$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa File: 9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa (raw, json) Hash identifier: GnsMy9/INL/qv+a2d+7J6Htf7+F8zYogEdF+Z7+sDwA= Subject key identifier: 79:8F:8E:6C:D3:D7:00:FC:14:A5:C1:35:73:25:48:C2:3D:A2:46:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732CBD60F6 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa Signing time: Wed 08 Jul 2020 04:44:35 +0000 ROA not before: Tue 07 Jul 2020 04:00:00 +0000 ROA not after: Fri 12 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 52.224.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2c:bd:60:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 7 04:00:00 2020 GMT Not After : Apr 12 04:00:00 2030 GMT Subject: CN=17cdb85f-db06-46a5-aa98-ccaa1bb7981b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:0b:5b:46:84:2e:7e:c7:0a:85:59:4b:e0: f6:b5:77:f2:f7:ae:c7:6b:da:a5:13:b7:29:bc:ba: 10:51:8b:e7:18:4d:63:88:3e:51:5c:16:a8:42:93: 77:32:47:c6:d7:89:34:a8:b0:4c:54:c6:da:e9:98: c6:55:f6:3a:d7:b5:2e:42:d3:ce:8b:e7:f7:97:2d: a9:6e:86:4a:00:f0:71:40:9e:50:ae:66:55:99:23: 70:0d:da:fb:69:d7:bf:62:95:54:25:cc:69:51:b4: 2c:61:bb:1f:21:35:1d:ff:60:db:88:02:ea:5b:60: 0f:18:fd:57:6c:7d:6a:16:38:88:cb:93:5f:ec:88: 27:ce:eb:63:fe:3d:08:4b:91:5a:a1:55:2e:c6:21: af:14:e8:1b:94:d8:07:a5:54:62:26:81:ab:02:7d: f7:d5:76:6c:ef:e2:b6:bc:a9:13:7f:09:e3:6b:5d: 57:20:77:f7:89:eb:c2:74:47:67:16:2a:e5:ee:b7: 58:bc:b7:8b:3e:5f:b4:b6:af:7b:11:85:07:bc:89: b9:ba:69:af:37:80:f7:49:ea:6a:46:47:02:a9:44: f3:3b:a3:78:0d:eb:a7:49:80:5d:1e:37:c5:31:cf: d0:b3:6c:96:d5:63:a8:af:d9:29:a3:1e:19:c4:71: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8F:8E:6C:D3:D7:00:FC:14:A5:C1:35:73:25:48:C2:3D:A2:46:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.224.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d4:24:b2:89:29:fc:04:22:1d:b0:85:20:d7:ca:90:85:21: f2:0e:37:6b:c7:b6:11:3b:e7:c0:8f:56:97:0c:47:06:e3:a5: 41:4b:88:6a:34:97:b6:b5:9f:cb:f5:a2:c6:d4:f8:9e:90:c3: 0a:20:e0:65:34:07:12:94:eb:3a:2b:ef:c8:ce:0d:86:55:eb: dd:f1:0d:f8:5b:e1:d0:93:92:a0:68:9d:78:97:18:27:23:83: 43:79:ba:ef:96:4b:c8:5a:d5:02:98:fd:4d:83:d0:bd:f5:f0: 5c:71:11:0d:37:61:1a:69:24:cf:00:a3:c1:87:5a:9b:8b:8f: de:1f:15:25:7c:fa:09:cf:97:23:54:14:bf:27:16:44:a4:95: ed:1f:72:98:f5:16:8b:a8:8e:1e:59:38:e3:0a:4a:22:73:d3: e8:43:d9:de:01:4a:de:a0:ac:8e:de:34:f1:39:42:a3:a5:ca: e6:5f:92:4a:50:f0:48:94:46:df:31:50:a4:50:57:3e:25:19: cd:87:91:32:b3:21:9c:08:aa:86:6c:4f:d1:86:59:c1:e5:2f: 56:62:69:0f:20:d7:01:5e:02:bf:79:61:c7:05:9e:b2:98:39: 06:38:d0:37:7f:c5:92:e9:5c:27:21:24:de:fc:0f:4c:a6:85: f6:78:02:78 -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcyy9YPYwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDcwNDAwMDBaFw0zMDA0MTIwNDAwMDBaMC8xLTArBgNVBAMTJDE3 Y2RiODVmLWRiMDYtNDZhNS1hYTk4LWNjYWExYmI3OTgxYjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKwVC1tGhC5+xwqFWUvg9rV38veux2vapRO3Kby6 EFGL5xhNY4g+UVwWqEKTdzJHxteJNKiwTFTG2umYxlX2Ote1LkLTzovn95ctqW6G SgDwcUCeUK5mVZkjcA3a+2nXv2KVVCXMaVG0LGG7HyE1Hf9g24gC6ltgDxj9V2x9 ahY4iMuTX+yIJ87rY/49CEuRWqFVLsYhrxToG5TYB6VUYiaBqwJ999V2bO/itryp E38J42tdVyB394nrwnRHZxYq5e63WLy3iz5ftLavexGFB7yJubpprzeA90nqakZH AqlE8zujeA3rp0mAXR43xTHP0LNsltVjqK/ZKaMeGcRxW48CAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBR5j45s09cA/BSlwTVzJUjCPaJGozCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzllYzA4YWU5LTZkMTEtM2Nl Yi1hMjg5LWUyZTc4YTQxOGEyMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDBTTgMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQAs1CSyiSn8BCIdsIUg18qQhSHyDjdrx7YRO+fAj1aXDEcG46VBS4hqNJe2tZ/L 9aLG1PiekMMKIOBlNAcSlOs6K+/Izg2GVevd8Q34W+HQk5KgaJ14lxgnI4NDebrv lkvIWtUCmP1Ng9C99fBccRENN2EaaSTPAKPBh1qbi4/eHxUlfPoJz5cjVBS/JxZE pJXtH3KY9RaLqI4eWTjjCkoic9PoQ9neAUreoKyO3jTxOUKjpcrmX5JKUPBIlEbf MVCkUFc+JRnNh5EysyGcCKqGbE/RhlnB5S9WYmkPINcBXgK/eWHHBZ6ymDkGONA3 f8WS6VwnISTe/A9MpoX2eAJ4 -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:18 2025 by rpki-client