$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff889415-5542-3f69-a4b4-86f38f99d2ee.roa File: ff889415-5542-3f69-a4b4-86f38f99d2ee.roa (raw, json) Hash identifier: WqgUxSh+rLHz+hyq6kHvixs8YhtJ5GFB2Nx6ZHtHe4s= Subject key identifier: CB:F3:36:B1:D9:22:8C:FC:84:3D:6F:A4:28:94:B5:C2:CC:21:BC:D2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F637005 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff889415-5542-3f69-a4b4-86f38f99d2ee.roa Signing time: Wed 08 Jul 2020 17:05:12 +0000 ROA not before: Wed 08 Jul 2020 04:00:00 +0000 ROA not after: Sun 17 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 208.84.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:63:70:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 04:00:00 2020 GMT Not After : Mar 17 04:00:00 2030 GMT Subject: CN=e08c81be-33bd-4595-8512-ecb77cfe1bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:88:73:1f:fc:7d:05:71:48:49:d6:39:9e: be:79:b1:ed:62:21:86:59:cf:ea:eb:c9:00:67:a5: e2:3e:58:90:4d:7e:b7:d3:e4:89:ca:71:84:6a:dc: 08:94:19:4a:7b:ac:e2:22:cb:4a:33:aa:ab:bb:58: 1d:f5:fe:37:af:7a:a6:d1:4d:14:ba:c0:5e:8a:b1: 1a:c8:36:72:e2:fd:7b:f6:89:4f:ba:64:0e:33:3a: 36:d9:d9:bd:da:d6:2b:9f:25:e7:03:f2:92:4b:8a: 13:33:70:e4:69:a0:ec:36:68:d8:65:9e:cd:89:cb: 39:f5:5f:b5:48:1a:50:97:8c:e2:cb:36:b5:05:54: c7:12:5b:74:f7:77:c0:68:6c:47:85:d5:91:16:eb: c2:d7:88:68:6b:f5:01:be:9f:56:11:22:1f:be:9a: 7a:e7:84:f1:4f:3a:20:b6:08:17:c5:fe:8e:fa:c1: 2a:25:4f:7f:4d:39:fe:b1:04:fa:b6:f8:d6:0e:b5: 1b:dc:92:40:d1:42:ae:4b:8a:58:71:7f:e6:0a:0f: db:ee:6b:c8:f9:36:36:a1:40:0b:f8:1b:00:43:83: c1:f7:c9:59:dd:1d:56:18:dd:92:81:b6:c4:0e:11: 18:65:33:f3:6e:b2:4e:7a:14:76:24:cf:9a:5e:cb: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:36:B1:D9:22:8C:FC:84:3D:6F:A4:28:94:B5:C2:CC:21:BC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff889415-5542-3f69-a4b4-86f38f99d2ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 208.84.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6e:38:15:75:f4:25:40:31:fe:7a:e1:78:69:59:b7:51:bc: 45:d3:2c:17:b8:f5:89:b1:c7:dd:89:ca:04:d0:dd:c8:f6:a8: 30:7d:3c:59:67:e8:2e:e1:15:06:71:a8:57:90:e4:48:7d:85: 5c:13:23:27:63:ce:52:a8:b9:39:70:a6:d9:08:64:b5:6d:25: 30:2f:00:26:c5:9f:ab:90:9b:39:04:6a:41:c7:8a:d9:e3:67: e7:ac:0e:b1:56:dc:a5:b6:6c:91:24:b2:01:f4:22:26:e3:63: 43:d3:83:eb:e2:1c:96:f2:6d:6c:d3:5e:e5:59:46:04:28:5d: a9:36:ae:d5:27:57:35:7c:cb:29:74:f8:4e:8c:64:fb:6a:7d: e2:41:4a:dd:20:58:51:9a:c7:24:6f:17:23:ef:83:db:93:fc: 82:dc:fc:cf:d7:ce:ff:8c:d5:bd:2e:ff:79:a2:b2:59:62:0f: 15:12:3d:cd:5d:20:cf:8c:ae:3f:52:ad:7f:83:a3:5e:53:9d: 62:e7:79:8c:44:5c:86:fc:18:78:14:a7:2c:5d:8d:97:f0:84: 5d:7b:d5:ef:1c:09:08:04:75:3b:70:cb:95:b5:1c:53:21:ea: 66:ba:f7:9a:8b:ee:6c:95:0e:18:f1:db:c7:7a:8e:09:40:bd: 73:73:d0:7a -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcy9jcAUwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl YTAeFw0yMDA3MDgwNDAwMDBaFw0zMDAzMTcwNDAwMDBaMC8xLTArBgNVBAMTJGUw OGM4MWJlLTMzYmQtNDU5NS04NTEyLWVjYjc3Y2ZlMWJmYjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANsMiHMf/H0FcUhJ1jmevnmx7WIhhlnP6uvJAGel 4j5YkE1+t9PkicpxhGrcCJQZSnus4iLLSjOqq7tYHfX+N696ptFNFLrAXoqxGsg2 cuL9e/aJT7pkDjM6NtnZvdrWK58l5wPykkuKEzNw5Gmg7DZo2GWezYnLOfVftUga UJeM4ss2tQVUxxJbdPd3wGhsR4XVkRbrwteIaGv1Ab6fVhEiH76aeueE8U86ILYI F8X+jvrBKiVPf005/rEE+rb41g61G9ySQNFCrkuKWHF/5goP2+5ryPk2NqFAC/gb AEODwffJWd0dVhjdkoG2xA4RGGUz826yTnoUdiTPml7LnYUCAwEAAaOCA1UwggNR MB0GA1UdDgQWBBTL8zax2SKM/IQ9b6QolLXCzCG80jCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3 ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2ZmODg5NDE1LTU1NDItM2Y2 OS1hNGI0LTg2ZjM4Zjk5ZDJlZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3 Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0 ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANBUBDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAQm44FXX0JUAx/nrheGlZt1G8RdMsF7j1ibHH3YnKBNDdyPaoMH08WWfoLuEV BnGoV5DkSH2FXBMjJ2POUqi5OXCm2QhktW0lMC8AJsWfq5CbOQRqQceK2eNn56wO sVbcpbZskSSyAfQiJuNjQ9OD6+IclvJtbNNe5VlGBChdqTau1SdXNXzLKXT4Toxk +2p94kFK3SBYUZrHJG8XI++D25P8gtz8z9fO/4zVvS7/eaKyWWIPFRI9zV0gz4yu P1Ktf4OjXlOdYud5jERchvwYeBSnLF2Nl/CEXXvV7xwJCAR1O3DLlbUcUyHqZrr3 movubJUOGPHbx3qOCUC9c3PQeg== -----END CERTIFICATE-----Generated at Sun Jun 2 04:21:19 2024 by rpki-client on console-ams.rpki-client.org