$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa File: 7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa (raw, json) Hash identifier: mkGzHzaPvdEjL19eH2AYXi5HaRpycN2QiRPVYlMZ248= Subject key identifier: AD:49:DC:50:98:1D:3E:02:DC:D6:E9:0B:2F:6C:73:0B:2F:8C:26:3C Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F43285847A94FF345CED3BE98B2EDC9C0 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa Signing time: Fri 25 Oct 2024 18:52:39 +0000 ROA not before: Fri 25 Oct 2024 18:52:39 +0000 ROA not after: Thu 23 Jan 2025 19:52:39 +0000 asID: 11739 IP address blocks: 209.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a9:4f:f3:45:ce:d3:be:98:b2:ed:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Oct 25 18:52:39 2024 GMT Not After : Jan 23 19:52:39 2025 GMT Subject: CN=505e7208-3a93-462f-b422-1bc99b22e802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:11:ac:28:e9:3b:18:39:13:cc:84:b7:3e: 18:79:26:ff:ec:36:99:60:76:d5:45:6d:3e:eb:55: 66:3c:ba:98:22:28:fe:85:5a:a8:10:9e:9a:fa:0f: 77:b1:ae:61:6d:7e:06:16:50:a9:26:39:42:0e:9c: 69:79:de:f2:91:be:3f:77:c3:ce:fb:39:64:da:b2: 95:55:51:01:c5:5f:5f:03:3a:45:fb:d8:23:30:02: be:c3:e6:60:97:cd:ba:84:75:1c:fa:93:f0:f5:a0: 04:78:a8:a0:80:37:0d:7a:71:db:4b:eb:34:67:e1: 15:c7:fb:81:87:f5:9b:c6:af:5c:77:2a:61:cf:22: 7e:89:d7:95:f3:86:d5:ce:f3:ed:4c:aa:e9:2f:30: 2b:90:5e:7a:1a:6b:8e:0f:cd:51:1e:dc:bf:45:8c: ff:f9:de:89:ef:c3:4b:92:5c:20:82:f3:cd:e4:b7: 86:b6:46:9c:be:4e:6d:cf:c9:f3:a8:1d:16:4c:cc: a9:ed:9b:44:00:52:23:36:e9:a7:17:9a:67:b4:21: 10:19:a9:26:ce:80:90:0c:0e:82:24:8c:32:07:6b: 72:6b:65:d2:c2:4d:73:cf:14:b9:28:78:ee:af:35: f1:60:60:64:d7:3a:c4:b0:44:49:a5:c0:7d:fd:98: a2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:49:DC:50:98:1D:3E:02:DC:D6:E9:0B:2F:6C:73:0B:2F:8C:26:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:ad:af:c9:d7:af:3f:be:e4:28:a6:23:2d:1a:9b:15:44:b6: d7:58:b0:1f:fb:f5:e8:08:97:b0:9e:f5:a3:94:8d:01:ed:e6: e3:e6:ad:56:ae:52:72:6b:d1:88:e3:8c:bd:96:07:7f:e5:e2: 59:76:60:45:e8:b3:38:54:32:68:50:67:76:f4:cf:98:ff:5a: f5:6b:b8:f8:ff:03:3e:ea:fd:ec:a7:8b:35:0f:a3:d3:64:71: 2e:60:27:74:11:e3:57:8d:78:a6:f2:11:c9:14:cc:ab:95:30: 2b:06:bc:d9:68:5f:72:4d:00:52:de:6d:30:ea:ec:d7:5c:30: 4b:ad:74:c0:34:b1:67:f1:bc:4b:42:b0:34:99:33:33:ca:48: 0a:c8:1d:2e:2e:51:5b:28:fe:44:55:8a:84:7a:68:b2:43:50: 55:63:a2:05:ba:c3:d4:e9:38:2f:73:c6:be:b9:5f:2b:89:fe: aa:d0:39:2c:e1:a5:83:83:4f:ee:15:8d:d6:a9:c0:c5:14:f4: da:7a:54:ae:6e:36:c6:27:cf:e9:61:86:7a:6b:12:bc:a9:bb: 30:2f:3a:1a:d6:a3:55:99:a0:70:e0:d6:79:8a:03:72:bc:cc: a8:2a:eb:49:2e:10:7b:cc:ce:37:db:69:2b:19:dc:e3:6d:49: 38:cd:3e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEepT/NFztO+mLLtycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI0MTAyNTE4NTIzOVoXDTI1MDEyMzE5NTIzOVowLzEtMCsGA1UEAxMk NTA1ZTcyMDgtM2E5My00NjJmLWI0MjItMWJjOTliMjJlODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3ARrCjpOxg5E8yEtz4YeSb/7DaZYHbVRW0+ 61VmPLqYIij+hVqoEJ6a+g93sa5hbX4GFlCpJjlCDpxped7ykb4/d8PO+zlk2rKV VVEBxV9fAzpF+9gjMAK+w+Zgl826hHUc+pPw9aAEeKiggDcNenHbS+s0Z+EVx/uB h/Wbxq9cdyphzyJ+ideV84bVzvPtTKrpLzArkF56GmuOD81RHty/RYz/+d6J78NL klwggvPN5LeGtkacvk5tz8nzqB0WTMyp7ZtEAFIjNumnF5pntCEQGakmzoCQDA6C JIwyB2tya2XSwk1zzxS5KHjurzXxYGBk1zrEsERJpcB9/ZiihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1J3FCYHT4C3NbpCy9scwsvjCY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvN2VlZjUzZjItYTcwYS0z ZGU1LTg3ZTktM2NiYzZiY2M3NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMetr8nXrz++5CimIy0amxVEttdYsB/79egIl7Ce9aOUjQHt5uPmrVau UnJr0YjjjL2WB3/l4ll2YEXoszhUMmhQZ3b0z5j/WvVruPj/Az7q/eynizUPo9Nk cS5gJ3QR41eNeKbyEckUzKuVMCsGvNloX3JNAFLebTDq7NdcMEutdMA0sWfxvEtC sDSZMzPKSArIHS4uUVso/kRVioR6aLJDUFVjogW6w9TpOC9zxr65XyuJ/qrQOSzh pYODT+4VjdapwMUU9Np6VK5uNsYnz+lhhnprErypuzAvOhrWo1WZoHDg1nmKA3K8 zKgq60kuEHvMzjfbaSsZ3ONtSTjNPoY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org