$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e4b18068-04de-3706-9227-35bfc3d0d195.roa File: e4b18068-04de-3706-9227-35bfc3d0d195.roa (raw, json) Hash identifier: DkRjWfEc5U5cOddyvrur2E5C6+Vjn5QxUvdY5RRSl+w= Subject key identifier: E8:62:DA:2F:64:34:AF:8B:D0:96:25:56:9E:66:54:06:B8:49:93:7B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC17329CDA6FD Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e4b18068-04de-3706-9227-35bfc3d0d195.roa Signing time: Tue 07 Jul 2020 15:03:30 +0000 ROA not before: Tue 07 Jul 2020 04:00:00 +0000 ROA not after: Tue 09 Apr 2030 04:00:00 +0000 asID: 8070 IP address blocks: 2001:489a:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:29:cd:a6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 7 04:00:00 2020 GMT Not After : Apr 9 04:00:00 2030 GMT Subject: CN=a8037c91-4fac-4c30-9353-a0b792154b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:7a:e9:46:ed:b0:ad:f4:45:9b:c4:33:a5: fc:8f:bb:b7:93:36:b0:a2:c1:85:7e:a5:9a:ae:28: 20:21:6a:e0:80:a9:f2:09:59:a7:bc:1e:db:df:ea: 82:fe:40:4c:44:b1:1f:a6:4e:4c:b5:54:23:73:b6: 88:4f:fa:19:0a:dc:36:09:73:03:90:03:48:3f:c7: f8:98:f8:5a:67:00:aa:b0:94:39:56:92:40:c5:cd: 68:70:78:b4:84:4f:df:9b:16:0c:f0:27:f6:b8:be: 02:2b:ac:01:b2:a3:00:39:f5:a7:9a:43:d3:fa:a8: d5:2f:bb:15:69:50:5d:61:b1:92:45:6a:c7:fe:13: ee:7c:ef:05:eb:08:2f:24:d3:05:9e:4f:53:58:a2: b5:f1:ba:25:5a:10:fc:ed:42:46:a8:7f:92:c9:56: 16:2b:8f:9b:9d:73:62:65:08:2a:0d:7d:c6:98:57: 5c:47:5b:2e:3f:c5:c7:3f:7d:5f:b2:79:33:91:ef: ea:52:bd:6f:66:c8:98:34:bf:b5:8c:da:6d:95:62: 21:70:5d:22:8e:1f:ac:bf:a2:19:5f:d8:ec:76:50: c4:f1:4b:47:5f:56:87:d4:07:71:86:0b:93:aa:0f: ce:71:7a:1a:16:70:86:96:f2:46:25:d2:e8:02:69: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:62:DA:2F:64:34:AF:8B:D0:96:25:56:9E:66:54:06:B8:49:93:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e4b18068-04de-3706-9227-35bfc3d0d195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2001:489a:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c2:a1:96:0b:7b:91:39:74:8c:ea:e0:62:d2:83:45:97:34: 90:cf:b6:8f:fa:ae:71:ec:6b:d4:cf:a4:18:fb:ee:fb:36:d6: 18:8a:2d:2f:4e:70:07:d2:07:08:c9:87:6c:6f:8d:fc:b0:99: 80:2a:5c:13:cd:2f:19:5d:13:20:f3:bd:f1:27:19:cf:35:fe: 61:74:fc:4a:f0:de:42:75:41:94:cf:45:05:b0:db:91:1f:1c: c2:a8:b3:d2:cf:63:b3:cf:4d:f4:ef:ff:e3:d3:fc:7a:7e:f3: bf:fa:de:76:94:c5:03:d9:65:50:f1:f2:ea:e2:61:0c:db:c7: 36:d3:19:47:03:8f:f5:44:18:07:25:0b:4a:01:ba:15:e9:f8: 91:de:58:61:fa:46:29:c3:fa:7d:a8:d8:3d:6a:23:62:88:00: 2f:28:33:b6:60:70:f8:65:b8:1d:f3:30:92:3e:0d:bb:66:0a: 19:86:38:8d:51:d5:8e:f4:0e:e5:4d:5b:8e:ee:2f:bd:cb:a6: 65:d3:93:0d:8e:51:ea:39:88:6a:9b:70:44:16:19:c5:64:5a: 16:c3:f2:a2:03:ee:87:42:3a:47:5c:8e:3e:32:73:33:a7:43: 80:dd:d0:90:f8:a9:02:83:c5:28:0f:d2:ce:9a:9c:21:e3:66: 42:e2:b1:4d -----BEGIN CERTIFICATE----- MIIGQTCCBSugAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcynNpv0wCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDcwNDAwMDBaFw0zMDA0MDkwNDAwMDBaMC8xLTArBgNVBAMTJGE4 MDM3YzkxLTRmYWMtNGMzMC05MzUzLWEwYjc5MjE1NGIyMDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOHMeulG7bCt9EWbxDOl/I+7t5M2sKLBhX6lmq4o ICFq4ICp8glZp7we29/qgv5ATESxH6ZOTLVUI3O2iE/6GQrcNglzA5ADSD/H+Jj4 WmcAqrCUOVaSQMXNaHB4tIRP35sWDPAn9ri+AiusAbKjADn1p5pD0/qo1S+7FWlQ XWGxkkVqx/4T7nzvBesILyTTBZ5PU1iitfG6JVoQ/O1CRqh/kslWFiuPm51zYmUI Kg19xphXXEdbLj/Fxz99X7J5M5Hv6lK9b2bImDS/tYzabZViIXBdIo4frL+iGV/Y 7HZQxPFLR19Wh9QHcYYLk6oPznF6GhZwhpbyRiXS6AJpmK0CAwEAAaOCA1cwggNT MB0GA1UdDgQWBBToYtovZDSvi9CWJVaeZlQGuEmTezCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2U0YjE4MDY4LTA0ZGUtMzcw Ni05MjI3LTM1YmZjM2QwZDE5NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSABSJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQEL A4IBAQBUwqGWC3uROXSM6uBi0oNFlzSQz7aP+q5x7GvUz6QY++77NtYYii0vTnAH 0gcIyYdsb438sJmAKlwTzS8ZXRMg873xJxnPNf5hdPxK8N5CdUGUz0UFsNuRHxzC qLPSz2Ozz0307//j0/x6fvO/+t52lMUD2WVQ8fLq4mEM28c20xlHA4/1RBgHJQtK AboV6fiR3lhh+kYpw/p9qNg9aiNiiAAvKDO2YHD4Zbgd8zCSPg27ZgoZhjiNUdWO 9A7lTVuO7i+9y6Zl05MNjlHqOYhqm3BEFhnFZFoWw/KiA+6HQjpHXI4+MnMzp0OA 3dCQ+KkCg8UoD9LOmpwh42ZC4rFN -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:18 2025 by rpki-client