$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f0fbdbf-f8c7-3ae1-b87c-e1e32c1fab78.roa File: 3f0fbdbf-f8c7-3ae1-b87c-e1e32c1fab78.roa (raw, json) Hash identifier: hCss7C6sabOR+3/Fa+oM/qbY4bwwgH7XNIV5MMi9ywY= Subject key identifier: 20:B5:63:CB:F3:EB:1E:18:B4:E8:E4:81:6C:57:AB:91:E3:79:24:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847CD00CA15BFC53E336A66AD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f0fbdbf-f8c7-3ae1-b87c-e1e32c1fab78.roa Signing time: Thu 07 Nov 2024 13:42:15 +0000 ROA not before: Thu 07 Nov 2024 13:42:15 +0000 ROA not after: Wed 05 Feb 2025 13:42:15 +0000 asID: 397202 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cd:00:ca:15:bf:c5:3e:33:6a:66:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 7 13:42:15 2024 GMT Not After : Feb 5 13:42:15 2025 GMT Subject: CN=2f57a549-5005-44e4-9153-41dde1ff3269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:c6:71:89:d7:ba:29:01:c1:9a:82:8b:fd: 17:0c:ec:44:92:86:7f:dd:a7:84:2e:97:43:09:f5: e6:2a:b9:7f:3a:c7:2d:90:59:51:80:9d:61:04:59: ac:13:15:9f:af:84:2c:61:d9:8d:a2:44:7e:f2:6a: e5:fb:6f:27:2d:19:c0:a6:93:60:fa:73:67:f6:e6: 21:b3:4d:40:74:62:12:c3:f3:33:4e:f2:ac:6a:10: af:6d:63:02:05:eb:2e:84:c3:1b:56:32:9f:ea:54: 38:96:8c:db:4b:a5:f2:4f:00:17:a1:ff:20:80:02: f2:83:9b:d3:15:d7:bb:c6:47:01:96:16:6e:28:4c: 5f:9d:09:5d:07:88:07:19:e1:72:be:0d:c7:b2:f9: dd:83:30:cb:05:29:a7:4a:94:ac:25:12:32:8d:fa: 1b:45:eb:b1:c6:3b:44:5d:86:3c:cc:bc:de:41:2e: 97:12:38:71:14:6c:0f:9c:d6:df:d7:11:8b:b8:1a: 20:5c:46:0f:44:6d:58:24:16:6a:7f:c8:a5:bc:f1: 87:cb:7a:00:5b:03:4e:4b:a0:33:b8:8d:05:e1:2d: c5:fa:ef:8f:74:5c:cc:33:3e:7a:2b:de:4e:00:85: 1d:1f:30:d1:28:99:1a:72:04:4b:21:0f:1c:5f:7a: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B5:63:CB:F3:EB:1E:18:B4:E8:E4:81:6C:57:AB:91:E3:79:24:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f0fbdbf-f8c7-3ae1-b87c-e1e32c1fab78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b6:47:6a:02:59:33:f5:38:20:fd:d3:01:36:47:5f:47:f2: 84:0d:c4:62:5e:e7:b1:ab:0b:85:f9:6c:4a:84:9c:2b:0f:72: d9:f7:1f:ab:b0:85:70:ab:49:db:8e:5d:f0:d3:f6:65:77:02: 9e:47:2b:ea:c8:36:05:6a:8b:df:c7:ac:71:ef:d7:09:48:b8: 6d:f0:8f:62:c9:f6:83:31:fc:81:f3:fb:ee:c8:fa:dd:72:48: 94:79:a6:60:4b:9f:ce:6b:bb:a8:a7:19:7b:16:7a:ed:ed:17: 0e:4e:db:df:7c:36:b2:da:fd:e4:1b:de:0d:c6:80:94:c6:f2: 7a:9c:63:b2:88:2d:1e:29:9a:10:89:d0:92:22:48:81:ff:6e: e1:cd:24:e2:f9:ca:1d:e3:c2:1b:49:71:07:9b:07:44:1f:5e: b9:14:1d:a3:3f:74:34:17:52:23:8d:5e:18:dc:49:7e:12:f9: 8e:97:48:ad:9e:19:fc:eb:6e:cd:9d:56:68:04:8e:07:7a:ad: 83:e5:bc:eb:8d:22:47:7e:60:c9:7d:b4:0f:9b:7f:b4:e8:bc: b3:c7:5a:14:be:a8:74:fa:f3:9b:bf:01:b9:9d:fb:81:37:60: c9:ab:d2:a0:9f:c6:ba:3f:bb:8e:09:30:a1:9e:08:3f:83:a3: 40:29:17:52 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfNAMoVv8U+M2pmrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTEwNzEzNDIxNVoXDTI1MDIwNTEzNDIxNVowLzEtMCsGA1UEAxMk MmY1N2E1NDktNTAwNS00NGU0LTkxNTMtNDFkZGUxZmYzMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJrGcYnXuikBwZqCi/0XDOxEkoZ/3aeELpdD CfXmKrl/OsctkFlRgJ1hBFmsExWfr4QsYdmNokR+8mrl+28nLRnAppNg+nNn9uYh s01AdGISw/MzTvKsahCvbWMCBesuhMMbVjKf6lQ4lozbS6XyTwAXof8ggALyg5vT Fde7xkcBlhZuKExfnQldB4gHGeFyvg3HsvndgzDLBSmnSpSsJRIyjfobReuxxjtE XYY8zLzeQS6XEjhxFGwPnNbf1xGLuBogXEYPRG1YJBZqf8ilvPGHy3oAWwNOS6Az uI0F4S3F+u+PdFzMMz56K95OAIUdHzDRKJkacgRLIQ8cX3rIiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCC1Y8vz6x4YtOjkgWxXq5HjeSSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YwZmJkYmYtZjhjNy0z YWUxLWI4N2MtZTFlMzJjMWZhYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBztkdqAlkz9Tgg/dMBNkdfR/KEDcRiXuexqwuF +WxKhJwrD3LZ9x+rsIVwq0nbjl3w0/ZldwKeRyvqyDYFaovfx6xx79cJSLht8I9i yfaDMfyB8/vuyPrdckiUeaZgS5/Oa7uopxl7Fnrt7RcOTtvffDay2v3kG94NxoCU xvJ6nGOyiC0eKZoQidCSIkiB/27hzSTi+cod48IbSXEHmwdEH165FB2jP3Q0F1Ij jV4Y3El+EvmOl0itnhn8627NnVZoBI4Heq2D5bzrjSJHfmDJfbQPm3+06Lyzx1oU vqh0+vObvwG5nfuBN2DJq9Kgn8a6P7uOCTChngg/g6NAKRdS -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:28 2024 by rpki-client on console-fra.rpki-client.org