$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a928af80-d074-3d20-bade-d9513b0b83e9.roa File: a928af80-d074-3d20-bade-d9513b0b83e9.roa (raw, json) Hash identifier: Xtjkr3e6RH5MhsrqvmuewL/LI3jTEUuHaJ5EJ2mM0hI= Subject key identifier: AE:76:3B:7D:FA:D5:78:31:0B:B6:07:66:36:2E:63:0F:BD:36:8B:09 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F61FED7 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a928af80-d074-3d20-bade-d9513b0b83e9.roa Signing time: Wed 08 Jul 2020 17:03:38 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Sat 06 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.157.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:61:fe:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Apr 6 04:00:00 2030 GMT Subject: CN=abd9f6b8-9631-48ef-8c77-6e010ff7ced6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:56:e3:67:d4:9a:6b:70:82:55:3c:47:e8:f0: 28:35:21:05:77:e6:2c:7e:2f:f1:10:9a:4e:c7:95: 21:1d:2a:9f:c2:a4:4a:16:d1:4c:28:ff:9b:95:25: 44:c8:ee:82:21:c9:d3:30:46:a0:cc:09:f7:d2:33: 6c:06:65:1a:ef:dc:0b:69:30:1c:1b:86:7d:90:6c: 94:fa:e6:5a:d6:32:5a:97:a7:3c:ef:3f:51:14:d2: 10:01:c3:1f:2f:6f:e5:50:24:10:d0:d3:f7:ea:73: fe:17:fe:a9:9d:13:91:a8:f1:cd:e9:3c:c7:46:1c: ba:f8:dd:0c:40:39:4b:c5:75:14:dd:d9:97:f3:33: d7:32:20:b2:55:22:b5:95:8a:42:e4:ba:63:14:1e: 05:60:d3:2e:78:41:ae:a6:64:17:99:6f:93:75:1a: f2:c5:a6:b0:b9:8a:04:eb:f3:40:85:cf:38:86:b3: 4d:17:a5:d5:37:b0:a7:7b:42:59:54:4a:2d:ba:79: ce:f6:fb:95:0a:b5:73:ac:7e:c7:d4:da:ca:1b:e9: a6:fd:9b:64:62:db:52:84:0f:48:80:eb:a4:31:a6: dc:3a:31:94:73:d7:55:7e:6b:70:f0:6e:3f:8c:9f: b3:4b:fa:b5:97:24:3e:dd:cc:69:45:c0:48:6d:c3: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:3B:7D:FA:D5:78:31:0B:B6:07:66:36:2E:63:0F:BD:36:8B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a928af80-d074-3d20-bade-d9513b0b83e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2b:12:04:86:b2:78:b4:b4:15:83:63:4b:22:4f:e8:5f:13: 56:8c:4c:71:89:4d:ba:49:d4:03:97:b5:d7:f3:b7:dc:56:db: 07:12:58:5b:87:20:86:7b:fa:8d:a5:c0:75:04:c1:71:90:99: e3:a3:ad:b2:d0:ad:70:7c:bc:5c:14:ab:1a:ff:ee:69:69:5e: f1:e2:f6:04:a1:51:22:73:63:f1:cb:70:a1:17:4a:0a:10:20: 52:84:a6:48:3c:92:17:c4:29:bb:a7:77:02:8c:73:95:b1:58: fe:37:79:85:a5:1f:1d:06:18:43:8d:74:ea:98:70:72:40:c8: 5a:3c:88:84:4e:c4:cd:b1:cb:83:94:ad:94:1d:7e:be:4f:ca: ac:3c:91:95:d2:f0:b6:61:61:95:ae:d7:fb:c7:b0:bf:b5:e2: a3:e7:d2:5b:49:28:2c:96:30:c1:b6:06:82:96:65:c6:fe:0f: 12:b9:b7:d0:d2:f6:a1:86:45:3d:ae:55:e5:96:a0:a5:88:57: 1f:11:ac:40:1a:09:10:cb:81:aa:85:3e:6b:f4:b5:28:5e:4f: 6c:92:ba:aa:c5:7f:7a:28:24:de:2f:2a:9c:1e:88:a2:35:55: fe:00:b1:74:27:2f:a6:2d:32:32:fc:9e:2f:38:2a:1a:73:29: f8:e6:dd:68 -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9h/tcwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDA0MDYwNDAwMDBaMC8xLTArBgNVBAMTJGFi ZDlmNmI4LTk2MzEtNDhlZi04Yzc3LTZlMDEwZmY3Y2VkNjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOVW42fUmmtwglU8R+jwKDUhBXfmLH4v8RCaTseV IR0qn8KkShbRTCj/m5UlRMjugiHJ0zBGoMwJ99IzbAZlGu/cC2kwHBuGfZBslPrm WtYyWpenPO8/URTSEAHDHy9v5VAkENDT9+pz/hf+qZ0Tkajxzek8x0YcuvjdDEA5 S8V1FN3Zl/Mz1zIgslUitZWKQuS6YxQeBWDTLnhBrqZkF5lvk3Ua8sWmsLmKBOvz QIXPOIazTRel1Tewp3tCWVRKLbp5zvb7lQq1c6x+x9Tayhvppv2bZGLbUoQPSIDr pDGm3DoxlHPXVX5rcPBuP4yfs0v6tZckPt3MaUXASG3DvCMCAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBSudjt9+tV4MQu2B2Y2LmMPvTaLCTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2E5MjhhZjgwLWQwNzQtM2Qy MC1iYWRlLWQ5NTEzYjBiODNlOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDABSdMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQAfKxIEhrJ4tLQVg2NLIk/oXxNWjExxiU26SdQDl7XX87fcVtsHElhbhyCGe/qN pcB1BMFxkJnjo62y0K1wfLxcFKsa/+5paV7x4vYEoVEic2Pxy3ChF0oKECBShKZI PJIXxCm7p3cCjHOVsVj+N3mFpR8dBhhDjXTqmHByQMhaPIiETsTNscuDlK2UHX6+ T8qsPJGV0vC2YWGVrtf7x7C/teKj59JbSSgsljDBtgaClmXG/g8SubfQ0vahhkU9 rlXllqCliFcfEaxAGgkQy4GqhT5r9LUoXk9skrqqxX96KCTeLyqcHoiiNVX+ALF0 Jy+mLTIy/J4vOCoacyn45t1o -----END CERTIFICATE-----Generated at Sun Jun 2 07:06:18 2024 by rpki-client on console-fra.rpki-client.org