$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85caf828-3d99-3691-8ad5-ea20a7ba1fd4.roa File: 85caf828-3d99-3691-8ad5-ea20a7ba1fd4.roa (raw, json) Hash identifier: e3AU8LyX4RcjdHypWRlp2ZeC33AAhI1+HoUR5WvhLIQ= Subject key identifier: 39:93:A6:A5:6F:02:B1:38:BF:61:6D:FE:DE:4E:B0:E0:F1:7C:78:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583D7726281384ED615771713B50 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85caf828-3d99-3691-8ad5-ea20a7ba1fd4.roa Signing time: Mon 04 Apr 2022 04:00:00 +0000 ROA not before: Mon 04 Apr 2022 04:00:00 +0000 ROA not after: Sun 04 Apr 2027 04:00:00 +0000 asID: 22773 IP address blocks: 98.179.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:77:26:28:13:84:ed:61:57:71:71:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 4 04:00:00 2022 GMT Not After : Apr 4 04:00:00 2027 GMT Subject: CN=c23a779d-36be-4d89-b4ce-7e0fc45a95c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:86:f9:56:6a:02:03:fc:69:2a:da:c9:b8: 06:3d:8b:5d:de:0c:5d:f0:99:a8:e7:38:52:ee:9e: 18:de:92:27:3b:bd:90:92:1d:3f:be:a2:4d:cc:29: 52:dd:97:f8:c0:c7:76:96:32:33:90:17:01:8c:c9: b5:22:9b:8f:36:ca:cb:c0:8e:c6:2f:0f:24:46:a3: b0:54:0f:54:a1:52:97:2c:32:b7:0e:af:55:c4:d3: df:b4:ca:8c:c0:b5:ff:61:34:6c:28:48:5d:e8:0c: 12:d0:44:9e:90:e7:4b:62:aa:30:fe:30:aa:4f:94: 70:d6:09:7b:de:b5:6c:da:a2:f4:96:de:72:28:08: 00:1a:cc:13:c2:db:85:2d:97:f9:72:4a:e8:ed:f0: ae:7d:92:87:bf:24:5e:e9:8d:8e:c9:a0:dc:a2:5d: a1:46:95:04:a2:c5:c2:87:5b:c5:20:6d:04:47:78: 74:b3:77:b1:4d:d9:16:e9:b9:76:99:c8:ad:22:84: df:8a:51:6d:43:f3:c8:c7:b0:a1:72:dc:d0:07:76: dc:72:10:99:e0:6e:4b:03:9d:ec:58:b6:3f:b6:8b: 4e:19:e7:2a:35:dc:69:01:f2:2c:fe:52:b4:48:6c: e9:b4:5d:53:96:d3:3f:76:af:ac:d6:4c:7c:45:16: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:A6:A5:6F:02:B1:38:BF:61:6D:FE:DE:4E:B0:E0:F1:7C:78:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/85caf828-3d99-3691-8ad5-ea20a7ba1fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.179.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c7:9c:23:46:4c:ed:1c:db:2c:90:97:c9:4b:ee:77:61:04: 6e:54:cb:d2:9a:33:c7:ba:2c:f9:d3:76:7b:fb:6a:d2:17:09: 97:8f:c9:3d:8d:b7:c1:8a:49:1f:4e:ec:e7:b5:17:87:75:6e: 77:85:0e:52:e1:67:57:d9:1f:c8:38:8d:70:47:57:20:09:2b: 16:5d:f0:f9:cd:eb:15:13:71:d3:07:5c:0d:9c:18:d7:7e:88: 16:4b:42:63:d9:c7:01:5a:20:cb:07:e2:b1:78:d0:2d:a7:27: f5:23:44:6e:85:23:6e:21:4c:39:29:55:6f:6b:9b:c3:cf:57: 10:0b:e8:74:25:18:30:58:ce:6c:23:43:fb:2e:2e:49:41:42: 75:7d:ca:37:21:b7:45:31:6e:3e:86:98:e9:27:d5:09:0e:65: 2f:fd:53:20:7e:ea:e0:be:3c:03:46:40:88:b3:06:d8:0f:a3: 1c:ec:8c:ad:e3:a3:ac:e9:8f:2e:c4:62:67:6b:cb:0a:ac:08: d1:a5:8e:de:a2:46:42:e2:0b:24:78:f2:7c:1a:5d:02:42:b6: a5:4d:d2:9f:5c:05:2e:ef:58:b6:ec:a8:a0:fb:94:d3:d7:71: 01:66:7d:2f:ca:58:02:cf:d6:04:fa:31:00:c1:2d:1e:b2:94: 45:e5:3f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD13JigThO1hV3FxO1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDQwNDA0MDAwMFoXDTI3MDQwNDA0MDAwMFowLzEtMCsGA1UEAxMk YzIzYTc3OWQtMzZiZS00ZDg5LWI0Y2UtN2UwZmM0NWE5NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U6G+VZqAgP8aSraybgGPYtd3gxd8Jmo5zhS 7p4Y3pInO72Qkh0/vqJNzClS3Zf4wMd2ljIzkBcBjMm1IpuPNsrLwI7GLw8kRqOw VA9UoVKXLDK3Dq9VxNPftMqMwLX/YTRsKEhd6AwS0ESekOdLYqow/jCqT5Rw1gl7 3rVs2qL0lt5yKAgAGswTwtuFLZf5ckro7fCufZKHvyRe6Y2OyaDcol2hRpUEosXC h1vFIG0ER3h0s3exTdkW6bl2mcitIoTfilFtQ/PIx7ChctzQB3bcchCZ4G5LA53s WLY/totOGecqNdxpAfIs/lK0SGzptF1TltM/dq+s1kx8RRZGEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmTpqVvArE4v2Ft/t5OsODxfHirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODVjYWY4MjgtM2Q5OS0z NjkxLThhZDUtZWEyMGE3YmExZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXHnCNGTO0c2yyQl8lL7ndhBG5Uy9KaM8e6LPnTdnv7atIXCZePyT2N t8GKSR9O7Oe1F4d1bneFDlLhZ1fZH8g4jXBHVyAJKxZd8PnN6xUTcdMHXA2cGNd+ iBZLQmPZxwFaIMsH4rF40C2nJ/UjRG6FI24hTDkpVW9rm8PPVxAL6HQlGDBYzmwj Q/suLklBQnV9yjcht0Uxbj6GmOkn1QkOZS/9UyB+6uC+PANGQIizBtgPoxzsjK3j o6zpjy7EYmdrywqsCNGljt6iRkLiCyR48nwaXQJCtqVN0p9cBS7vWLbsqKD7lNPX cQFmfS/KWALP1gT6MQDBLR6ylEXlP/0= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:46 2024 by rpki-client on console-fra.rpki-client.org