$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa File: 3a88b321-e458-3859-b51a-662aa9fe79f6.roa (raw, json) Hash identifier: ks1JWY1gXo5/t0Jc07B7lGTV2sl1vqkSb6z4LNlb7Vg= Subject key identifier: D3:5E:81:7B:76:E9:5F:2E:B3:C8:E1:2F:76:10:D0:22:68:4A:18:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847AE36AF5A420287AC6E6F4400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 396551 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:af:5a:42:02:87:ac:6e:6f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=00149915-1442-4eec-932e-cae65bc4d9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:5b:1f:9e:16:eb:f6:b2:7c:63:ff:41:d9: f0:3e:2c:81:9c:a0:4d:dd:0c:dc:aa:3c:13:a3:79: 46:31:9b:1c:29:f1:ba:eb:69:30:e5:00:06:35:c0: 4a:22:88:5e:4c:ce:96:79:a2:c4:cc:a0:50:c4:ea: 20:a4:ec:32:b9:20:51:70:04:ca:79:41:ca:92:75: 23:ac:e7:e9:14:28:35:36:5d:2c:87:71:13:af:05: b1:24:c1:9b:4e:8e:b7:1e:a3:6c:e3:4a:48:60:43: db:5f:fb:34:48:ce:69:10:94:a5:57:5d:31:87:03: 74:c2:e1:86:22:12:ef:8d:a4:16:1d:73:58:4c:b1: ea:84:b2:e5:a9:ea:a8:46:77:09:1d:90:f6:5f:65: 3a:74:e4:44:2f:b9:13:3c:84:72:e5:f0:2f:65:c3: 3e:ca:49:7d:e2:04:06:95:ff:86:4b:17:03:c7:4c: 9b:24:16:0c:d7:83:21:dc:79:f5:dd:bf:e1:67:79: b8:77:c6:13:98:d6:a5:cc:82:84:c8:2c:25:6c:b7: 6e:d9:52:16:6c:ea:9b:b1:7e:97:77:6c:03:6c:c8: f9:d1:69:71:d0:d1:ec:4d:2d:e4:e1:a4:97:b1:a8: 4d:47:9a:64:e5:a7:72:99:56:89:79:aa:b0:1c:9f: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:81:7B:76:E9:5F:2E:B3:C8:E1:2F:76:10:D0:22:68:4A:18:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b5:aa:2f:33:5a:1f:21:c4:01:21:64:6f:50:b8:e9:fc:13: be:0b:bc:64:86:83:22:5f:45:f0:1b:a5:68:43:cd:b4:22:4a: a1:08:55:0c:b2:90:39:4a:f1:74:64:13:be:09:68:e4:4d:e7: 3c:d2:fd:be:98:d7:06:86:a2:b9:a0:de:bb:e5:e6:e1:51:af: 97:a1:6b:da:f4:04:ea:76:ea:ad:02:ee:54:42:1f:6b:90:df: 2a:39:7b:1a:ec:78:c1:aa:a2:d6:2a:71:58:7e:f8:cf:ad:40: 8d:0e:3d:b7:b0:f7:2e:4b:bc:af:c3:28:41:17:af:04:3f:db: e4:39:26:06:21:88:49:6f:d3:24:b9:da:86:81:b8:58:ce:5a: 08:48:65:c0:30:86:32:e3:42:5e:fd:48:01:2b:35:4f:92:e8: 16:72:3c:90:90:c4:d4:ee:72:bf:d0:a5:04:27:a9:ae:28:d0: 13:13:f8:c9:ad:9a:4d:da:de:a4:66:85:46:e9:c3:3a:6b:df: c9:85:25:0a:2e:6b:90:ae:4f:88:81:6f:97:31:01:0d:69:ea: 87:7e:fd:63:78:79:ea:a2:52:ba:ed:9a:a5:6b:d8:c5:0e:71: df:d5:33:3e:16:1b:d2:7a:04:08:cf:dd:cf:b8:3b:b2:48:8a: 25:09:fc:9e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEeuNq9aQgKHrG5vRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MDAxNDk5MTUtMTQ0Mi00ZWVjLTkzMmUtY2FlNjViYzRkOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHJbH54W6/ayfGP/QdnwPiyBnKBN3QzcqjwT o3lGMZscKfG662kw5QAGNcBKIoheTM6WeaLEzKBQxOogpOwyuSBRcATKeUHKknUj rOfpFCg1Nl0sh3ETrwWxJMGbTo63HqNs40pIYEPbX/s0SM5pEJSlV10xhwN0wuGG IhLvjaQWHXNYTLHqhLLlqeqoRncJHZD2X2U6dOREL7kTPIRy5fAvZcM+ykl94gQG lf+GSxcDx0ybJBYM14Mh3Hn13b/hZ3m4d8YTmNalzIKEyCwlbLdu2VIWbOqbsX6X d2wDbMj50Wlx0NHsTS3k4aSXsahNR5pk5adymVaJeaqwHJ+tZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNNegXt26V8us8jhL3YQ0CJoShjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E4OGIzMjEtZTQ1OC0z ODU5LWI1MWEtNjYyYWE5ZmU3OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCNtaovM1ofIcQBIWRvULjp/BO+C7xkhoMiX0Xw G6VoQ820IkqhCFUMspA5SvF0ZBO+CWjkTec80v2+mNcGhqK5oN675ebhUa+XoWva 9ATqduqtAu5UQh9rkN8qOXsa7HjBqqLWKnFYfvjPrUCNDj23sPcuS7yvwyhBF68E P9vkOSYGIYhJb9MkudqGgbhYzloISGXAMIYy40Je/UgBKzVPkugWcjyQkMTU7nK/ 0KUEJ6muKNATE/jJrZpN2t6kZoVG6cM6a9/JhSUKLmuQrk+IgW+XMQENaeqHfv1j eHnqolK67Zqla9jFDnHf1TM+FhvSegQIz93PuDuySIolCfye -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:01 2024 by rpki-client on console-ams.rpki-client.org