$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a643cdde-67d2-366c-b975-a4e9acc4036b.roa File: a643cdde-67d2-366c-b975-a4e9acc4036b.roa (raw, json) Hash identifier: 1/eJrKBJeAD4BaTMUeo8aQMwTBDIiX3cHhADc7Eup08= Subject key identifier: 0A:EB:13:2D:E6:21:91:6C:FD:96:5C:4C:0E:34:2B:C6:08:01:E7:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC172AF085B52 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a643cdde-67d2-366c-b975-a4e9acc4036b.roa Signing time: Sat 13 Jun 2020 18:54:19 +0000 ROA not before: Sat 13 Jun 2020 04:00:00 +0000 ROA not after: Fri 08 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.47.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:08:5b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 04:00:00 2020 GMT Not After : Mar 8 05:00:00 2030 GMT Subject: CN=331c2209-d087-48ff-8166-bb6519d5420e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:37:d7:98:86:a6:13:dd:98:2d:92:3a:4b: 37:9c:2e:cc:70:10:ad:97:be:ce:ae:75:16:de:19: 5d:2c:bf:f9:f4:a8:cd:b6:99:6d:c2:7d:65:09:a8: 4b:17:33:5a:16:d3:87:1d:a7:ea:65:67:0d:38:f8: 95:dd:aa:93:03:22:4a:d5:03:77:f1:9a:fe:ea:ce: 64:94:6b:45:31:3b:ee:81:3d:c2:06:c3:71:d4:29: 22:fd:36:57:fa:8d:23:07:51:ad:c4:96:a4:03:48: fc:7f:f2:02:aa:26:01:f7:4e:ac:36:13:1b:0f:e9: e1:bb:55:75:88:5d:01:b3:c2:7b:17:39:1d:2a:12: da:40:8a:e3:6b:d6:25:e6:7f:2b:74:26:a6:5d:6b: 16:67:33:ad:20:be:3c:25:b6:b2:42:11:e9:ae:fa: 03:6e:ff:5e:6f:19:39:d6:63:3b:a1:8c:f9:5d:e1: 76:48:bb:0a:88:f3:4a:df:97:ba:a6:07:96:b0:19: 13:fa:f7:f1:c1:8a:38:ea:d8:93:bf:4b:e1:9f:7f: 55:85:a1:34:23:5a:c0:52:35:88:38:48:0b:03:11: 2b:b2:e3:01:f7:48:5f:b7:ee:e9:17:0b:bf:5c:c7: cc:13:64:65:a6:fb:db:57:8f:b6:1c:fc:31:d3:b1: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EB:13:2D:E6:21:91:6C:FD:96:5C:4C:0E:34:2B:C6:08:01:E7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a643cdde-67d2-366c-b975-a4e9acc4036b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:3a:1d:a2:37:a9:87:d6:17:41:81:0e:ec:d0:d9:ae:3b:1d: 62:0a:3a:03:b0:c8:ca:07:98:69:fd:b5:eb:d9:13:20:24:16: e1:bf:62:e3:dc:4a:13:13:ba:39:b6:b6:e6:94:02:65:ff:82: 69:be:7a:9c:45:26:8f:af:37:dd:22:9a:27:65:a0:05:a2:8f: ef:61:15:07:09:9e:c8:a2:34:44:8b:73:81:2a:3d:02:9f:3d: e9:1d:eb:27:7d:01:13:8a:52:20:6e:40:ff:48:db:d6:ce:f4: b1:9f:db:77:2b:5c:f1:79:10:4e:1f:d1:e4:eb:22:36:3e:a8: 94:ff:41:71:db:5f:ea:96:9c:a9:c4:e4:2a:9c:64:8b:6f:48: 2a:60:7a:55:30:99:5f:bc:3e:09:5e:5b:6c:91:60:4b:55:59: 4b:51:49:c4:31:19:24:e8:1e:94:19:3c:0f:14:21:74:fe:c0: 4a:e4:7a:82:9a:63:41:71:cc:75:16:a8:ba:f7:8a:b4:dc:bc: a7:ba:87:9b:d7:fc:9b:f0:50:d3:0c:5e:26:e2:01:70:81:16: d2:c2:8c:34:d6:06:b3:bc:e7:31:8e:82:24:c6:34:1f:05:b0: 37:6a:33:8c:b3:24:71:19:60:fa:e4:e5:17:61:d4:ae:77:9c: 74:c1:84:49 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8IW1IwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDAzMDgwNTAwMDBaMC8xLTArBgNVBAMTJDMz MWMyMjA5LWQwODctNDhmZi04MTY2LWJiNjUxOWQ1NDIwZTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALKJN9eYhqYT3ZgtkjpLN5wuzHAQrZe+zq51Ft4Z XSy/+fSozbaZbcJ9ZQmoSxczWhbThx2n6mVnDTj4ld2qkwMiStUDd/Ga/urOZJRr RTE77oE9wgbDcdQpIv02V/qNIwdRrcSWpANI/H/yAqomAfdOrDYTGw/p4btVdYhd AbPCexc5HSoS2kCK42vWJeZ/K3Qmpl1rFmczrSC+PCW2skIR6a76A27/Xm8ZOdZj O6GM+V3hdki7CojzSt+XuqYHlrAZE/r38cGKOOrYk79L4Z9/VYWhNCNawFI1iDhI CwMRK7LjAfdIX7fu6RcLv1zHzBNkZab721ePthz8MdOxFd8CAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQK6xMt5iGRbP2WXEwONCvGCAHngzCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2E2NDNjZGRlLTY3ZDItMzY2 Yy1iOTc1LWE0ZTlhY2M0MDM2Yi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvCDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAqDodojeph9YXQYEO7NDZrjsdYgo6A7DIygeYaf2169kTICQW4b9i49xKExO6 Oba25pQCZf+Cab56nEUmj6833SKaJ2WgBaKP72EVBwmeyKI0RItzgSo9Ap896R3r J30BE4pSIG5A/0jb1s70sZ/bdytc8XkQTh/R5OsiNj6olP9Bcdtf6pacqcTkKpxk i29IKmB6VTCZX7w+CV5bbJFgS1VZS1FJxDEZJOgelBk8DxQhdP7ASuR6gppjQXHM dRaouveKtNy8p7qHm9f8m/BQ0wxeJuIBcIEW0sKMNNYGs7znMY6CJMY0HwWwN2oz jLMkcRlg+uTlF2HUrnecdMGESQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:08 2025 by rpki-client