$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa File: 49e5f290-618f-3550-b059-0c6232263b33.roa (raw, json) Hash identifier: QaP5S160msgrvMY1yRHB8xiRgNA5j5IXRfqJ27RPulo= Subject key identifier: 17:9E:45:C6:84:15:EA:DE:49:40:E2:A9:78:95:1C:64:54:61:64:53 Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F43285847A94F36FABCCFA87185097A80 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa Signing time: Fri 25 Oct 2024 18:51:10 +0000 ROA not before: Fri 25 Oct 2024 18:51:10 +0000 ROA not after: Thu 23 Jan 2025 19:51:10 +0000 asID: 11739 IP address blocks: 209.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a9:4f:36:fa:bc:cf:a8:71:85:09:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Oct 25 18:51:10 2024 GMT Not After : Jan 23 19:51:10 2025 GMT Subject: CN=91c2dc96-fb3e-443e-bb55-7dc0da0c30e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5d:8f:bd:e6:3f:23:79:9f:99:a8:74:74:fc: 8e:b6:84:68:79:b8:0c:ce:36:87:e7:cc:bc:e3:58: aa:29:44:06:f7:1a:00:cf:b6:e0:e1:ac:52:42:a7: 17:66:6e:2d:90:2f:2d:73:fa:fa:c8:a3:1b:ce:2e: 13:83:fd:88:73:04:76:0d:63:a8:1d:46:8a:97:93: 90:25:f3:ab:49:ca:99:cb:ae:c4:b1:7c:ec:83:b9: fb:42:b4:aa:56:ca:12:17:10:44:17:8c:06:d4:56: f9:a9:3c:95:5f:2b:2b:76:89:0b:5e:ad:82:73:e5: 20:5e:be:95:c4:d3:38:e5:7d:bf:cc:84:99:eb:52: 2d:f4:ed:86:34:42:46:33:d3:6b:2b:2d:fa:5f:fd: c4:a0:73:55:03:3d:f4:f8:ea:86:48:da:1c:ce:be: a1:f2:05:10:57:65:82:e9:69:40:f0:46:20:6a:ec: a0:fa:26:f1:f0:9f:59:f2:d4:24:00:66:4e:ae:f7: c2:de:98:6e:61:92:d6:b9:cc:25:6e:ad:55:b6:bf: 14:f4:c4:c0:fc:98:15:74:e2:f5:ff:19:3c:a6:6f: 0d:1b:e9:df:4f:83:1c:fe:5c:0f:b3:d5:e5:b5:f7: 5e:44:30:a1:0e:5e:21:9e:d6:8d:1c:d3:3f:f8:e5: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:45:C6:84:15:EA:DE:49:40:E2:A9:78:95:1C:64:54:61:64:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:2d:98:98:02:fc:f9:8f:61:2f:6c:e1:04:74:81:25:69:17: 22:1f:59:60:9d:f3:7a:b5:8b:5d:34:6f:ca:1c:df:3a:de:ce: b9:df:c8:11:bc:3e:e6:fd:bc:73:af:4c:6d:04:80:52:12:8e: 88:04:0e:84:d3:68:ba:6c:85:f5:fb:39:46:ed:dc:ed:d2:d1: 8c:98:de:a0:37:48:17:ed:76:9a:5b:54:fc:cd:6c:ef:ae:50: e5:cb:1a:7d:f3:0d:d0:99:d8:df:a3:f6:2b:6a:79:93:8f:25: bc:92:f3:9b:49:35:4b:46:80:f4:7c:29:e0:f9:0c:6d:8d:84: 9f:31:e0:79:6a:0a:7d:86:21:cb:c0:79:82:9f:de:ff:90:2d: e3:18:d5:04:78:d3:1b:34:d6:30:04:81:05:25:ee:8a:df:a5: f9:cd:3c:74:5f:d7:21:1a:ce:30:1c:ea:c2:12:79:35:80:ec: 66:66:bc:01:fd:8f:d0:24:bb:b5:22:67:53:41:d2:a2:dc:89: 2b:66:82:62:bd:67:cb:8d:d4:54:33:8e:6d:d6:4b:bc:b2:a5: 03:ca:84:fb:b9:f6:59:e5:e2:1e:98:89:82:2d:f5:3d:de:5b: 7b:8e:9c:0f:36:2d:1e:ab:d1:f9:80:54:3d:03:de:d2:8a:4d: 6f:29:cb:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEepTzb6vM+ocYUJeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI0MTAyNTE4NTExMFoXDTI1MDEyMzE5NTExMFowLzEtMCsGA1UEAxMk OTFjMmRjOTYtZmIzZS00NDNlLWJiNTUtN2RjMGRhMGMzMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF2PveY/I3mfmah0dPyOtoRoebgMzjaH58y8 41iqKUQG9xoAz7bg4axSQqcXZm4tkC8tc/r6yKMbzi4Tg/2IcwR2DWOoHUaKl5OQ JfOrScqZy67EsXzsg7n7QrSqVsoSFxBEF4wG1Fb5qTyVXysrdokLXq2Cc+UgXr6V xNM45X2/zISZ61It9O2GNEJGM9NrKy36X/3EoHNVAz30+OqGSNoczr6h8gUQV2WC 6WlA8EYgauyg+ibx8J9Z8tQkAGZOrvfC3phuYZLWucwlbq1Vtr8U9MTA/JgVdOL1 /xk8pm8NG+nfT4Mc/lwPs9XltfdeRDChDl4hntaNHNM/+OW67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeeRcaEFereSUDiqXiVHGRUYWRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvNDllNWYyOTAtNjE4Zi0z NTUwLWIwNTktMGM2MjMyMjYzYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQtmJgC/PmPYS9s4QR0gSVpFyIfWWCd83q1i100b8oc3zrezrnfyBG8 Pub9vHOvTG0EgFISjogEDoTTaLpshfX7OUbt3O3S0YyY3qA3SBftdppbVPzNbO+u UOXLGn3zDdCZ2N+j9itqeZOPJbyS85tJNUtGgPR8KeD5DG2NhJ8x4HlqCn2GIcvA eYKf3v+QLeMY1QR40xs01jAEgQUl7orfpfnNPHRf1yEazjAc6sISeTWA7GZmvAH9 j9Aku7UiZ1NB0qLciStmgmK9Z8uN1FQzjm3WS7yypQPKhPu59lnl4h6YiYIt9T3e W3uOnA82LR6r0fmAVD0D3tKKTW8py10= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org