$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a951ae95-5985-3769-aa0d-1f4ba31ef891.roa File: a951ae95-5985-3769-aa0d-1f4ba31ef891.roa (raw, json) Hash identifier: htzHRX1PYum4ETcajWnox5p31KvLHznfaYMlYyCLhkM= Subject key identifier: AC:14:51:13:08:43:34:E3:3A:AF:4F:53:9F:C4:D8:EF:26:81:C4:56 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F6205ED Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a951ae95-5985-3769-aa0d-1f4ba31ef891.roa Signing time: Wed 08 Jul 2020 17:03:40 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Thu 04 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.33.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:62:05:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Apr 4 04:00:00 2030 GMT Subject: CN=83d61cc3-40a2-453a-88c8-f43f4157e802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bb:04:d1:0e:68:02:88:bf:28:cb:1e:8e:0e: 86:49:84:59:4c:50:a9:97:b5:dd:c1:49:0e:e9:dc: e1:b7:a0:35:15:75:07:e4:4f:7e:d9:ee:ff:0b:fb: 87:a3:e1:bd:1a:ef:4b:87:14:98:c5:ca:53:0d:7c: c1:95:6b:aa:7c:b5:29:3d:19:38:7c:4c:a3:45:c6: fb:fd:23:40:f8:44:5e:00:5a:96:3c:67:1e:a4:6c: e3:2c:0e:aa:3b:1c:58:ea:77:7e:27:00:e7:5e:92: a7:31:6d:39:2b:55:f2:a1:19:d8:8e:d5:4c:b4:b6: 72:6c:0f:3d:67:a1:fb:94:10:1e:ab:52:42:ef:76: 54:db:4d:36:75:84:0f:72:8f:2f:9b:6a:8d:0e:ee: 1e:7e:7d:88:f5:95:ab:ce:e1:fa:6a:5b:31:0a:ef: c7:8b:71:d8:af:a3:2a:dc:c3:61:7b:8a:59:f0:de: 97:86:d9:ed:44:14:cb:7f:0f:06:49:98:95:f2:e7: ee:a7:6f:02:f8:f2:83:3f:0c:75:3a:9a:a1:f8:68: da:66:06:d8:12:9a:ba:44:49:fc:de:70:6c:8c:e4: 3d:b5:98:f3:99:71:bc:f8:55:9f:6f:8a:6e:88:d1: bd:1f:5b:de:b8:4b:fc:d9:85:e8:8a:53:57:ac:19: cc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:51:13:08:43:34:E3:3A:AF:4F:53:9F:C4:D8:EF:26:81:C4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a951ae95-5985-3769-aa0d-1f4ba31ef891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9a:e4:fd:a4:f9:ba:13:1b:c5:b4:72:57:e0:b0:e4:29:88: f8:e4:d5:da:42:ce:26:f6:16:bf:80:ed:a7:a2:47:3d:44:bf: 94:eb:d9:fa:75:fc:f2:0e:45:f8:7b:34:de:a0:49:7b:3a:68: b2:54:88:43:03:62:34:26:15:69:85:21:1c:8d:ee:5b:ad:f4: 78:7c:ad:71:da:64:86:05:53:a2:ea:ac:06:6d:06:ce:c7:48: 65:60:fe:75:91:f4:51:29:c6:4b:2c:d7:c3:76:c9:2c:9e:d8: 02:e4:36:37:5a:63:92:17:48:2a:42:5a:5b:1a:07:5d:e3:43: 53:d6:4a:8b:bb:f5:f7:9f:a3:77:95:a1:ff:c7:d6:3e:b7:17: 81:76:a6:a0:bb:30:6d:ff:16:bd:60:19:72:c1:9b:82:ec:ca: 26:be:ad:a3:98:93:aa:8f:a9:ee:16:b3:25:2e:e4:3a:7e:5e: a0:6d:49:b8:64:83:29:67:fb:e8:13:b3:ae:49:74:38:86:fd: e2:c5:e5:49:58:46:0d:1e:0a:a4:bf:5c:3d:e4:a6:ce:b3:f0: 55:4e:18:9e:5d:11:c1:b4:1a:c1:c3:36:25:fb:44:10:9b:5f: 8e:3c:6f:88:87:75:92:d7:f6:6a:38:23:93:42:29:84:08:18: a4:e3:99:72 -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9iBe0wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDA0MDQwNDAwMDBaMC8xLTArBgNVBAMTJDgz ZDYxY2MzLTQwYTItNDUzYS04OGM4LWY0M2Y0MTU3ZTgwMjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAPC7BNEOaAKIvyjLHo4OhkmEWUxQqZe13cFJDunc 4begNRV1B+RPftnu/wv7h6PhvRrvS4cUmMXKUw18wZVrqny1KT0ZOHxMo0XG+/0j QPhEXgBaljxnHqRs4ywOqjscWOp3ficA516SpzFtOStV8qEZ2I7VTLS2cmwPPWeh +5QQHqtSQu92VNtNNnWED3KPL5tqjQ7uHn59iPWVq87h+mpbMQrvx4tx2K+jKtzD YXuKWfDel4bZ7UQUy38PBkmYlfLn7qdvAvjygz8MdTqaofho2mYG2BKaukRJ/N5w bIzkPbWY85lxvPhVn2+KbojRvR9b3rhL/NmF6IpTV6wZzIkCAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBSsFFETCEM04zqvT1OfxNjvJoHEVjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2E5NTFhZTk1LTU5ODUtMzc2 OS1hYTBkLTFmNGJhMzFlZjg5MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDABQhMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQCamuT9pPm6ExvFtHJX4LDkKYj45NXaQs4m9ha/gO2nokc9RL+U69n6dfzyDkX4 ezTeoEl7OmiyVIhDA2I0JhVphSEcje5brfR4fK1x2mSGBVOi6qwGbQbOx0hlYP51 kfRRKcZLLNfDdsksntgC5DY3WmOSF0gqQlpbGgdd40NT1kqLu/X3n6N3laH/x9Y+ txeBdqaguzBt/xa9YBlywZuC7Momvq2jmJOqj6nuFrMlLuQ6fl6gbUm4ZIMpZ/vo E7OuSXQ4hv3ixeVJWEYNHgqkv1w95KbOs/BVThieXRHBtBrBwzYl+0QQm1+OPG+I h3WS1/ZqOCOTQimECBik45ly -----END CERTIFICATE-----Generated at Sun Jun 2 17:07:12 2024 by rpki-client on console-fra.rpki-client.org