$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa File: 50ea20c8-093a-3fe4-83f4-d17728e47031.roa (raw, json) Hash identifier: Tc8KSiocfFtTCPyWTVkCz1pRiaROHNiyWZc50nPtDnA= Subject key identifier: 9F:A6:9B:F4:61:85:FF:3C:A1:E1:6A:6A:D5:C5:5D:0A:57:59:9B:13 Certificate issuer: /CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e Certificate serial: 010D0C9F432858477661005620A98D6DF22953C0 Authority key identifier: 4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 395254 IP address blocks: 199.9.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:00:56:20:a9:8d:6d:f2:29:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=97ecab0e-790a-4908-98aa-e1ed95e83ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:14:02:3c:7a:86:80:3c:ed:47:9e:40:fc: d4:35:f0:10:e5:72:97:e0:5b:36:5b:a2:92:79:e0: d0:ab:f4:4a:bf:17:e3:68:b1:a9:55:c6:71:37:ef: a5:57:a4:8b:78:c0:49:e1:06:a5:3c:a2:26:99:6d: 56:cf:74:70:f4:e3:66:38:4e:cb:d5:f3:14:e4:4d: 29:bd:69:96:93:5f:2b:34:4d:34:57:40:56:8a:d1: 58:2d:ff:ff:f0:04:b9:10:e5:ec:13:d8:cd:53:5c: 66:b5:11:be:5a:3a:60:16:b7:b4:02:2c:87:90:4b: fd:fa:e3:d6:84:a5:7f:58:56:8a:0e:34:1b:9d:15: 25:c2:b9:a1:b4:9e:d3:57:3a:bf:33:fb:8c:4b:62: cb:96:8a:58:6a:79:92:3f:e5:fc:ec:8f:ab:1e:0f: 8a:97:4e:0c:9b:79:e0:60:55:84:ab:04:8e:96:92: 86:a7:50:f7:d5:a5:79:81:52:37:2d:1a:1e:1f:c7: ea:22:b0:79:a4:12:b5:d7:38:1e:3a:72:73:3a:67: 60:e3:47:bb:a4:03:c4:ff:a5:4f:d6:bf:ac:ba:b5: 27:50:72:47:06:5f:0e:82:f0:a8:a3:e8:9e:69:cb: 6e:f7:8c:1b:77:cb:ef:cc:4a:b7:ca:14:fe:ab:ad: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A6:9B:F4:61:85:FF:3C:A1:E1:6A:6A:D5:C5:5D:0A:57:59:9B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.crl X509v3 Authority Key Identifier: keyid:4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer sbgp-ipAddrBlock: critical IPv4: 199.9.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:57:29:e2:db:6a:64:78:27:03:9b:c6:98:16:09:46:e1:74: f0:0b:69:69:a4:65:e0:42:0e:2b:c2:25:0e:7a:e9:ca:73:9d: c2:a6:50:9c:32:ef:02:1f:39:34:0e:a3:23:29:ff:28:e2:b0: ef:f8:80:a5:e7:16:5f:da:69:a5:c8:87:f3:35:01:f9:8e:d6: 8e:c4:a8:26:c0:44:fd:d7:c3:7f:62:9e:1c:ea:f1:bf:9e:f4: b7:a5:e7:e5:5e:1a:b2:50:90:b7:f2:4f:9d:1d:d0:9b:8d:c3: fa:b1:d3:db:16:c5:2b:03:bb:3c:3c:19:1b:9e:e2:d8:50:53: 0c:ba:b3:bc:fa:ec:e3:37:9f:84:cd:ea:6a:02:65:95:03:6d: 92:e4:ed:44:68:6f:05:a7:f0:ae:ed:3d:54:ad:4a:23:04:9a: 21:0d:f5:f3:60:eb:fa:77:1f:28:a2:a7:e9:61:f9:dc:7b:c3: 62:be:b1:df:59:ce:78:3b:7b:bc:df:a2:b5:28:75:c8:64:1f: 79:76:c3:f4:c8:53:9c:16:e3:d2:00:21:d5:ab:90:d0:cf:a7: 00:65:7a:fe:92:72:b5:2e:0a:69:71:0b:5b:6c:a0:c2:c3:f0: a2:cf:29:9b:60:34:a0:94:90:61:49:34:4e:07:03:08:e7:71: a9:c3:7d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQBWIKmNbfIpU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VmNTBhNDQtODQxZC00ZTU0LWFlMTMtZmRjNmY2Yzc0 NDBlMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk OTdlY2FiMGUtNzkwYS00OTA4LTk4YWEtZTFlZDk1ZTgzY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmQUAjx6hoA87UeeQPzUNfAQ5XKX4Fs2W6KS eeDQq/RKvxfjaLGpVcZxN++lV6SLeMBJ4QalPKImmW1Wz3Rw9ONmOE7L1fMU5E0p vWmWk18rNE00V0BWitFYLf//8AS5EOXsE9jNU1xmtRG+WjpgFre0AiyHkEv9+uPW hKV/WFaKDjQbnRUlwrmhtJ7TVzq/M/uMS2LLlopYanmSP+X87I+rHg+Kl04Mm3ng YFWEqwSOlpKGp1D31aV5gVI3LRoeH8fqIrB5pBK11zgeOnJzOmdg40e7pAPE/6VP 1r+surUnUHJHBl8OgvCoo+ieactu94wbd8vvzEq3yhT+q60QOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+mm/Rhhf88oeFqatXFXQpXWZsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZWY1 MGE0NC04NDFkLTRlNTQtYWUxMy1mZGM2ZjZjNzQ0MGUvNTBlYTIwYzgtMDkzYS0z ZmU0LTgzZjQtZDE3NzI4ZTQ3MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2VmNTBhNDQtODQxZC00ZTU0LWFl MTMtZmRjNmY2Yzc0NDBlLzdlZjUwYTQ0LTg0MWQtNGU1NC1hZTEzLWZkYzZmNmM3 NDQwZS5jcmwwHwYDVR0jBBgwFoAUTdiTxn+YT4yM/0+urdt2Oq7F5p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZWY1MGE0NC04NDFkLTRlNTQtYWUxMy1mZGM2 ZjZjNzQ0MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5XKeLbamR4JwObxpgWCUbhdPALaWmkZeBCDivCJQ566cpzncKmUJwy 7wIfOTQOoyMp/yjisO/4gKXnFl/aaaXIh/M1AfmO1o7EqCbARP3Xw39inhzq8b+e 9Lel5+VeGrJQkLfyT50d0JuNw/qx09sWxSsDuzw8GRue4thQUwy6s7z67OM3n4TN 6moCZZUDbZLk7URobwWn8K7tPVStSiMEmiEN9fNg6/p3Hyiip+lh+dx7w2K+sd9Z zng7e7zforUodchkH3l2w/TIU5wW49IAIdWrkNDPpwBlev6ScrUuCmlxC1tsoMLD 8KLPKZtgNKCUkGFJNE4HAwjncanDfXA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org