$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a5425cd-b95a-34b5-a274-7a8152795160.roa File: 5a5425cd-b95a-34b5-a274-7a8152795160.roa (raw, json) Hash identifier: OZx1X6lY57Z4rF/gk2aox4tGH/0aZ3rW2a6xo4H2q0E= Subject key identifier: CF:8B:D1:21:37:75:33:FC:FE:39:51:C6:A7:A8:A8:4C:AF:03:9D:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847659402C47FBEEF6F5DAB8E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a5425cd-b95a-34b5-a274-7a8152795160.roa Signing time: Tue 01 Oct 2024 12:34:49 +0000 ROA not before: Tue 01 Oct 2024 12:34:49 +0000 ROA not after: Mon 30 Dec 2024 13:34:49 +0000 asID: 397203 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:94:02:c4:7f:be:ef:6f:5d:ab:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 12:34:49 2024 GMT Not After : Dec 30 13:34:49 2024 GMT Subject: CN=1ea605eb-3291-4417-8315-c37073632747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:48:bd:b1:4e:d4:f4:9e:5a:36:a5:07:68: 2c:f9:85:4e:16:a6:ba:a9:33:69:ff:27:84:46:63: 36:53:72:0c:4a:57:31:05:3e:e7:c4:09:51:bb:85: 51:37:df:0a:ef:7d:a1:23:6a:49:5c:b1:79:4b:ce: d4:39:7f:f1:3f:d6:4d:26:d6:e9:49:f7:73:a5:6e: dc:b9:8b:f9:c1:a4:3d:3f:c5:c9:cd:ad:df:d5:fd: 64:e7:43:99:92:ff:84:76:a3:e1:91:fa:d9:cd:14: 53:fa:fd:ec:e6:a6:77:15:17:3b:93:ac:cf:43:34: ab:42:04:93:92:1f:b7:9b:06:e1:a2:09:5c:01:92: 09:b0:c9:2f:50:c6:5e:4e:c0:14:e1:e2:0c:8c:80: b4:09:37:12:bf:38:60:26:29:07:b7:e1:72:39:24: d0:e9:f9:fa:10:40:f1:a8:63:8d:36:d1:28:2b:51: 31:1d:31:39:4a:2d:9e:59:a8:21:41:6d:4e:06:1d: 0b:33:a7:fa:b9:1f:dc:9c:88:cb:bf:a0:b5:7d:3b: e3:cc:9e:d1:18:23:9d:e0:3f:e6:76:b1:6b:97:ab: 5f:5c:3c:42:2f:f4:53:34:12:60:eb:6b:5e:df:f8: 20:ed:5e:cc:4a:97:d9:b3:49:0b:c2:1f:b1:ce:34: 41:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8B:D1:21:37:75:33:FC:FE:39:51:C6:A7:A8:A8:4C:AF:03:9D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a5425cd-b95a-34b5-a274-7a8152795160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:53:01:83:c3:25:52:9c:d9:73:43:4f:03:52:c2:26:da:d9: 00:4b:01:da:97:8d:34:11:50:17:c9:b6:6e:74:02:e6:83:29: 4c:89:06:05:1d:7e:53:67:76:ce:bb:19:28:1f:c5:6e:c4:80: 64:53:48:a3:4e:5b:31:65:38:2a:67:c4:94:84:4c:2d:27:15: 3c:5b:d1:2a:52:10:55:83:73:4b:8d:27:e8:ce:7b:5f:66:2d: e8:fb:62:98:d9:a4:ec:b8:74:f2:ff:b9:99:71:74:88:9d:1b: 4a:3e:a3:c7:b3:bb:f7:0b:19:2e:81:19:3a:53:93:0e:67:f8: 49:3e:11:fe:fd:b6:90:9c:a3:50:7e:63:32:33:29:45:32:3d: ed:72:66:83:bf:5f:41:19:88:10:68:7f:d6:63:83:de:cb:0b: 3d:ea:3c:60:7d:f3:ae:34:60:2c:1e:45:72:be:ef:f3:7c:0a: 07:0e:3e:15:b4:b2:70:87:d9:21:13:42:8c:30:16:de:cc:af: ae:20:d5:20:92:17:2b:94:db:67:06:28:87:85:b2:e8:03:79: 32:cc:c5:50:75:9f:2d:b4:27:9c:d2:0e:21:4b:ae:f3:f7:50: bb:62:19:90:30:28:29:ca:6b:d5:72:39:5f:b6:be:11:19:5d: bd:91:9b:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdllALEf77vb12rjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTAwMTEyMzQ0OVoXDTI0MTIzMDEzMzQ0OVowLzEtMCsGA1UEAxMk MWVhNjA1ZWItMzI5MS00NDE3LTgzMTUtYzM3MDczNjMyNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPNIvbFO1PSeWjalB2gs+YVOFqa6qTNp/yeE RmM2U3IMSlcxBT7nxAlRu4VRN98K732hI2pJXLF5S87UOX/xP9ZNJtbpSfdzpW7c uYv5waQ9P8XJza3f1f1k50OZkv+EdqPhkfrZzRRT+v3s5qZ3FRc7k6zPQzSrQgST kh+3mwbhoglcAZIJsMkvUMZeTsAU4eIMjIC0CTcSvzhgJikHt+FyOSTQ6fn6EEDx qGONNtEoK1ExHTE5Si2eWaghQW1OBh0LM6f6uR/cnIjLv6C1fTvjzJ7RGCOd4D/m drFrl6tfXDxCL/RTNBJg62te3/gg7V7MSpfZs0kLwh+xzjRBUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM+L0SE3dTP8/jlRxqeoqEyvA52QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWE1NDI1Y2QtYjk1YS0z NGI1LWEyNzQtN2E4MTUyNzk1MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBAUwGDwyVSnNlzQ08DUsIm2tkASwHal400EVAX ybZudALmgylMiQYFHX5TZ3bOuxkoH8VuxIBkU0ijTlsxZTgqZ8SUhEwtJxU8W9Eq UhBVg3NLjSfozntfZi3o+2KY2aTsuHTy/7mZcXSInRtKPqPHs7v3CxkugRk6U5MO Z/hJPhH+/baQnKNQfmMyMylFMj3tcmaDv19BGYgQaH/WY4Peyws96jxgffOuNGAs HkVyvu/zfAoHDj4VtLJwh9khE0KMMBbezK+uINUgkhcrlNtnBiiHhbLoA3kyzMVQ dZ8ttCec0g4hS67z91C7YhmQMCgpymvVcjlftr4RGV29kZtl -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org