$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eaef66dd-56f7-3f0b-ba8d-079736b5b174.roa File: eaef66dd-56f7-3f0b-ba8d-079736b5b174.roa (raw, json) Hash identifier: 1tkHa79OYhi1PcdjVO9KqXwAaWGfKzvCKVJdWC+ky9M= Subject key identifier: 2A:C6:3C:47:54:B2:2D:09:EC:91:D2:55:87:94:5B:EC:FD:11:51:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F64206B Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eaef66dd-56f7-3f0b-ba8d-079736b5b174.roa Signing time: Wed 08 Jul 2020 17:05:57 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Mon 08 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 208.68.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:64:20:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Apr 8 04:00:00 2030 GMT Subject: CN=1c215d52-ccfd-4ea1-a6b6-2e69031290eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:1e:4c:2b:27:6c:d3:50:ee:4e:67:48:09: e9:5f:91:c9:34:41:73:a5:70:18:fb:db:9e:ab:70: 44:e9:06:40:44:7b:6f:21:f0:27:fd:ba:f4:50:21: b8:3f:05:11:18:ab:3d:59:3d:19:f6:31:f1:e2:25: 97:8d:79:6c:86:70:b2:18:f5:fc:20:f6:d0:eb:52: 33:7a:44:40:db:28:f4:48:62:14:e3:43:1f:11:16: cd:1b:2b:ea:0c:3b:f7:20:72:fa:26:8f:a3:86:8c: f0:8b:0f:5f:92:16:18:91:fa:39:30:cd:2f:6f:b1: 7a:ad:f3:a9:84:8e:78:83:46:7c:cd:a5:a7:84:bc: 45:44:07:68:84:bf:ee:62:9f:b2:ea:dd:a4:9f:85: 63:94:5a:5e:e0:40:87:44:b0:a7:57:92:b4:f2:b8: 9d:72:a0:c7:ff:a7:fb:05:d1:54:56:3f:40:6d:fa: 7e:e7:0c:17:3f:25:90:61:32:a8:2e:d9:80:ef:b0: 43:8c:e2:6c:ae:48:46:59:de:e7:96:d8:ae:13:55: b4:21:74:64:48:cc:f2:45:07:fa:ae:27:5b:6b:15: 06:97:4e:63:38:d7:30:f4:d4:44:09:5b:a8:e6:ea: 31:f5:b0:c1:48:87:a7:a2:0d:f4:e0:06:b5:b7:fa: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:3C:47:54:B2:2D:09:EC:91:D2:55:87:94:5B:EC:FD:11:51:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eaef66dd-56f7-3f0b-ba8d-079736b5b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 208.68.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f1:2e:72:56:79:8c:a1:6b:eb:b0:d9:d5:ac:9b:32:62:63: 63:d8:9d:ad:99:90:23:4a:f9:b0:53:24:6c:b1:37:61:b7:77: 29:bf:d4:59:eb:27:b2:53:4d:8f:75:11:ec:f9:06:99:63:12: 12:82:6e:3e:a4:99:ec:f9:98:02:22:45:93:4e:91:19:c8:74: 82:2d:e7:54:bd:c8:2b:f7:77:7a:ae:11:e2:cb:f4:ee:6b:86: c2:72:b6:df:bf:d3:ce:b1:86:dd:de:64:35:05:27:32:a1:b4: b7:6b:b1:cf:4a:86:f1:e1:c0:c1:44:9d:9b:7e:00:e9:49:81: af:58:12:65:3d:34:33:d9:53:db:a2:2d:bf:48:ec:f5:81:f0: ca:1a:ed:60:71:d7:c3:6f:bb:80:77:08:46:7f:bf:32:87:05: 87:0e:a2:a1:26:26:cc:f2:79:a6:b2:4b:19:47:a5:23:be:a7: b0:13:3b:d0:2d:ad:4b:59:3d:d6:24:22:88:78:40:ed:6f:6e: de:53:27:67:5b:70:76:b8:b0:d0:d7:c1:4b:db:b7:71:a8:55: c9:6a:fd:85:38:1a:24:20:8c:5c:67:ba:63:73:28:c8:37:db: 7e:3a:8d:2a:82:81:bc:4c:89:4e:cb:41:f6:cc:42:08:ca:ad: 5f:6c:fb:15 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9kIGswCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDA0MDgwNDAwMDBaMC8xLTArBgNVBAMTJDFj MjE1ZDUyLWNjZmQtNGVhMS1hNmI2LTJlNjkwMzEyOTBlYjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKXCHkwrJ2zTUO5OZ0gJ6V+RyTRBc6VwGPvbnqtw ROkGQER7byHwJ/269FAhuD8FERirPVk9GfYx8eIll415bIZwshj1/CD20OtSM3pE QNso9EhiFONDHxEWzRsr6gw79yBy+iaPo4aM8IsPX5IWGJH6OTDNL2+xeq3zqYSO eINGfM2lp4S8RUQHaIS/7mKfsurdpJ+FY5RaXuBAh0Swp1eStPK4nXKgx/+n+wXR VFY/QG36fucMFz8lkGEyqC7ZgO+wQ4zibK5IRlne55bYrhNVtCF0ZEjM8kUH+q4n W2sVBpdOYzjXMPTURAlbqObqMfWwwUiHp6IN9OAGtbf6OGsCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBQqxjxHVLItCeyR0lWHlFvs/RFRzjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2VhZWY2NmRkLTU2ZjctM2Yw Yi1iYThkLTA3OTczNmI1YjE3NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9BEiDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAivEuclZ5jKFr67DZ1aybMmJjY9idrZmQI0r5sFMkbLE3Ybd3Kb/UWesnslNN j3UR7PkGmWMSEoJuPqSZ7PmYAiJFk06RGch0gi3nVL3IK/d3eq4R4sv07muGwnK2 37/TzrGG3d5kNQUnMqG0t2uxz0qG8eHAwUSdm34A6UmBr1gSZT00M9lT26Itv0js 9YHwyhrtYHHXw2+7gHcIRn+/MocFhw6ioSYmzPJ5prJLGUelI76nsBM70C2tS1k9 1iQiiHhA7W9u3lMnZ1twdriw0NfBS9u3cahVyWr9hTgaJCCMXGe6Y3MoyDfbfjqN KoKBvEyJTstB9sxCCMqtX2z7FQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:05:19 2024 by rpki-client on console-ams.rpki-client.org