqR9xPmFCHED3q3Sy5u8xgj1E7y4W18e+3jeYaEQ4DyMIg edcalWwq5Sh0421DHFfku4OfOZ3rGC9iaeVHDZxTnUGgECpxA4useVwaUZ4IKSUt tRD3D0uacSCPHnR1RZJks63PgQ== -----END CERTIFICATE-----Generated at Mon May 20 15:23:11 2024 by rpki-client on console-fra.rpki-client.org