$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa File: d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa (raw, json) Hash identifier: KA/nZFDtMmV2qvfRgWOHxx5TT2TYCp032dhq3t5izYs= Subject key identifier: 13:89:38:03:5A:5F:80:E0:B5:A9:EE:A6:8E:8E:68:E3:A7:46:90:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583DC93DD79B72943EBCB1BABF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa Signing time: Tue 03 May 2022 12:00:00 +0000 ROA not before: Tue 03 May 2022 12:00:00 +0000 ROA not after: Tue 04 May 2027 04:00:00 +0000 asID: 22773 IP address blocks: 68.228.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:c9:3d:d7:9b:72:94:3e:bc:b1:ba:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 3 12:00:00 2022 GMT Not After : May 4 04:00:00 2027 GMT Subject: CN=248af110-f244-485e-987e-d705f37ab9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:37:a6:e6:be:02:ee:60:8c:cf:ef:91:15: 8f:80:a3:7b:ab:62:bd:ff:a0:b9:c7:e4:75:29:24: a9:d9:84:52:8a:0f:c9:29:ab:de:30:e6:b2:82:53: 32:cf:b2:30:03:a2:dc:8d:15:2a:a1:05:ae:7d:e1: 90:22:d5:75:28:e0:67:46:b4:6d:bf:6d:f3:49:2f: 4e:b5:b9:e1:c7:0d:53:0c:ac:cc:8d:34:41:b0:b2: e0:d3:2d:36:1e:10:62:42:0d:3d:d4:42:6c:55:5d: 7e:02:33:9f:20:c2:91:48:49:5f:b6:23:9e:15:74: b2:83:32:0f:07:dd:c6:ab:a3:1d:e7:7b:e8:e4:c9: 84:e0:50:a5:56:f8:24:14:58:1f:ca:e1:1d:81:21: 0a:3d:c4:e8:2b:6d:b4:a0:bd:f3:0a:da:95:f2:ff: af:6a:a0:33:5f:69:c4:c6:71:30:ab:ba:14:d8:8f: cc:8e:b5:eb:37:7e:7c:0c:2b:a3:b8:3e:96:fc:7b: ca:e0:50:c1:7d:7c:40:da:cb:aa:66:49:58:76:57: 1b:d3:85:90:06:8d:cd:5e:ec:b4:59:44:e5:3d:f1: b8:b0:1e:20:63:be:d8:05:41:36:c4:70:d9:6a:4a: 1d:df:1d:96:8d:c7:df:09:d0:55:e0:11:a2:a7:36: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:89:38:03:5A:5F:80:E0:B5:A9:EE:A6:8E:8E:68:E3:A7:46:90:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:65:3c:43:6a:f9:71:cd:b7:83:cd:95:78:81:66:2c:73:c3: 27:69:ae:c6:e4:4b:61:35:81:d0:e3:a8:fc:f8:d5:16:eb:cf: d1:3c:f6:35:9c:09:09:9b:bc:87:81:48:5c:f2:9b:8c:17:87: b4:94:e3:9c:76:07:53:8a:bf:00:44:fa:8d:18:96:10:db:4b: 6c:66:6e:56:64:45:bc:8a:b0:be:66:9f:cf:8a:73:62:ce:cc: 65:c9:12:43:ce:4d:f7:06:f2:81:1c:20:83:fb:3c:0e:f5:93: c4:06:60:ae:24:50:92:8c:15:1a:c4:bc:12:c8:43:a9:7e:c1: c8:32:a1:1e:13:c5:02:be:64:b1:b1:b1:0b:34:d5:54:0f:6d: 59:f0:e7:78:71:15:6b:cb:82:84:1e:82:09:c0:14:eb:ab:2f: 78:12:3f:5f:93:11:ab:55:95:3a:05:a8:9e:ea:50:31:5f:4a: 21:68:0e:1f:2a:2b:55:d2:29:08:98:5b:02:87:0a:2e:75:f3: d8:62:58:50:a9:b0:b5:63:a9:c5:f4:0b:67:34:b7:7e:f8:04: a3:cb:63:90:3d:0a:c8:50:a6:4a:70:aa:89:0d:3c:e6:28:1d: e0:5e:8c:47:1f:7e:e4:71:a5:b0:37:c8:1c:47:39:4f:37:1a: e1:d2:f0:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3JPdebcpQ+vLG6vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDUwMzEyMDAwMFoXDTI3MDUwNDA0MDAwMFowLzEtMCsGA1UEAxMk MjQ4YWYxMTAtZjI0NC00ODVlLTk4N2UtZDcwNWYzN2FiOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA03pua+Au5gjM/vkRWPgKN7q2K9/6C5x+R1 KSSp2YRSig/JKaveMOayglMyz7IwA6LcjRUqoQWufeGQItV1KOBnRrRtv23zSS9O tbnhxw1TDKzMjTRBsLLg0y02HhBiQg091EJsVV1+AjOfIMKRSElftiOeFXSygzIP B93Gq6Md53vo5MmE4FClVvgkFFgfyuEdgSEKPcToK220oL3zCtqV8v+vaqAzX2nE xnEwq7oU2I/MjrXrN358DCujuD6W/HvK4FDBfXxA2suqZklYdlcb04WQBo3NXuy0 WUTlPfG4sB4gY77YBUE2xHDZakod3x2WjcffCdBV4BGipzZYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOJOANaX4Dgtanupo6OaOOnRpBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDYyNmE5Y2ItMTVkOS0z NjAzLTgyZjEtYzdmYTJmNmRjOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEROSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhlPENq+XHNt4PNlXiBZixzwydprsbkS2E1gdDjqPz41Rbrz9E89jWc CQmbvIeBSFzym4wXh7SU45x2B1OKvwBE+o0YlhDbS2xmblZkRbyKsL5mn8+Kc2LO zGXJEkPOTfcG8oEcIIP7PA71k8QGYK4kUJKMFRrEvBLIQ6l+wcgyoR4TxQK+ZLGx sQs01VQPbVnw53hxFWvLgoQeggnAFOurL3gSP1+TEatVlToFqJ7qUDFfSiFoDh8q K1XSKQiYWwKHCi5189hiWFCpsLVjqcX0C2c0t374BKPLY5A9CshQpkpwqokNPOYo HeBejEcffuRxpbA3yBxHOU83GuHS8IA= -----END CERTIFICATE-----Generated at Wed Apr 24 08:36:39 2024 by rpki-client on console-fra.rpki-client.org