$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be9232e-1efb-3067-9da6-03165de42cdf.roa File: 8be9232e-1efb-3067-9da6-03165de42cdf.roa (raw, json) Hash identifier: PRv1TTIzbtUM89DNh9ve/HNlr6nNvABLaxxu4a/2ex4= Subject key identifier: 4D:F1:D9:D4:18:6B:49:38:F6:6C:42:BD:B7:96:24:C8:66:CF:AF:FB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732ABA79E5 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be9232e-1efb-3067-9da6-03165de42cdf.roa Signing time: Tue 07 Jul 2020 19:22:10 +0000 ROA not before: Tue 07 Jul 2020 04:00:00 +0000 ROA not after: Mon 08 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 40.76.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:ba:79:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 7 04:00:00 2020 GMT Not After : Apr 8 04:00:00 2030 GMT Subject: CN=498cfc1f-c589-478c-93c2-9e50ee3e4084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:40:f5:f5:de:35:73:c5:ac:39:85:b0:76: af:10:05:f3:48:16:58:7b:b0:b3:5e:31:4f:72:53: 0a:73:71:45:84:25:2d:45:8b:eb:60:2a:5c:f6:28: 35:40:67:5c:35:be:e4:9e:cd:ef:8b:8c:ea:73:ca: 0c:39:93:8b:0d:ee:d7:a0:3c:ef:de:73:04:01:d4: 70:45:92:08:d3:d8:5c:86:9e:f6:4f:05:b5:b1:b2: 94:0b:c7:ab:2a:c7:7b:b7:76:eb:d2:84:d2:78:a3: 00:6c:1a:7e:f7:e6:16:3e:11:37:5e:7d:48:f9:65: 42:63:b6:68:c7:83:1f:ae:46:4d:c5:c5:d2:a8:93: 57:59:d1:2b:aa:92:18:bb:2d:1c:b2:4d:42:0b:25: 2c:a2:23:11:e0:ca:10:b1:fb:1f:ef:06:4c:30:45: da:90:20:dd:fc:ba:08:a3:ae:79:1a:1a:90:f6:e4: eb:81:60:2f:86:86:4d:12:ec:ec:b5:5a:22:34:e3: 35:5b:ec:55:3d:11:a1:61:b1:21:35:a0:c2:de:43: 8c:85:1c:b4:7b:aa:84:92:ba:f7:60:e5:01:fd:0f: a9:11:30:02:ed:97:25:63:f2:b3:97:94:1a:a4:40: 03:f4:f7:fc:f6:18:0e:3d:a2:09:31:67:5c:0c:8b: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F1:D9:D4:18:6B:49:38:F6:6C:42:BD:B7:96:24:C8:66:CF:AF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be9232e-1efb-3067-9da6-03165de42cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.76.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:33:6a:d6:93:3c:bc:d5:0f:36:14:fb:78:da:9f:01:01:0e: 0d:dc:16:1b:5d:6a:fa:77:a8:dc:b4:e7:71:4c:40:85:66:ea: 57:83:9e:42:1e:fc:0e:63:64:b4:27:ed:56:93:e3:87:79:3c: 1a:69:c5:1e:41:d1:c0:56:95:8d:d6:e0:b6:fb:be:17:61:42: 42:c0:8c:21:05:f3:a2:b4:5d:35:b9:2e:fe:60:6d:2b:63:0c: 89:e9:0b:a1:5a:54:71:f6:27:16:04:93:62:40:85:34:d9:3a: cc:15:3d:ea:54:c7:d0:16:c3:36:e3:97:e1:70:8e:43:3f:e9: 6c:c2:28:2e:29:5e:20:2f:b4:e8:f3:27:2b:d4:35:de:2b:88: d2:cb:b4:ad:a1:31:98:32:46:97:cf:08:a4:af:1f:7f:5a:e0: 07:47:1e:89:71:90:ac:96:6d:65:1d:eb:f9:c2:55:1e:bc:3b: 06:32:93:fa:20:07:da:31:eb:64:02:54:7c:26:da:10:b4:67: 38:52:3a:44:31:44:7c:da:eb:68:95:67:b6:ca:75:03:95:f3: 11:46:c1:90:6d:7d:2d:fe:5d:78:7a:80:53:fb:76:f3:f5:cb: d0:77:0f:0b:51:31:c0:f9:10:08:cb:8f:ac:61:e9:53:e7:dd: e6:d2:48:c2 -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcyq6eeUwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDcwNDAwMDBaFw0zMDA0MDgwNDAwMDBaMC8xLTArBgNVBAMTJDQ5 OGNmYzFmLWM1ODktNDc4Yy05M2MyLTllNTBlZTNlNDA4NDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMz5QPX13jVzxaw5hbB2rxAF80gWWHuws14xT3JT CnNxRYQlLUWL62AqXPYoNUBnXDW+5J7N74uM6nPKDDmTiw3u16A8795zBAHUcEWS CNPYXIae9k8FtbGylAvHqyrHe7d269KE0nijAGwafvfmFj4RN159SPllQmO2aMeD H65GTcXF0qiTV1nRK6qSGLstHLJNQgslLKIjEeDKELH7H+8GTDBF2pAg3fy6CKOu eRoakPbk64FgL4aGTRLs7LVaIjTjNVvsVT0RoWGxITWgwt5DjIUctHuqhJK692Dl Af0PqREwAu2XJWPys5eUGqRAA/T3/PYYDj2iCTFnXAyLXXsCAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBRN8dnUGGtJOPZsQr23liTIZs+v+zCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzhiZTkyMzJlLTFlZmItMzA2 Ny05ZGE2LTAzMTY1ZGU0MmNkZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAihMMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQCCM2rWkzy81Q82FPt42p8BAQ4N3BYbXWr6d6jctOdxTECFZupXg55CHvwOY2S0 J+1Wk+OHeTwaacUeQdHAVpWN1uC2+74XYUJCwIwhBfOitF01uS7+YG0rYwyJ6Quh WlRx9icWBJNiQIU02TrMFT3qVMfQFsM245fhcI5DP+lswiguKV4gL7To8ycr1DXe K4jSy7StoTGYMkaXzwikrx9/WuAHRx6JcZCslm1lHev5wlUevDsGMpP6IAfaMetk AlR8JtoQtGc4UjpEMUR82utolWe2ynUDlfMRRsGQbX0t/l14eoBT+3bz9cvQdw8L UTHA+RAIy4+sYelT593m0kjC -----END CERTIFICATE-----Generated at Sat Jun 1 22:11:07 2024 by rpki-client on console-fra.rpki-client.org