$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa File: 6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa (raw, json) Hash identifier: 9axrc29Zi0nb0Tlbg53pHZwNucAkPTD11oAhrGlJ6/w= Subject key identifier: 47:D1:62:75:3E:EB:9F:73:4B:D2:F4:02:D0:31:BB:77:7E:08:BE:BA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC172AF0B23BE Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa Signing time: Sat 13 Jun 2020 18:57:22 +0000 ROA not before: Sat 13 Jun 2020 04:00:00 +0000 ROA not after: Thu 11 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0b:23:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 04:00:00 2020 GMT Not After : Apr 11 04:00:00 2030 GMT Subject: CN=a2c3a8a2-f734-4ee4-a2a8-61ebef494445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1a:d4:8f:d2:cf:b7:e5:61:3c:56:5b:17:32: 5d:65:1b:ab:85:51:e3:1b:17:fa:5c:06:22:c0:32: 6e:66:1c:fc:34:d9:49:3b:e8:52:3c:91:90:0f:02: f1:fb:1a:2e:d0:61:0c:3c:b9:64:99:0a:17:e0:9f: b1:29:28:af:b5:da:70:64:6b:9b:43:85:b9:16:ea: 9f:dd:ef:03:00:3a:48:89:24:b8:8b:bc:b6:b5:63: 1e:4d:1b:0f:b7:de:65:e2:70:f7:df:af:08:10:6c: 1d:0b:72:4d:27:7b:18:13:a2:cc:d6:3c:08:1d:76: 8e:4c:4b:a9:ab:fb:43:41:16:1b:33:34:a7:cc:a9: cb:9a:9e:cd:ca:e1:44:83:0f:40:16:4b:a3:95:05: e1:70:35:25:b6:ea:5b:af:94:5c:7b:8f:fa:14:1b: 24:85:44:df:32:6b:73:5f:ec:87:8e:cd:be:e3:c5: db:bc:56:b7:ee:af:c5:26:3b:04:f5:66:b4:27:ec: b8:01:5e:0c:b9:c7:e0:f1:dc:76:ee:e1:d1:13:09: be:de:c6:31:d2:49:b5:24:9c:dd:fe:ad:8b:61:bb: 8d:7a:12:7e:4a:f4:0e:87:9e:e6:a9:50:49:66:d7: 2a:97:7c:4e:6d:12:d4:da:2d:31:6d:19:04:6f:66: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D1:62:75:3E:EB:9F:73:4B:D2:F4:02:D0:31:BB:77:7E:08:BE:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:82:2e:01:a7:1e:a0:21:64:a9:29:4a:24:80:c0:e1:28:3e: aa:06:9f:43:c3:42:92:91:d7:2c:af:6f:11:bc:19:99:f9:45: a3:f9:3e:96:22:bc:d0:3b:1d:b9:24:20:ae:6e:9c:82:28:6f: 43:a0:5b:13:41:21:23:61:aa:61:ab:74:b4:08:2f:69:2c:a6: 57:be:05:90:cf:1e:b1:53:eb:8a:7e:1e:11:a0:27:cc:ca:93: b9:21:8d:0f:f9:a4:0d:95:e8:84:36:3c:5b:41:06:b5:f4:6b: 73:3e:b1:3a:5b:a3:de:6f:1b:a6:5a:bc:6c:1d:52:14:8d:f4: e1:bb:34:88:41:38:b5:2a:9d:a8:a4:e2:2a:9e:ac:37:1a:51: 3e:52:1b:68:24:93:93:bc:0b:0e:8d:54:ac:a1:25:c9:2b:89: d8:70:e6:f0:be:f5:d0:a6:3a:a2:ff:95:5d:dd:e0:d1:a0:d5: 6c:b9:b6:18:78:cb:ae:29:d5:d3:18:67:5e:23:c2:f2:15:fe: ae:ee:93:83:96:60:52:a0:35:78:f9:ca:4d:ad:d6:3d:7f:04: 1d:08:24:67:f9:ca:dc:55:a0:4f:43:ad:b1:71:cd:50:1b:fe: 43:6d:5c:fe:bf:94:2a:a8:31:fc:f6:85:e8:4a:dd:aa:7a:3c: c1:ab:97:fe -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8LI74wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDA0MTEwNDAwMDBaMC8xLTArBgNVBAMTJGEy YzNhOGEyLWY3MzQtNGVlNC1hMmE4LTYxZWJlZjQ5NDQ0NTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMoa1I/Sz7flYTxWWxcyXWUbq4VR4xsX+lwGIsAy bmYc/DTZSTvoUjyRkA8C8fsaLtBhDDy5ZJkKF+CfsSkor7XacGRrm0OFuRbqn93v AwA6SIkkuIu8trVjHk0bD7feZeJw99+vCBBsHQtyTSd7GBOizNY8CB12jkxLqav7 Q0EWGzM0p8ypy5qezcrhRIMPQBZLo5UF4XA1JbbqW6+UXHuP+hQbJIVE3zJrc1/s h47NvuPF27xWt+6vxSY7BPVmtCfsuAFeDLnH4PHcdu7h0RMJvt7GMdJJtSSc3f6t i2G7jXoSfkr0Doee5qlQSWbXKpd8Tm0S1NotMW0ZBG9mQQ8CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBRH0WJ1Puufc0vS9ALQMbt3fgi+ujCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzZhMDNlZTVhLWRkZmQtM2U3 ZS04YWI2LTJlMzkyYzllMTYwYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvQDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAIYIuAaceoCFkqSlKJIDA4Sg+qgafQ8NCkpHXLK9vEbwZmflFo/k+liK80Dsd uSQgrm6cgihvQ6BbE0EhI2GqYat0tAgvaSymV74FkM8esVPrin4eEaAnzMqTuSGN D/mkDZXohDY8W0EGtfRrcz6xOluj3m8bplq8bB1SFI304bs0iEE4tSqdqKTiKp6s NxpRPlIbaCSTk7wLDo1UrKElySuJ2HDm8L710KY6ov+VXd3g0aDVbLm2GHjLrinV 0xhnXiPC8hX+ru6Tg5ZgUqA1ePnKTa3WPX8EHQgkZ/nK3FWgT0OtsXHNUBv+Q21c /r+UKqgx/PaF6Erdqno8wauX/g== -----END CERTIFICATE-----Generated at Fri Mar 14 13:22:43 2025 by rpki-client