$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b48a397f-b2c9-311f-9c00-920188b4abf8.roa File: b48a397f-b2c9-311f-9c00-920188b4abf8.roa (raw, json) Hash identifier: C6TpRCmG6hgL6v2vmYWFQtlm5CjWBAInpUwX0dDEv4U= Subject key identifier: 60:94:E6:BA:EB:F0:00:12:54:7D:8C:BB:95:C5:9F:1C:B2:11:83:1E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285839E2FF0A6147C414E8BFF2FA20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b48a397f-b2c9-311f-9c00-920188b4abf8.roa Signing time: Tue 11 May 2021 04:00:00 +0000 ROA not before: Tue 11 May 2021 04:00:00 +0000 ROA not after: Sun 03 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 4.192.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:39:e2:ff:0a:61:47:c4:14:e8:bf:f2:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 04:00:00 2021 GMT Not After : Mar 3 05:00:00 2030 GMT Subject: CN=ed44288b-73f9-4f66-a874-7f384d2827b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1a:9d:a0:57:56:3e:48:61:d4:6c:54:99:86: bf:5b:ce:b4:4f:a2:de:6f:90:27:42:17:ab:09:98: 38:ce:7c:be:a1:25:56:49:5e:a9:f3:f8:fe:b8:90: f0:8d:fd:9c:45:81:9e:87:f3:1d:5c:73:f1:0d:a4: d1:ae:ca:bf:9d:61:33:26:0d:3b:a5:49:cb:76:54: d6:0e:30:ae:b0:40:88:b7:ae:73:99:11:5f:4c:27: 10:9e:88:bc:a4:04:18:dc:8f:d1:41:7f:6b:61:5c: d1:08:54:9c:0b:04:47:1e:ea:63:68:f4:c4:04:ef: 9b:77:f4:b3:c0:db:96:d9:06:c5:1d:d2:ba:95:b5: af:38:f2:5f:4f:ef:2e:69:ee:09:86:da:ba:ee:2a: d4:47:f0:05:7c:58:da:a5:44:34:2b:8c:4a:b8:30: c3:ba:bc:7d:1c:ba:c5:62:e3:40:1c:9b:b3:26:3f: 8d:11:eb:d5:10:c8:71:f4:56:bd:3c:94:af:12:5d: e4:c6:52:cb:fa:65:ec:94:a8:ed:db:28:4d:b0:87: 1d:de:c1:10:39:57:91:cc:f9:21:f2:fc:89:9c:37: 8a:88:b9:ac:c6:4f:6d:34:c4:d3:a6:38:6a:7e:6c: 58:73:99:f0:26:81:6c:55:c3:56:50:56:8f:b7:d2: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:94:E6:BA:EB:F0:00:12:54:7D:8C:BB:95:C5:9F:1C:B2:11:83:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b48a397f-b2c9-311f-9c00-920188b4abf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 4.192.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:45:ef:9a:f7:b0:7f:0b:a8:ca:c0:d5:68:05:65:58:a3:5e: 19:15:39:c0:b4:67:a4:cc:86:52:e9:83:d2:56:b5:a9:f1:65: 94:46:0c:37:1a:24:fc:40:01:a6:11:e0:a4:9d:a8:74:08:5d: 75:ac:d9:90:7f:5f:51:6f:af:ef:1d:44:17:30:35:c3:f6:e3: 7a:45:b3:7c:65:9a:e3:d3:5c:40:ee:7a:c1:b0:3c:ab:81:b6: 10:db:e6:2d:26:a8:8f:d1:83:40:36:b3:6b:01:2c:69:ed:09: ee:97:a5:35:f0:e6:99:22:8f:b2:46:50:58:bd:32:71:8c:45: 23:de:f4:09:27:89:de:c4:18:a3:d5:06:19:e2:17:a8:27:26: 71:4a:7c:c3:ec:d3:82:50:3c:8f:94:3d:89:04:53:82:dd:8a: 1a:31:74:10:7e:4a:cc:ce:5e:2b:6b:41:a5:a0:f4:9c:90:e5: ea:91:c1:87:10:87:c0:8a:e8:8b:71:0d:8b:de:d4:0f:fb:f0: 75:63:19:f1:7f:d5:bd:61:8b:30:48:ce:da:09:e1:7f:3e:44: 9a:18:47:4d:19:26:61:8e:4c:a0:06:21:21:50:cc:e8:34:8a: 78:d2:00:4c:9a:26:fe:cb:fb:c7:43:bd:1e:4e:42:04:8f:c1: 2d:c5:79:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDni/wphR8QU6L/y+iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIxMDUxMTA0MDAwMFoXDTMwMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk ZWQ0NDI4OGItNzNmOS00ZjY2LWE4NzQtN2YzODRkMjgyN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRqdoFdWPkhh1GxUmYa/W860T6Leb5AnQher CZg4zny+oSVWSV6p8/j+uJDwjf2cRYGeh/MdXHPxDaTRrsq/nWEzJg07pUnLdlTW DjCusECIt65zmRFfTCcQnoi8pAQY3I/RQX9rYVzRCFScCwRHHupjaPTEBO+bd/Sz wNuW2QbFHdK6lbWvOPJfT+8uae4Jhtq67irUR/AFfFjapUQ0K4xKuDDDurx9HLrF YuNAHJuzJj+NEevVEMhx9Fa9PJSvEl3kxlLL+mXslKjt2yhNsIcd3sEQOVeRzPkh 8vyJnDeKiLmsxk9tNMTTpjhqfmxYc5nwJoFsVcNWUFaPt9KUGQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGCU5rrr8AASVH2Mu5XFnxyyEYMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjQ4YTM5N2YtYjJjOS0z MTFmLTljMDAtOTIwMTg4YjRhYmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEBMAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhkXvmvewfwuoysDVaAVlWKNeGRU5wLRnpMyGUumD0la1qfFllEYMNxok /EABphHgpJ2odAhddazZkH9fUW+v7x1EFzA1w/bjekWzfGWa49NcQO56wbA8q4G2 ENvmLSaoj9GDQDazawEsae0J7pelNfDmmSKPskZQWL0ycYxFI970CSeJ3sQYo9UG GeIXqCcmcUp8w+zTglA8j5Q9iQRTgt2KGjF0EH5KzM5eK2tBpaD0nJDl6pHBhxCH wIroi3ENi97UD/vwdWMZ8X/VvWGLMEjO2gnhfz5EmhhHTRkmYY5MoAYhIVDM6DSK eNIATJom/sv7x0O9Hk5CBI/BLcV54Q== -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:00 2025 by rpki-client