$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa File: 9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa (raw, json) Hash identifier: CO/OFaWoJF4KktqjZpiBLM3LByEIvd9h9St7cvNWPXo= Subject key identifier: BC:B4:8A:6E:E4:B8:42:FC:75:B5:D1:B9:00:59:60:7E:0A:FD:45:24 Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F43285846C94A8EA494166931E0010680 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa Signing time: Tue 06 Aug 2024 13:00:38 +0000 ROA not before: Tue 06 Aug 2024 13:00:38 +0000 ROA not after: Mon 04 Nov 2024 14:00:38 +0000 asID: 46154 IP address blocks: 157.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Sep 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:c9:4a:8e:a4:94:16:69:31:e0:01:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Aug 6 13:00:38 2024 GMT Not After : Nov 4 14:00:38 2024 GMT Subject: CN=5a869338-de84-4ff5-b68e-0da72c7eb4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:35:2d:d2:38:bd:f5:c3:2f:7b:1a:7e:aa:14: cb:56:0b:d4:56:5b:18:6c:8f:fb:82:e1:27:15:d6: 32:ee:6d:ff:e2:6f:6c:9a:94:d2:a7:eb:41:73:32: 62:70:f3:45:11:7e:4e:ce:14:95:fb:7d:1e:0a:f5: 9b:68:48:21:e7:7e:7c:14:b0:91:05:f0:a4:5a:63: b3:69:76:72:3a:a1:04:53:af:12:82:88:ef:65:a0: 73:11:9f:f7:3f:03:06:63:69:62:2f:87:dc:52:d3: 1a:b2:b2:18:00:c5:b0:4c:22:2f:c2:21:09:04:d7: 5d:8c:95:9e:40:76:95:47:71:06:98:35:4b:c9:df: 2c:dc:9c:a9:34:90:4c:a4:c9:50:11:08:eb:2f:fc: ef:78:2d:13:1e:dd:69:df:37:16:47:5f:4b:53:f3: 45:b9:0f:9b:68:6d:b2:f7:c7:23:56:6d:80:cb:af: 2a:49:de:db:b2:cf:e5:a5:7b:c6:b7:d5:7d:a1:b4: fd:89:bf:d6:26:68:1d:1c:c5:a5:af:f6:7f:ff:9f: 24:fc:2f:c1:76:cc:ea:7d:a8:a3:a2:3a:bf:b3:c4: d0:ef:8d:88:01:04:f9:7b:99:94:ea:51:5f:b6:a7: 21:c8:cb:3f:66:9b:19:22:91:17:01:ca:8e:a2:40: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B4:8A:6E:E4:B8:42:FC:75:B5:D1:B9:00:59:60:7E:0A:FD:45:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 157.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3f:d1:5b:83:27:ba:d8:16:d6:47:b7:df:a5:46:34:c3:85: 6e:d5:92:2d:3f:a8:63:63:6b:39:41:1f:8e:db:65:ff:a3:43: 16:18:ee:73:f4:05:2a:69:f0:42:b8:e6:b4:59:62:16:e6:1a: 1a:db:73:ef:a6:f3:29:da:25:57:c4:ef:96:65:13:10:9c:ad: b7:3e:94:84:94:10:32:93:47:81:60:d4:1a:a1:75:99:08:4b: 6d:9c:38:5b:a8:04:45:11:89:fb:cb:d6:42:2c:a3:b8:e0:39: d0:c6:4a:a5:cf:c0:cb:7b:ac:7e:91:23:c6:ab:d1:04:5b:16: 58:4e:73:eb:07:aa:bc:d8:0b:ed:1d:52:62:31:a9:c7:3f:d5: b2:12:0e:64:91:53:5c:11:d7:b2:3c:d9:d1:f9:8c:62:03:48: 9b:c4:39:87:77:1b:f4:f6:2f:92:33:97:31:7b:40:93:32:1e: 1d:73:33:d0:a5:ac:25:46:cf:3a:5d:31:7a:37:ea:b6:14:53: df:33:11:a0:dd:cc:98:96:f6:fa:9e:70:95:a0:57:b2:e8:f5: 06:1e:95:79:23:4a:99:f1:9b:0a:87:3d:de:4a:68:52:04:5e: 14:73:f0:63:57:03:e9:b3:14:08:76:5c:90:ed:32:53:b7:38: 1a:33:47:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbJSo6klBZpMeABBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI0MDgwNjEzMDAzOFoXDTI0MTEwNDE0MDAzOFowLzEtMCsGA1UEAxMk NWE4NjkzMzgtZGU4NC00ZmY1LWI2OGUtMGRhNzJjN2ViNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljUt0ji99cMvexp+qhTLVgvUVlsYbI/7guEn FdYy7m3/4m9smpTSp+tBczJicPNFEX5OzhSV+30eCvWbaEgh5358FLCRBfCkWmOz aXZyOqEEU68SgojvZaBzEZ/3PwMGY2liL4fcUtMasrIYAMWwTCIvwiEJBNddjJWe QHaVR3EGmDVLyd8s3JypNJBMpMlQEQjrL/zveC0THt1p3zcWR19LU/NFuQ+baG2y 98cjVm2Ay68qSd7bss/lpXvGt9V9obT9ib/WJmgdHMWlr/Z//58k/C/Bdszqfaij ojq/s8TQ742IAQT5e5mU6lFftqchyMs/ZpsZIpEXAcqOokBnJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy0im7kuEL8dbXRuQBZYH4K/UUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvOWQ1MWY5NWEtMGMzMy0z YWEzLWI2ZWUtZGIwZmY4NDkxOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnTQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE/0VuDJ7rYFtZHt9+lRjTDhW7Vki0/qGNjazlBH47bZf+jQxYY7nP0 BSpp8EK45rRZYhbmGhrbc++m8ynaJVfE75ZlExCcrbc+lISUEDKTR4Fg1BqhdZkI S22cOFuoBEURifvL1kIso7jgOdDGSqXPwMt7rH6RI8ar0QRbFlhOc+sHqrzYC+0d UmIxqcc/1bISDmSRU1wR17I82dH5jGIDSJvEOYd3G/T2L5IzlzF7QJMyHh1zM9Cl rCVGzzpdMXo36rYUU98zEaDdzJiW9vqecJWgV7Lo9QYelXkjSpnxmwqHPd5KaFIE XhRz8GNXA+mzFAh2XJDtMlO3OBozRyc= -----END CERTIFICATE-----Generated at Sat Sep 28 19:44:18 2024 by rpki-client on console-fra.rpki-client.org