$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa File: 9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa (raw, json) Hash identifier: GtqMRHhoqGfFkXGKSM/+i2oRtf0ToZQuHDR6C+3JGhQ= Subject key identifier: 2E:F6:91:4F:FA:42:A9:46:8B:FF:0B:BF:06:12:E4:D0:7A:C1:5F:AA Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F43285847A8A14F0CE8C9EA68026A41E0 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 46154 IP address blocks: 157.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:4f:0c:e8:c9:ea:68:02:6a:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=2a8397f5-f730-43b9-9b93-63fabc988915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:93:1d:2e:dd:47:8a:9f:cd:1d:95:fc:39: c0:f7:bd:02:d3:d9:de:79:94:b6:2f:7c:d6:c1:c7: 99:ee:1a:8d:b4:8d:c9:a5:70:29:8c:02:ee:03:3c: 86:5d:c1:59:86:53:86:c5:9a:fe:c6:ec:2b:e2:5d: 7d:1e:27:b1:e6:f9:9e:41:22:5a:46:ea:b5:db:0b: 0e:2e:71:4b:31:83:bb:66:a7:6a:2d:83:c5:b1:e1: 7b:63:b7:9a:be:fc:6b:8d:bb:d6:92:23:13:24:1d: e5:bc:44:64:9f:b0:24:2c:a6:61:fe:df:38:1c:d9: 6b:bb:0c:ad:54:c0:c8:c8:36:57:7f:2b:c6:14:e5: 45:bc:2e:c6:37:67:8b:00:b5:93:35:c4:cc:29:2e: 9b:6b:a1:25:85:28:a7:f9:26:c1:53:8b:48:06:f8: 0d:56:7d:43:4d:0f:c6:ff:eb:4f:ea:81:fe:fe:86: 46:0f:97:21:bb:7d:a0:5b:71:27:f3:41:5a:16:ef: 2b:f3:01:7e:af:fe:29:3f:ed:47:d3:da:81:5c:0a: 9b:2d:3c:f6:17:8e:67:f9:93:35:2b:ee:5d:c2:86: cf:1e:ef:2b:30:01:e4:43:20:a5:64:03:72:64:8d: d6:56:6a:c7:e0:8b:a5:ea:65:ed:dc:fa:37:50:ff: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F6:91:4F:FA:42:A9:46:8B:FF:0B:BF:06:12:E4:D0:7A:C1:5F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 157.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cd:44:ab:34:e2:99:4e:e2:05:ad:55:7f:f2:8b:cc:c4:cd: 62:a5:4f:13:b4:ae:d9:18:d7:89:84:d4:e9:da:8f:e2:01:f8: 36:39:2b:92:11:cd:67:f6:5c:03:b3:89:10:fa:fb:b7:e6:80: b8:a8:de:54:9e:a2:8b:d0:27:2b:7d:b2:ed:13:16:f4:e0:eb: 6f:2f:b2:b5:76:a2:9d:a1:e3:9c:48:b1:f9:d2:83:c9:22:6e: 9d:30:cb:4c:6a:60:f7:a7:cd:3b:25:82:f8:75:8b:eb:ca:3e: 20:01:13:c7:f5:82:47:34:44:f8:07:7f:b2:3d:b1:30:c2:6c: 14:33:d7:fa:3f:c1:5d:d2:09:b9:21:d1:59:aa:0b:cd:f8:12: 9b:ba:94:19:ea:04:d9:a7:4a:64:1e:0d:b8:c2:4a:92:d7:23: 4e:dd:1f:c8:2a:4d:a2:3a:33:1f:e7:d8:e4:7f:b0:1b:b9:5a: 9b:04:d1:5a:1f:e5:18:94:f0:d4:40:53:3f:d8:a0:3e:70:c1: 54:03:74:70:83:15:6d:7f:dd:42:77:f3:93:f9:03:a5:d4:fa: 8c:9c:df:ba:b2:b9:de:8c:f4:0e:b7:c0:7d:65:85:55:34:92: 6e:f1:6c:89:05:fe:4c:9b:97:31:22:84:1e:55:1c:b5:8c:7b: 21:1b:a6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooU8M6MnqaAJqQeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk MmE4Mzk3ZjUtZjczMC00M2I5LTliOTMtNjNmYWJjOTg4OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXGTHS7dR4qfzR2V/DnA970C09neeZS2L3zW wceZ7hqNtI3JpXApjALuAzyGXcFZhlOGxZr+xuwr4l19Hiex5vmeQSJaRuq12wsO LnFLMYO7ZqdqLYPFseF7Y7eavvxrjbvWkiMTJB3lvERkn7AkLKZh/t84HNlruwyt VMDIyDZXfyvGFOVFvC7GN2eLALWTNcTMKS6ba6ElhSin+SbBU4tIBvgNVn1DTQ/G /+tP6oH+/oZGD5chu32gW3En80FaFu8r8wF+r/4pP+1H09qBXAqbLTz2F45n+ZM1 K+5dwobPHu8rMAHkQyClZANyZI3WVmrH4Iul6mXt3Po3UP86rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC72kU/6QqlGi/8LvwYS5NB6wV+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvOWQ1MWY5NWEtMGMzMy0z YWEzLWI2ZWUtZGIwZmY4NDkxOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnTQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXNRKs04plO4gWtVX/yi8zEzWKlTxO0rtkY14mE1Onaj+IB+DY5K5IR zWf2XAOziRD6+7fmgLio3lSeoovQJyt9su0TFvTg628vsrV2op2h45xIsfnSg8ki bp0wy0xqYPenzTslgvh1i+vKPiABE8f1gkc0RPgHf7I9sTDCbBQz1/o/wV3SCbkh 0VmqC834Epu6lBnqBNmnSmQeDbjCSpLXI07dH8gqTaI6Mx/n2OR/sBu5WpsE0Vof 5RiU8NRAUz/YoD5wwVQDdHCDFW1/3UJ385P5A6XU+oyc37qyud6M9A63wH1lhVU0 km7xbIkF/kyblzEihB5VHLWMeyEbpoA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:43 2024 by rpki-client on console-fra.rpki-client.org