$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/d3224edd-d333-3557-ad56-1a3ffe3722e2.roa File: d3224edd-d333-3557-ad56-1a3ffe3722e2.roa (raw, json) Hash identifier: O+ek7uHWnaY5IyVH65VEDdtJtdcmpwnnnqmMM5i2zGE= Subject key identifier: 91:E6:A8:0B:3A:5E:B6:F3:39:E4:8B:71:D4:8A:BA:28:F3:46:49:AA Certificate issuer: /CN=f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c Certificate serial: 010D0C9F43285842054D7E17C6AA268F2A0E0500 Authority key identifier: DE:83:76:8A:63:DC:E1:CE:46:B2:03:F8:FC:30:17:BB:EC:A9:C0:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/d3224edd-d333-3557-ad56-1a3ffe3722e2.roa Signing time: Sat 27 May 2023 13:00:19 +0000 ROA not before: Sat 27 May 2023 13:00:19 +0000 ROA not after: Fri 25 Aug 2023 13:00:19 +0000 asID: 399780 IP address blocks: 172.98.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 May 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:05:4d:7e:17:c6:aa:26:8f:2a:0e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c Validity Not Before: May 27 13:00:19 2023 GMT Not After : Aug 25 13:00:19 2023 GMT Subject: CN=603396df-63aa-4e2d-a232-4377cf0b0768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:e3:08:ae:4c:45:ac:80:47:db:39:f8:58: eb:3a:5d:96:a5:f3:43:aa:6e:ca:cf:d4:c0:d1:c0: f7:af:9b:db:6b:9b:c3:67:fc:c5:d1:ac:b3:82:da: 32:0b:f4:6e:62:bf:d3:b0:1b:21:65:f7:c4:ba:57: 0c:01:83:41:1a:41:9e:6f:f5:60:fc:ba:53:81:33: fc:d2:7d:29:f5:7a:51:4a:88:f7:1b:46:4a:9a:9d: 09:96:c9:57:61:43:68:33:94:96:3a:72:a8:ec:7f: d6:97:e6:23:f2:33:c5:30:58:fa:68:9f:7b:f2:7d: 05:e4:c9:fc:3b:53:24:0a:bf:d9:c3:85:e3:e3:eb: 36:7e:8b:af:e2:76:5d:d1:9a:b2:33:9d:14:f7:bc: 7b:6f:52:7f:6c:18:1b:53:1c:41:58:93:a2:fe:22: cd:56:f7:10:6a:a4:71:e2:38:9a:77:a4:c3:69:91: e9:43:51:32:83:4a:c8:5f:85:9f:c9:08:13:4c:b8: b5:6e:80:4f:79:72:7a:07:ad:79:89:fd:56:00:93: f7:39:7e:f1:36:c5:fd:51:d3:31:26:50:03:17:bc: ee:21:1e:cb:31:3e:6f:4f:a2:b0:e8:e4:22:42:1e: c9:d5:86:2f:5b:4a:d1:38:52:0b:18:bc:24:9b:31: 42:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E6:A8:0B:3A:5E:B6:F3:39:E4:8B:71:D4:8A:BA:28:F3:46:49:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/d3224edd-d333-3557-ad56-1a3ffe3722e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.crl X509v3 Authority Key Identifier: keyid:DE:83:76:8A:63:DC:E1:CE:46:B2:03:F8:FC:30:17:BB:EC:A9:C0:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.cer sbgp-ipAddrBlock: critical IPv4: 172.98.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:4b:ca:06:9a:ca:76:07:46:73:6e:9d:81:b6:a8:b1:63:62: a7:b5:f7:d7:44:76:2a:70:74:4e:a6:b2:fb:0b:ad:d8:44:aa: ca:5e:cf:15:ee:bc:37:f3:39:44:bb:38:e2:df:e7:6d:3b:b2: d8:69:72:44:34:44:1f:b9:87:8b:dc:4a:38:7d:90:84:9e:e8: 18:49:23:1b:2d:6c:a8:cb:a5:39:56:60:9d:02:99:ac:96:31: 9f:d7:f7:67:0e:ae:de:b5:0b:5f:46:c2:fd:5b:06:c4:e4:c9: 89:71:a3:d0:61:2e:7c:b9:6e:f2:b7:58:6b:63:91:d3:95:1a: 3f:3c:36:bc:f1:72:ed:b4:44:d9:65:06:5d:e5:76:e4:c0:00: ed:c3:3f:4f:c9:63:af:e1:0d:58:b9:bd:69:13:44:30:2d:7b: 87:d6:ef:0a:66:c4:8f:89:8a:b4:95:ae:ad:4f:23:d7:62:ca: cf:dc:03:39:15:2b:4b:2a:75:84:6b:cd:e5:d7:af:d2:2b:04: a1:e6:60:1f:e3:24:f6:48:ee:da:09:dc:6d:a6:0a:80:0d:60: 40:14:2d:c9:df:71:68:1e:d9:ae:31:c1:3a:1c:d6:5f:2a:f8: 72:f6:7f:b2:bd:1a:52:74:34:7a:27:1e:41:3b:54:d0:5d:90: c2:3f:a7:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIFTX4XxqomjyoOBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJlZDE4YWQtMDk2MC00YjllLTk2ZTgtNGZlYjk5YjZl YzBjMB4XDTIzMDUyNzEzMDAxOVoXDTIzMDgyNTEzMDAxOVowLzEtMCsGA1UEAxMk NjAzMzk2ZGYtNjNhYS00ZTJkLWEyMzItNDM3N2NmMGIwNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9rjCK5MRayAR9s5+FjrOl2WpfNDqm7Kz9TA 0cD3r5vba5vDZ/zF0ayzgtoyC/RuYr/TsBshZffEulcMAYNBGkGeb/Vg/LpTgTP8 0n0p9XpRSoj3G0ZKmp0JlslXYUNoM5SWOnKo7H/Wl+Yj8jPFMFj6aJ978n0F5Mn8 O1MkCr/Zw4Xj4+s2fouv4nZd0ZqyM50U97x7b1J/bBgbUxxBWJOi/iLNVvcQaqRx 4jiad6TDaZHpQ1Eyg0rIX4WfyQgTTLi1boBPeXJ6B615if1WAJP3OX7xNsX9UdMx JlADF7zuIR7LMT5vT6Kw6OQiQh7J1YYvW0rROFILGLwkmzFC5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHmqAs6XrbzOeSLcdSKuijzRkmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMmVk MThhZC0wOTYwLTRiOWUtOTZlOC00ZmViOTliNmVjMGMvZDMyMjRlZGQtZDMzMy0z NTU3LWFkNTYtMWEzZmZlMzcyMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjJlZDE4YWQtMDk2MC00YjllLTk2 ZTgtNGZlYjk5YjZlYzBjL2YyZWQxOGFkLTA5NjAtNGI5ZS05NmU4LTRmZWI5OWI2 ZWMwYy5jcmwwHwYDVR0jBBgwFoAU3oN2imPc4c5GsgP4/DAXu+ypwDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMmVkMThhZC0wOTYwLTRiOWUtOTZlOC00ZmVi OTliNmVjMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNLygaaynYHRnNunYG2qLFjYqe199dEdipwdE6msvsLrdhEqspezxXu vDfzOUS7OOLf5207sthpckQ0RB+5h4vcSjh9kISe6BhJIxstbKjLpTlWYJ0CmayW MZ/X92cOrt61C19Gwv1bBsTkyYlxo9BhLny5bvK3WGtjkdOVGj88Nrzxcu20RNll Bl3lduTAAO3DP0/JY6/hDVi5vWkTRDAte4fW7wpmxI+JirSVrq1PI9diys/cAzkV K0sqdYRrzeXXr9IrBKHmYB/jJPZI7toJ3G2mCoANYEAULcnfcWge2a4xwToc1l8q +HL2f7K9GlJ0NHonHkE7VNBdkMI/p3E= -----END CERTIFICATE-----Generated at Sat May 27 13:34:22 2023 by rpki-client on console-fra.rpki-client.org