$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa File: 0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa (raw, json) Hash identifier: D9C9vlUxFIUvkhs/U8za+YiF5J4C2VVGhX8dhB9hJnU= Subject key identifier: 18:7E:49:49:7D:25:E0:F9:66:71:2E:44:9D:61:E5:38:88:F3:E7:CE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847791CF3ADCD514F68E38FFC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa Signing time: Tue 08 Oct 2024 12:31:06 +0000 ROA not before: Tue 08 Oct 2024 12:31:06 +0000 ROA not after: Mon 06 Jan 2025 13:31:06 +0000 asID: 36624 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:1c:f3:ad:cd:51:4f:68:e3:8f:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 8 12:31:06 2024 GMT Not After : Jan 6 13:31:06 2025 GMT Subject: CN=a490c9bd-f144-491d-b07f-97e91bef058f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5a:4a:94:63:bd:6a:73:f3:87:0c:43:5c:63: b6:b1:e6:ed:3b:27:a4:44:57:92:63:85:97:e2:0a: 2a:97:f3:48:c6:de:a3:d2:7f:71:6b:4a:27:e9:de: 1c:c1:01:6d:55:f2:7f:b5:16:0e:c0:dc:87:05:5d: ab:11:23:41:90:36:4b:d1:1d:7b:b3:4d:3b:6a:fe: 0d:e7:47:be:dd:9c:b5:71:60:f6:98:86:c7:b0:67: 69:b5:43:db:45:78:b5:1e:6c:cc:77:94:10:9d:5b: f5:c4:94:bb:b7:82:7e:61:ad:e4:78:52:f0:a8:81: 9b:e3:4e:a7:02:1e:8f:a0:1f:88:fd:cc:0d:89:0a: 5c:1f:40:38:80:07:57:7e:1c:53:42:95:07:19:0d: dd:f8:60:0e:cf:97:5d:76:50:3f:f8:8d:e9:9c:69: b0:2c:a6:07:f2:62:13:39:37:2a:ad:12:8a:14:c5: 59:69:b7:6c:86:39:3a:cb:19:eb:08:68:ac:69:e3: 47:28:ec:21:17:84:11:20:15:fd:8f:5d:20:31:a0: bb:e4:ea:57:15:73:bd:21:59:bc:4c:4e:b4:a9:29: 67:29:bd:89:69:88:bf:f5:97:ff:50:68:88:5f:fb: d2:57:cd:62:d2:c4:84:82:7a:f4:40:04:de:22:00: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7E:49:49:7D:25:E0:F9:66:71:2E:44:9D:61:E5:38:88:F3:E7:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a1:3b:83:e2:be:4f:26:73:28:71:bd:a8:86:d9:e8:04:6f: 15:cc:0c:71:f3:32:e7:8e:a8:0b:d0:d6:b9:8e:8b:2b:36:eb: 65:64:8e:b1:cd:af:d7:56:35:77:43:56:c5:22:64:89:da:8c: df:a6:89:4f:35:6b:d9:4e:c9:a2:8e:4c:6e:e7:d8:37:dc:af: bd:36:52:1b:3f:30:7c:90:7e:9a:8b:b2:45:f1:52:3f:09:36: 5d:36:b0:50:48:ed:f1:83:da:f3:50:0b:17:eb:6e:d3:c0:5a: 64:47:fd:7a:a5:f2:61:e6:c5:c3:b6:2d:ba:00:a1:b6:5c:f7: ab:9e:a1:cf:e1:08:8c:1f:e5:5f:3a:ca:77:74:a3:92:f3:82: 7e:08:cc:cd:f2:ed:5c:0d:53:06:a4:cf:8e:6c:47:b8:57:42: a7:11:98:f7:16:46:6e:3b:93:9b:5b:1b:ad:e5:9c:bc:0d:c4: a6:31:de:e5:57:3b:6f:0a:eb:48:c2:bd:f5:90:0f:64:de:13: 08:ea:2d:d8:b7:8c:68:2b:3a:c9:21:cd:31:d6:d5:ff:ec:21: 03:f3:4f:92:8f:32:3d:9c:81:5f:8a:c8:34:ed:77:48:55:a8: 3a:f7:1e:a7:8d:bf:03:b3:28:a8:a5:62:43:96:a0:38:75:38: fc:d3:4c:a2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEd5HPOtzVFPaOOP/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTAwODEyMzEwNloXDTI1MDEwNjEzMzEwNlowLzEtMCsGA1UEAxMk YTQ5MGM5YmQtZjE0NC00OTFkLWIwN2YtOTdlOTFiZWYwNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFpKlGO9anPzhwxDXGO2sebtOyekRFeSY4WX 4goql/NIxt6j0n9xa0on6d4cwQFtVfJ/tRYOwNyHBV2rESNBkDZL0R17s007av4N 50e+3Zy1cWD2mIbHsGdptUPbRXi1HmzMd5QQnVv1xJS7t4J+Ya3keFLwqIGb406n Ah6PoB+I/cwNiQpcH0A4gAdXfhxTQpUHGQ3d+GAOz5dddlA/+I3pnGmwLKYH8mIT OTcqrRKKFMVZabdshjk6yxnrCGisaeNHKOwhF4QRIBX9j10gMaC75OpXFXO9IVm8 TE60qSlnKb2JaYi/9Zf/UGiIX/vSV81i0sSEgnr0QATeIgB0hQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBh+SUl9JeD5ZnEuRJ1h5TiI8+fOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDA0MmNhNDMtZjYyZC0z MzFhLWJmN2EtZDE4MDIxZjllYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBooTuD4r5PJnMocb2ohtnoBG8VzAxx8zLnjqgL 0Na5josrNutlZI6xza/XVjV3Q1bFImSJ2ozfpolPNWvZTsmijkxu59g33K+9NlIb PzB8kH6ai7JF8VI/CTZdNrBQSO3xg9rzUAsX627TwFpkR/16pfJh5sXDti26AKG2 XPernqHP4QiMH+VfOsp3dKOS84J+CMzN8u1cDVMGpM+ObEe4V0KnEZj3FkZuO5Ob Wxut5Zy8DcSmMd7lVztvCutIwr31kA9k3hMI6i3Yt4xoKzrJIc0x1tX/7CED80+S jzI9nIFfisg07XdIVag69x6njb8DsyiopWJDlqA4dTj800yi -----END CERTIFICATE-----Generated at Fri Nov 22 04:33:56 2024 by rpki-client on console-ams.rpki-client.org