$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a13c270-4a50-366f-b845-304826416f1e.roa File: 7a13c270-4a50-366f-b845-304826416f1e.roa (raw, json) Hash identifier: cI+3CR1RypkA7IL3LJY5xuMstCGDQi4HMk3L50EO9Y8= Subject key identifier: 3F:C5:CC:56:C3:44:45:95:D2:F0:F3:11:3D:02:17:07:D7:85:6B:2A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F66B2BB Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a13c270-4a50-366f-b845-304826416f1e.roa Signing time: Wed 08 Jul 2020 17:08:46 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Fri 12 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 23.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:66:b2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Apr 12 04:00:00 2030 GMT Subject: CN=d0c986c6-5e88-4722-b125-43cf139edd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:8c:eb:9e:15:73:03:d9:6c:ed:40:b0:51: db:8e:d4:49:f4:3c:d2:ff:74:c5:b2:72:48:18:87: 45:b5:c6:3e:81:5c:13:e5:ee:80:93:84:af:91:1b: c0:f7:16:0c:d4:50:a1:dd:3b:65:82:6c:3a:7b:85: 07:10:83:4f:dd:76:92:aa:d3:2e:c1:62:4b:cf:8a: 81:1a:bb:b8:a8:45:6a:7d:5a:ea:c7:42:b8:81:58: da:fe:45:5c:02:0a:f2:0d:99:e1:b3:d8:41:e6:c8: a8:d2:69:53:c7:ea:0f:57:72:ee:b6:31:59:44:2a: 58:c0:2b:88:a6:30:d8:30:23:5f:26:5c:b3:b2:a5: ce:56:e0:7f:4c:d1:a0:50:ab:ed:5e:98:fd:d8:1f: a7:9c:da:ff:08:e7:be:28:ee:4b:23:55:f9:63:57: f4:3d:e3:f0:28:6e:e1:02:0a:21:8d:c5:28:7d:1c: d9:95:d3:53:61:ef:5a:8a:6b:39:1a:fd:f1:33:7c: 12:c7:92:a3:a4:ae:bf:a0:96:46:a4:e4:58:1d:ce: 66:9d:3c:be:c7:21:fc:22:27:88:2b:65:e9:8d:c6: 3a:39:58:12:7f:ed:dc:e0:a4:9c:7c:91:51:38:cf: 4b:eb:71:05:5f:c0:03:a2:4d:3b:89:73:35:01:a5: 39:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C5:CC:56:C3:44:45:95:D2:F0:F3:11:3D:02:17:07:D7:85:6B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a13c270-4a50-366f-b845-304826416f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 23.102.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ca:b4:12:d8:62:3a:4a:4d:a4:3e:1a:05:25:e5:66:24:3e: 0c:66:4c:9c:53:cb:29:ae:b2:83:91:9b:75:aa:90:11:20:2d: 94:40:33:09:21:e0:88:59:73:5b:91:42:b7:6a:36:c5:93:71: 3d:29:18:dd:45:25:2c:f3:6f:8c:4b:fc:59:5a:f1:d2:28:96: af:f3:77:6a:9b:3f:18:67:bf:2d:4b:1b:3f:b4:6d:a5:4c:7a: 56:53:07:13:9d:71:16:d3:ef:6c:ea:1e:a5:0d:b9:98:fa:d1: 46:95:57:86:9f:f1:ca:2f:89:e9:e7:85:5b:9c:d0:b6:27:91: 6a:34:95:b6:4f:19:7f:49:dd:5c:bd:58:90:c9:b6:d7:ba:53: ba:3f:fc:15:fa:7a:77:74:34:8b:44:64:99:78:5c:05:da:23: ac:c1:79:7b:ab:a2:6a:64:26:f2:83:3e:39:96:a2:af:ad:a1: 17:dd:da:a8:8a:e0:73:12:fa:62:e1:07:0d:57:a4:00:bf:37: d5:18:69:6e:da:2b:c1:b6:18:5b:4c:d4:0c:61:e0:d0:80:31: 1e:f0:10:01:24:eb:45:1b:1d:cd:4a:eb:7d:be:c9:0e:dd:bd: c3:5a:91:9b:a3:6b:3d:6c:b0:72:9a:4d:01:b5:6c:d2:8c:e5: 70:08:4f:ad -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9msrswCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDA0MTIwNDAwMDBaMC8xLTArBgNVBAMTJGQw Yzk4NmM2LTVlODgtNDcyMi1iMTI1LTQzY2YxMzllZGQ2ZDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJ76jOueFXMD2WztQLBR247USfQ80v90xbJySBiH RbXGPoFcE+XugJOEr5EbwPcWDNRQod07ZYJsOnuFBxCDT912kqrTLsFiS8+KgRq7 uKhFan1a6sdCuIFY2v5FXAIK8g2Z4bPYQebIqNJpU8fqD1dy7rYxWUQqWMAriKYw 2DAjXyZcs7Klzlbgf0zRoFCr7V6Y/dgfp5za/wjnvijuSyNV+WNX9D3j8Chu4QIK IY3FKH0c2ZXTU2HvWoprORr98TN8EseSo6Suv6CWRqTkWB3OZp08vsch/CIniCtl 6Y3GOjlYEn/t3OCknHyRUTjPS+txBV/AA6JNO4lzNQGlOcsCAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBQ/xcxWw0RFldLw8xE9AhcH14VrKjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzdhMTNjMjcwLTRhNTAtMzY2 Zi1iODQ1LTMwNDgyNjQxNmYxZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDABdmMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQANyrQS2GI6Sk2kPhoFJeVmJD4MZkycU8sprrKDkZt1qpARIC2UQDMJIeCIWXNb kUK3ajbFk3E9KRjdRSUs82+MS/xZWvHSKJav83dqmz8YZ78tSxs/tG2lTHpWUwcT nXEW0+9s6h6lDbmY+tFGlVeGn/HKL4np54VbnNC2J5FqNJW2Txl/Sd1cvViQybbX ulO6P/wV+np3dDSLRGSZeFwF2iOswXl7q6JqZCbygz45lqKvraEX3dqoiuBzEvpi 4QcNV6QAvzfVGGlu2ivBthhbTNQMYeDQgDEe8BABJOtFGx3NSut9vskO3b3DWpGb o2s9bLBymk0BtWzSjOVwCE+t -----END CERTIFICATE-----Generated at Sat Jun 1 23:05:17 2024 by rpki-client on console-ams.rpki-client.org