$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cba89ab7-353e-34e3-8665-3f3692670b01.roa File: cba89ab7-353e-34e3-8665-3f3692670b01.roa (raw, json) Hash identifier: 9MU8ExZPapSLRi0eVc8LbGVEzowaKCsScYiVNUAVE50= Subject key identifier: 23:DF:9C:14:8D:72:89:6F:7F:A5:F0:A5:8A:3A:6B:3F:1A:32:D0:D7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F66ACEA Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cba89ab7-353e-34e3-8665-3f3692670b01.roa Signing time: Wed 08 Jul 2020 17:08:44 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Mon 01 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 23.100.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:66:ac:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Apr 1 04:00:00 2030 GMT Subject: CN=d17c25e4-3120-4377-b1f7-0e9decb89dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:19:9a:87:23:7a:f2:8c:bc:1f:e3:0e:36: f8:c7:0a:dc:5b:22:41:b5:90:40:1f:3a:1c:57:10: a7:dd:95:3a:5c:28:29:63:d3:39:a9:07:0f:76:e6: 21:06:bb:86:80:c6:2d:36:f7:05:07:fd:83:44:b4: 19:b8:f6:9f:7d:8a:6b:00:9b:80:cb:e0:fb:e0:c9: ca:e0:32:90:33:00:f7:6b:21:e0:44:5d:d7:71:85: d8:a8:8f:6d:8a:e8:b8:fa:bd:ea:d2:d2:24:31:84: b0:a4:9d:0f:c1:b0:44:82:c0:e5:02:3f:8a:d3:2d: 18:d8:f5:70:db:08:94:d3:53:f4:40:02:c7:f1:bd: 29:e1:fb:06:ca:f3:3d:f0:52:a0:67:f0:0e:f1:86: 94:2d:e1:20:e4:00:49:b2:14:a3:cf:1f:f4:f4:be: 9b:cd:d8:14:19:6b:3f:bb:65:3a:6d:68:27:6e:85: 6e:50:ac:2e:fe:41:02:1c:e6:3b:68:2c:18:86:41: 75:6f:0a:90:69:cd:d7:2d:df:d1:de:38:8f:a3:d6: 1c:6d:ff:04:13:2f:d1:99:f2:02:2d:58:3b:60:ee: 43:b9:ab:ef:87:10:bd:f6:b3:83:59:33:1f:fa:ee: 99:a9:aa:78:6f:49:3e:5a:ca:e8:b4:e0:79:c7:ad: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:9C:14:8D:72:89:6F:7F:A5:F0:A5:8A:3A:6B:3F:1A:32:D0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cba89ab7-353e-34e3-8665-3f3692670b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 23.100.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:42:d8:51:c6:ef:03:ca:f1:ea:f1:97:c4:51:2d:6c:1e:65: c6:53:97:ff:a4:1f:04:19:c6:b3:76:ab:0b:49:f7:02:aa:47: 47:12:ce:a6:56:d3:eb:28:de:e2:58:5d:0a:99:27:96:6b:71: 09:15:3c:8a:4e:09:74:71:3e:74:b1:81:48:20:cf:c8:dd:44: 19:1a:95:82:02:05:f9:d9:3d:01:c7:ae:02:f3:30:6e:ed:47: e5:fb:a9:8a:dd:c7:3f:95:95:a0:9b:f2:03:4b:e8:4b:c5:d1: 2a:a0:62:be:e3:8f:10:78:5e:b3:0d:f9:aa:dc:ec:3c:3f:0f: 6c:2a:c0:88:ee:84:af:61:28:33:f7:36:80:a6:61:64:fa:e3: f5:f7:89:46:9e:ea:de:f2:68:8c:4b:8e:4e:7b:82:ec:ed:17: 90:90:38:91:8e:c5:d1:8f:6e:e7:d0:fd:b7:b0:fa:fa:8f:3b: 6e:c3:59:b5:19:9b:38:cf:a7:65:a5:ea:ff:ec:fc:37:6c:d5: bc:9b:89:90:1a:11:42:33:59:8c:5d:49:8a:f7:71:41:67:8f: f4:99:88:b4:82:9a:eb:fa:74:d5:c5:2f:94:06:09:3f:cc:7a: 82:dd:97:70:a3:44:8f:fd:30:1f:f0:28:54:d7:fc:9f:7d:17: 90:80:c9:c8 -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9mrOowCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDA0MDEwNDAwMDBaMC8xLTArBgNVBAMTJGQx N2MyNWU0LTMxMjAtNDM3Ny1iMWY3LTBlOWRlY2I4OWRjNDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMxpGZqHI3ryjLwf4w42+McK3FsiQbWQQB86HFcQ p92VOlwoKWPTOakHD3bmIQa7hoDGLTb3BQf9g0S0Gbj2n32KawCbgMvg++DJyuAy kDMA92sh4ERd13GF2KiPbYrouPq96tLSJDGEsKSdD8GwRILA5QI/itMtGNj1cNsI lNNT9EACx/G9KeH7BsrzPfBSoGfwDvGGlC3hIOQASbIUo88f9PS+m83YFBlrP7tl Om1oJ26FblCsLv5BAhzmO2gsGIZBdW8KkGnN1y3f0d44j6PWHG3/BBMv0ZnyAi1Y O2DuQ7mr74cQvfazg1kzH/rumamqeG9JPlrK6LTgecet1OsCAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBQj35wUjXKJb3+l8KWKOms/GjLQ1zCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2NiYTg5YWI3LTM1M2UtMzRl My04NjY1LTNmMzY5MjY3MGIwMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDARdkMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQB7QthRxu8DyvHq8ZfEUS1sHmXGU5f/pB8EGcazdqsLSfcCqkdHEs6mVtPrKN7i WF0KmSeWa3EJFTyKTgl0cT50sYFIIM/I3UQZGpWCAgX52T0Bx64C8zBu7Ufl+6mK 3cc/lZWgm/IDS+hLxdEqoGK+448QeF6zDfmq3Ow8Pw9sKsCI7oSvYSgz9zaApmFk +uP194lGnure8miMS45Oe4Ls7ReQkDiRjsXRj27n0P23sPr6jztuw1m1GZs4z6dl per/7Pw3bNW8m4mQGhFCM1mMXUmK93FBZ4/0mYi0gprr+nTVxS+UBgk/zHqC3Zdw o0SP/TAf8ChU1/yffReQgMnI -----END CERTIFICATE-----Generated at Sun Jun 2 17:07:13 2024 by rpki-client on console-fra.rpki-client.org