$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/89c65982-677e-32ab-b735-e3bcad2dfa89.roa File: 89c65982-677e-32ab-b735-e3bcad2dfa89.roa (raw, json) Hash identifier: AmAatyOdb2N3Qf2kMS8IUorUjeoVhJDeBjA1YvPA05g= Subject key identifier: 4D:E4:B2:CD:45:FA:31:44:1C:15:98:5F:70:3F:54:90:79:01:BA:75 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F6A0A23 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/89c65982-677e-32ab-b735-e3bcad2dfa89.roa Signing time: Wed 08 Jul 2020 17:12:25 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Fri 08 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 65.52.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:6a:0a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Mar 8 05:00:00 2030 GMT Subject: CN=353141ba-ab91-43a1-be1d-ffa4e80a1008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:5c:be:c5:e9:fb:ca:da:71:5a:b8:90:1f: eb:7b:af:8f:fc:a2:d5:3f:b0:92:82:4b:8c:14:2b: 6b:8b:0b:d9:5b:36:63:f5:6e:0f:f9:59:16:0c:e1: a7:6a:fc:88:c8:db:d4:af:e1:28:9a:f6:45:5a:c7: 41:1c:24:34:99:5f:c0:36:ad:91:a9:a9:47:e0:26: 79:b5:82:9e:38:d9:ff:07:fb:dd:4b:95:f9:52:12: 3e:74:2f:56:81:c2:a4:42:08:8f:9b:e9:3d:f6:63: ac:f3:d3:94:fd:25:9c:1e:08:0d:45:05:ab:b3:2f: 36:46:9d:01:d7:bf:d7:ed:7b:28:18:75:c5:2c:07: 68:da:53:56:3f:01:67:ce:e3:b9:16:5a:4b:18:f6: bb:a2:73:a7:3f:14:9d:1b:b2:13:83:49:ff:16:51: c9:df:a5:b4:57:7a:06:9c:0a:28:62:b1:ed:5d:ab: a7:e4:45:e7:cd:5f:ab:2c:6c:82:75:94:29:36:59: 62:b4:ac:86:c3:f0:80:1c:9d:c8:58:44:95:a9:5e: 3e:7e:6d:d5:5c:5e:cd:9b:f8:28:52:35:92:4d:11: 8f:bd:71:ca:97:a6:3e:5d:9f:1f:da:88:2c:8e:2c: d2:f1:0e:33:95:e7:92:76:0b:49:04:52:f0:8d:65: f4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E4:B2:CD:45:FA:31:44:1C:15:98:5F:70:3F:54:90:79:01:BA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/89c65982-677e-32ab-b735-e3bcad2dfa89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 65.52.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:43:76:c0:43:8a:ec:da:9f:1a:9a:1e:31:01:27:42:db:38: e4:42:22:02:2b:96:0e:96:c1:bb:c8:a6:82:f6:86:a9:a8:3c: 56:a0:9e:42:ad:59:7e:10:e2:59:3e:8e:6d:df:ab:9c:86:88: d1:54:12:d8:25:78:02:b3:53:29:d9:2c:b4:bf:0d:44:87:e4: 1d:02:25:2d:75:e2:51:f7:6f:b7:ca:6a:18:41:1c:fb:46:1c: d5:06:51:35:90:84:94:36:93:57:bd:b1:e5:c1:eb:ba:69:73: 2d:92:6d:97:ce:36:49:6d:46:c0:2c:1e:6c:fe:fa:83:1d:61: 7a:47:9f:bf:3e:81:69:f2:29:d7:43:a5:be:2d:04:48:d6:95: 1e:46:21:03:e4:3c:31:ce:e0:b4:f7:45:f3:a5:da:84:b3:07: 41:ed:b9:8b:3e:d4:8b:45:9e:a7:02:bb:d1:be:f6:2f:12:4d: 83:50:c3:9e:42:06:76:cd:69:ad:e0:bb:5d:68:91:82:41:4d: ba:5c:4e:bc:66:08:88:15:bd:9d:8e:55:64:81:d3:e4:9a:67: bd:22:80:65:89:8e:9c:6d:ec:4c:6d:29:52:07:8b:54:88:51: 71:e0:bb:9f:b8:8b:5a:45:b4:69:1d:df:06:d5:59:44:89:39: 42:fb:46:5e -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9qCiMwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDAzMDgwNTAwMDBaMC8xLTArBgNVBAMTJDM1 MzE0MWJhLWFiOTEtNDNhMS1iZTFkLWZmYTRlODBhMTAwODCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMsVXL7F6fvK2nFauJAf63uvj/yi1T+wkoJLjBQr a4sL2Vs2Y/VuD/lZFgzhp2r8iMjb1K/hKJr2RVrHQRwkNJlfwDatkampR+AmebWC njjZ/wf73UuV+VISPnQvVoHCpEIIj5vpPfZjrPPTlP0lnB4IDUUFq7MvNkadAde/ 1+17KBh1xSwHaNpTVj8BZ87juRZaSxj2u6Jzpz8UnRuyE4NJ/xZRyd+ltFd6BpwK KGKx7V2rp+RF581fqyxsgnWUKTZZYrSshsPwgBydyFhElalePn5t1VxezZv4KFI1 kk0Rj71xypemPl2fH9qILI4s0vEOM5XnknYLSQRS8I1l9EcCAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBRN5LLNRfoxRBwVmF9wP1SQeQG6dTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzg5YzY1OTgyLTY3N2UtMzJh Yi1iNzM1LWUzYmNhZDJkZmE4OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAkE0MFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQBQQ3bAQ4rs2p8amh4xASdC2zjkQiICK5YOlsG7yKaC9oapqDxWoJ5CrVl+EOJZ Po5t36uchojRVBLYJXgCs1Mp2Sy0vw1Eh+QdAiUtdeJR92+3ymoYQRz7RhzVBlE1 kISUNpNXvbHlweu6aXMtkm2XzjZJbUbALB5s/vqDHWF6R5+/PoFp8inXQ6W+LQRI 1pUeRiED5DwxzuC090XzpdqEswdB7bmLPtSLRZ6nArvRvvYvEk2DUMOeQgZ2zWmt 4LtdaJGCQU26XE68ZgiIFb2djlVkgdPkmme9IoBliY6cbexMbSlSB4tUiFFx4Luf uItaRbRpHd8G1VlEiTlC+0Ze -----END CERTIFICATE-----Generated at Mon May 20 15:00:18 2024 by rpki-client on console-ams.rpki-client.org