$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f61123dc-19ff-3ac4-a0c6-677969f2a92e.roa File: f61123dc-19ff-3ac4-a0c6-677969f2a92e.roa (raw, json) Hash identifier: BvG/LFWtsZDzvj/A1NoHx/5PUZsrtmQ4UUrJ/zBdocI= Subject key identifier: 1A:D3:16:1C:93:A9:A6:6E:F8:12:38:4F:64:2E:B0:B1:DD:BE:80:05 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732A0B4184 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f61123dc-19ff-3ac4-a0c6-677969f2a92e.roa Signing time: Tue 07 Jul 2020 16:10:47 +0000 ROA not before: Tue 07 Jul 2020 04:00:00 +0000 ROA not after: Thu 04 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.158.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:0b:41:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 7 04:00:00 2020 GMT Not After : Apr 4 04:00:00 2030 GMT Subject: CN=f1a8b4e4-ec7a-4b53-8bc9-aba6237b8795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:74:a1:8e:15:e9:44:a2:20:7a:bd:30:65: 17:31:be:48:48:30:d5:ba:4c:1f:0e:46:39:e9:e5: 79:f1:0f:0e:3e:02:b0:05:b1:cc:4b:78:f5:88:cd: c0:02:dd:1f:bc:48:65:da:11:32:5f:d3:08:64:4f: 12:b5:94:02:73:f8:51:50:2b:b3:87:fa:8b:dc:c3: 6e:f4:62:0c:74:fd:ab:6e:32:86:8c:a7:a5:76:ff: f7:6b:8b:8f:f1:f6:17:76:e9:20:0d:93:4d:f1:b1: 09:7f:47:d4:27:14:cb:e8:3b:11:25:76:35:bc:5b: cb:f1:83:a1:49:71:13:f9:28:97:cf:80:ef:d9:b6: 87:22:24:06:20:1a:d5:08:04:09:c0:3d:35:6a:c6: 19:fd:01:82:fd:46:73:34:17:97:f5:67:68:c2:98: 60:82:4a:c1:f2:ae:da:b3:e9:aa:c1:9f:ab:8f:53: e4:35:65:b7:77:7c:30:71:03:92:b7:19:e0:a4:38: 4c:1f:9d:98:de:ab:97:62:e2:3e:c4:d5:4a:6f:f3: f6:28:3b:29:3e:71:d1:3a:e8:95:1c:68:27:59:ea: 6f:60:ed:8d:5a:d9:e8:15:1b:a1:cf:8e:d3:d3:8a: d0:90:f4:01:2e:76:9b:1e:48:f7:6b:2b:23:c7:e3: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:16:1C:93:A9:A6:6E:F8:12:38:4F:64:2E:B0:B1:DD:BE:80:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f61123dc-19ff-3ac4-a0c6-677969f2a92e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.158.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:52:88:e7:f6:28:ea:d7:b0:73:28:91:4d:e8:d7:68:9e:91: 42:66:f9:88:e8:93:00:93:30:47:76:7b:a6:19:79:d6:b7:a9: 94:f0:81:64:55:c5:18:86:21:52:9f:0d:50:8b:4a:98:77:a8: a5:f3:c6:7d:de:a4:b4:e3:8f:96:f7:d1:00:eb:28:b8:4f:22: 42:e4:99:c1:cf:ff:f3:e7:60:75:cb:62:25:d3:c1:c2:2a:aa: 0c:a4:e3:8c:88:64:37:32:f9:71:f3:f0:32:61:94:9e:2f:79: 93:ae:ab:36:6b:39:bb:b0:7a:ea:43:c9:65:31:d5:7d:4a:2c: 6d:a3:65:1c:ac:37:1a:36:73:8b:d2:36:f8:23:54:71:0c:e9: 30:46:22:e6:20:42:89:93:16:10:be:0a:36:4d:e5:98:8a:53: 54:ba:37:39:02:6e:6d:82:c0:ac:99:66:54:c3:72:65:ec:d6: 86:91:35:e9:78:c8:92:70:4d:bb:e6:0b:28:21:d7:8f:56:6b: 30:a7:b2:22:62:76:ec:93:d7:32:1f:28:5a:dd:b6:bf:d4:ba: fa:8c:b8:4b:39:ba:a9:ef:c3:62:ec:c3:f2:e3:b6:5f:54:78: b6:10:d0:bb:34:27:c9:56:fe:79:fa:14:b5:ee:17:c0:24:ab: bd:1c:46:23 -----BEGIN CERTIFICATE----- MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyoLQYQwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDcwNDAwMDBaFw0zMDA0MDQwNDAwMDBaMC8xLTArBgNVBAMTJGYx YThiNGU0LWVjN2EtNGI1My04YmM5LWFiYTYyMzdiODc5NTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANy/dKGOFelEoiB6vTBlFzG+SEgw1bpMHw5GOenl efEPDj4CsAWxzEt49YjNwALdH7xIZdoRMl/TCGRPErWUAnP4UVArs4f6i9zDbvRi DHT9q24yhoynpXb/92uLj/H2F3bpIA2TTfGxCX9H1CcUy+g7ESV2Nbxby/GDoUlx E/kol8+A79m2hyIkBiAa1QgECcA9NWrGGf0Bgv1GczQXl/VnaMKYYIJKwfKu2rPp qsGfq49T5DVlt3d8MHEDkrcZ4KQ4TB+dmN6rl2LiPsTVSm/z9ig7KT5x0TrolRxo J1nqb2DtjVrZ6BUboc+O09OK0JD0AS52mx5I92srI8fjPpECAwEAAaOCA1QwggNQ MB0GA1UdDgQWBBQa0xYck6mmbvgSOE9kLrCx3b6ABTCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2Y2MTEyM2RjLTE5ZmYtM2Fj NC1hMGM2LTY3Nzk2OWYyYTkyZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDARSeMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB AQCOUojn9ijq17BzKJFN6NdonpFCZvmI6JMAkzBHdnumGXnWt6mU8IFkVcUYhiFS nw1Qi0qYd6il88Z93qS044+W99EA6yi4TyJC5JnBz//z52B1y2Il08HCKqoMpOOM iGQ3Mvlx8/AyYZSeL3mTrqs2azm7sHrqQ8llMdV9Sixto2UcrDcaNnOL0jb4I1Rx DOkwRiLmIEKJkxYQvgo2TeWYilNUujc5Am5tgsCsmWZUw3Jl7NaGkTXpeMiScE27 5gsoIdePVmswp7IiYnbsk9cyHyha3ba/1Lr6jLhLObqp78Ni7MPy47ZfVHi2ENC7 NCfJVv55+hS17hfAJKu9HEYj -----END CERTIFICATE-----Generated at Mon May 20 06:59:34 2024 by rpki-client on console-fra.rpki-client.org