$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa File: d489c930-352c-3f17-a5d2-b2cc806aff09.roa (raw, json) Hash identifier: 8Vx0b/9w9eaY6j31qpMLGe8mPt4qOXCIyeCymJU9GUo= Subject key identifier: 86:3D:A8:24:0F:E5:E6:04:E5:C4:AB:FC:DC:29:2A:90:F9:78:17:78 Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F43285847A9599DBBC0BE2DE6EBC5C180 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa Signing time: Fri 25 Oct 2024 19:12:08 +0000 ROA not before: Fri 25 Oct 2024 19:12:08 +0000 ROA not after: Thu 23 Jan 2025 20:12:08 +0000 asID: 11739 IP address blocks: 209.20.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a9:59:9d:bb:c0:be:2d:e6:eb:c5:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Oct 25 19:12:08 2024 GMT Not After : Jan 23 20:12:08 2025 GMT Subject: CN=1766febf-2a8d-488d-8742-15ece8468aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0e:66:10:fa:4a:7c:4c:cb:b5:cb:bd:d0:59: 26:2c:8b:8f:5e:a9:ea:d0:16:54:47:5f:b0:a1:d4: 97:39:2b:de:08:d2:6d:1c:a3:5e:5a:2b:96:c9:ce: a7:5a:60:c8:9a:a7:f8:f0:de:52:6a:4a:76:a2:82: e0:49:b9:fa:c1:f8:97:d2:49:ea:dc:3a:34:fd:8b: 17:d5:41:53:72:32:e5:2b:9d:c0:88:6a:f7:a2:fb: c2:e4:e1:48:81:ce:4f:84:b7:98:85:85:99:f4:29: a9:94:d3:ae:5d:38:1b:ab:39:7d:2c:40:bd:67:e4: 54:bc:0c:1b:cb:d4:44:27:5a:14:dc:c6:2d:85:84: 3d:c6:df:c0:2a:0d:70:70:99:5a:0d:33:31:36:12: 03:6d:b9:94:43:2e:77:c3:d5:1f:ff:a1:f1:f3:ca: 4f:96:35:8f:c8:53:ea:27:f6:9c:cc:16:6d:c0:53: e6:c4:c9:fc:7e:2d:a1:79:3b:ff:63:78:d4:51:66: a0:b6:6f:f9:3f:23:d8:fd:b6:56:96:f5:07:12:73: 1c:d8:18:84:3f:7b:96:5b:a2:4c:04:8b:db:ba:6f: a5:7f:bc:98:98:42:c1:0c:e6:11:bb:f9:fe:22:25: 13:e3:51:53:b4:88:e8:a4:36:90:38:3c:5b:ba:59: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3D:A8:24:0F:E5:E6:04:E5:C4:AB:FC:DC:29:2A:90:F9:78:17:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:1a:39:1c:2e:ad:e8:51:d1:f1:4d:67:e5:91:4e:fd:84:29: 05:73:75:2d:59:01:0e:22:73:66:a7:5d:21:7a:69:22:18:a5: 25:fc:bb:80:3c:8c:c3:87:a5:c6:f1:a5:f1:8d:50:3d:57:34: 9b:d1:41:c8:a0:bd:33:20:67:4f:3d:e7:28:0a:10:a9:25:1e: 6b:53:4e:87:01:79:8e:b1:72:94:a9:15:20:e9:a4:7c:f6:88: fe:e3:35:e7:76:34:79:a5:61:a0:d5:a8:c4:31:2a:7c:da:52: 5b:ca:7d:86:3b:ac:43:2b:8c:6d:23:cb:f0:cc:6f:2f:8e:7e: d0:58:6c:53:f2:be:6d:7e:d9:a5:78:e9:64:d9:0c:30:1a:84: a1:2e:3c:ff:e4:ea:c6:70:c1:4e:b8:ae:da:d1:2c:96:ea:be: 15:9c:70:9a:b0:c5:66:17:25:f2:b6:fa:c0:85:fa:7e:1f:cb: 4d:84:2f:dc:0b:72:d9:d8:17:17:3c:24:a6:18:e2:c9:d3:0e: e9:eb:c0:55:39:b6:b0:a2:09:a2:b3:a1:48:8e:b3:15:73:3e: 58:c5:63:da:03:4d:01:2f:82:69:0b:28:ad:a1:7c:2e:2a:c4: 6d:07:85:23:c0:1a:44:fc:9f:9f:f9:2b:bd:e5:31:b5:06:19: 4c:89:e7:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEepWZ27wL4t5uvFwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI0MTAyNTE5MTIwOFoXDTI1MDEyMzIwMTIwOFowLzEtMCsGA1UEAxMk MTc2NmZlYmYtMmE4ZC00ODhkLTg3NDItMTVlY2U4NDY4YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw5mEPpKfEzLtcu90FkmLIuPXqnq0BZUR1+w odSXOSveCNJtHKNeWiuWyc6nWmDImqf48N5Sakp2ooLgSbn6wfiX0knq3Do0/YsX 1UFTcjLlK53AiGr3ovvC5OFIgc5PhLeYhYWZ9CmplNOuXTgbqzl9LEC9Z+RUvAwb y9REJ1oU3MYthYQ9xt/AKg1wcJlaDTMxNhIDbbmUQy53w9Uf/6Hx88pPljWPyFPq J/aczBZtwFPmxMn8fi2heTv/Y3jUUWagtm/5PyPY/bZWlvUHEnMc2BiEP3uWW6JM BIvbum+lf7yYmELBDOYRu/n+IiUT41FTtIjopDaQODxbulnZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY9qCQP5eYE5cSr/NwpKpD5eBd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvZDQ4OWM5MzAtMzUyYy0z ZjE3LWE1ZDItYjJjYzgwNmFmZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoaORwurehR0fFNZ+WRTv2EKQVzdS1ZAQ4ic2anXSF6aSIYpSX8u4A8 jMOHpcbxpfGNUD1XNJvRQcigvTMgZ0895ygKEKklHmtTTocBeY6xcpSpFSDppHz2 iP7jNed2NHmlYaDVqMQxKnzaUlvKfYY7rEMrjG0jy/DMby+OftBYbFPyvm1+2aV4 6WTZDDAahKEuPP/k6sZwwU64rtrRLJbqvhWccJqwxWYXJfK2+sCF+n4fy02EL9wL ctnYFxc8JKYY4snTDunrwFU5trCiCaKzoUiOsxVzPljFY9oDTQEvgmkLKK2hfC4q xG0HhSPAGkT8n5/5K73lMbUGGUyJ54w= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org