$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa File: b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa (raw, json) Hash identifier: 8Ur6jlSAKdXn9X0CYHXcKZkFXDOu0it0OdQHZzNFMs4= Subject key identifier: 60:38:B9:6A:7A:9A:59:9D:5B:E0:49:82:A8:29:26:C5:43:FA:54:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858372BF8C07A8A2B5BB16AA754C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa Signing time: Fri 04 Sep 2020 04:00:00 +0000 ROA not before: Fri 04 Sep 2020 04:00:00 +0000 ROA not after: Thu 14 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 40.123.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:37:2b:f8:c0:7a:8a:2b:5b:b1:6a:a7:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 04:00:00 2020 GMT Not After : Mar 14 04:00:00 2030 GMT Subject: CN=8848abe4-195a-41c8-bd37-c03e6178ae87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:79:24:2e:ec:ae:a4:07:7d:c1:63:e3:c4: 76:e1:c3:4b:4a:2c:af:40:0d:d0:71:f7:60:b0:f6: 39:77:75:52:6a:c7:b7:a9:d9:32:5c:b0:f4:f4:e9: 96:95:30:a0:74:21:0c:70:22:5e:2c:21:d5:3a:ca: 1d:b3:60:0f:9d:e3:6c:b3:37:3c:2b:7f:35:04:c0: 52:bc:aa:d5:7f:8d:54:ad:ef:de:55:1f:41:6b:4d: f6:17:3b:67:2a:7e:0b:47:78:ff:b2:7f:f7:b6:c6: d5:f5:46:70:b1:d6:dd:f6:f8:67:3b:df:8c:c5:4f: a8:ca:d1:42:49:fb:c3:d8:52:d6:91:0b:20:ed:cb: cb:80:78:89:fd:34:23:5e:a8:71:b7:b2:f5:3a:67: 29:f6:41:6e:36:83:53:14:8e:2c:12:97:3a:02:07: 31:26:60:a5:8e:16:9b:c4:eb:1d:52:56:65:aa:a1: 53:c6:58:19:bd:10:ce:12:82:04:e8:66:d7:e2:5a: 66:97:3c:64:a6:78:e8:5a:9e:48:ce:01:8c:fd:de: 12:b2:67:b4:b3:74:ac:e4:6a:38:c1:7d:c1:20:33: 18:64:cf:60:87:3a:fb:0c:96:4b:c9:a7:c4:1a:67: c9:1b:2e:21:9d:ca:86:8b:af:fa:f0:f9:31:af:77: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:B9:6A:7A:9A:59:9D:5B:E0:49:82:A8:29:26:C5:43:FA:54:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.123.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fe:22:f6:c1:94:f1:8b:84:32:ea:d2:18:9b:59:4b:3b:7d: 03:4b:8f:85:5b:ec:63:83:5d:ab:3a:0e:aa:67:14:75:3e:fa: 55:78:7a:54:3d:16:fa:09:59:0e:5a:1c:37:d2:8c:52:d3:fc: 91:21:11:f1:ca:1d:3c:15:3a:2c:01:6f:e4:4b:8b:ec:39:65: a1:e6:69:01:82:14:99:4e:03:5f:c9:aa:94:4e:99:54:a4:18: 8e:73:25:b4:64:aa:96:63:e3:06:7b:0e:36:e6:c9:c4:ce:34: 3b:71:52:ac:0c:ab:bb:92:a3:07:61:8a:11:0e:dc:65:32:84: a3:18:9b:26:b7:d6:c1:c4:7b:34:96:b8:12:84:84:e9:20:34: 3f:f9:13:d0:0b:37:8c:4b:2e:af:44:8e:f2:86:32:34:ee:ee: a9:9f:ff:46:eb:34:f2:f0:14:6f:ac:d5:02:c1:d0:cd:db:43: 46:ab:04:92:38:65:6b:3f:b2:2b:a3:aa:f4:5d:ef:13:7e:ca: 73:d9:46:02:d1:0b:05:c4:f2:66:41:83:5b:b0:c9:2d:8f:5d: ce:71:e1:b2:45:a4:d2:d6:74:21:62:83:8b:7a:3d:14:cb:f7: 33:71:3c:ac:2f:26:85:da:44:4c:2d:d8:1e:4f:3d:e9:4d:8b: a2:99:05:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDcr+MB6iitbsWqnVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIwMDkwNDA0MDAwMFoXDTMwMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk ODg0OGFiZTQtMTk1YS00MWM4LWJkMzctYzAzZTYxNzhhZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRh5JC7srqQHfcFj48R24cNLSiyvQA3Qcfdg sPY5d3VSase3qdkyXLD09OmWlTCgdCEMcCJeLCHVOsods2APneNsszc8K381BMBS vKrVf41Ure/eVR9Ba032FztnKn4LR3j/sn/3tsbV9UZwsdbd9vhnO9+MxU+oytFC SfvD2FLWkQsg7cvLgHiJ/TQjXqhxt7L1Omcp9kFuNoNTFI4sEpc6AgcxJmCljhab xOsdUlZlqqFTxlgZvRDOEoIE6GbX4lpmlzxkpnjoWp5IzgGM/d4Ssme0s3Ss5Go4 wX3BIDMYZM9ghzr7DJZLyafEGmfJGy4hncqGi6/68Pkxr3cQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA4uWp6mlmdW+BJgqgpJsVD+lT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjU2ZmIzY2QtNWNjOC0z NjVlLWIzMzYtZjE0ZjIxZTc3OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKHvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv+IvbBlPGLhDLq0hibWUs7fQNLj4Vb7GODXas6DqpnFHU++lV4elQ9 FvoJWQ5aHDfSjFLT/JEhEfHKHTwVOiwBb+RLi+w5ZaHmaQGCFJlOA1/JqpROmVSk GI5zJbRkqpZj4wZ7DjbmycTONDtxUqwMq7uSowdhihEO3GUyhKMYmya31sHEezSW uBKEhOkgND/5E9ALN4xLLq9EjvKGMjTu7qmf/0brNPLwFG+s1QLB0M3bQ0arBJI4 ZWs/siujqvRd7xN+ynPZRgLRCwXE8mZBg1uwyS2PXc5x4bJFpNLWdCFig4t6PRTL 9zNxPKwvJoXaREwt2B5PPelNi6KZBQk= -----END CERTIFICATE-----Generated at Sun Jun 2 19:36:06 2024 by rpki-client on console-ams.rpki-client.org