$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67b3c35a-ca01-39cd-990f-48b43ceaecb4.roa File: 67b3c35a-ca01-39cd-990f-48b43ceaecb4.roa (raw, json) Hash identifier: P6ka6eFoNrr8RTK/oELbT9Ye/UOxy6ptSaEdCdguEGE= Subject key identifier: CE:C2:CE:60:98:76:2C:C7:E9:69:44:05:72:85:6A:35:7A:85:80:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847BC2C187543D6CF1EBD6DBF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67b3c35a-ca01-39cd-990f-48b43ceaecb4.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 396546 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:18:75:43:d6:cf:1e:bd:6d:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=dec10f8d-4131-45a6-afcf-7f90c1ed7b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:7e:bb:87:39:85:5e:50:45:2f:f7:76:3f: 66:70:3a:44:50:3b:95:6b:22:b9:30:a7:35:c9:df: 91:60:69:63:32:62:77:ee:78:a3:b6:1a:37:7f:17: c3:eb:05:59:43:d8:39:35:71:fd:df:27:6f:82:f3: 4e:32:fc:08:e8:fa:05:47:91:12:16:67:75:a4:ca: f9:b3:68:72:b1:be:37:dd:a5:c6:95:69:63:d7:42: e3:c8:68:c7:ef:5f:9c:d7:2c:75:fc:a5:2f:f1:36: 41:19:b3:e0:b0:b9:73:c4:1c:85:11:d0:6c:f8:d8: 45:aa:06:4f:67:83:15:46:cc:d5:8b:67:0f:b4:30: a6:57:64:5b:4d:0a:6a:fb:78:d3:c5:12:1a:83:60: f3:f1:a9:e8:56:49:b5:14:a3:c0:48:ec:1f:c4:2e: 59:e5:8b:f3:fd:39:bd:d8:67:0e:75:77:df:a9:60: 12:de:38:bd:b7:a1:86:d3:14:17:82:2f:93:96:ea: 5f:c7:39:8d:54:91:27:8c:71:0b:c7:2a:d7:69:50: 5e:f3:d2:46:97:e3:aa:18:60:80:85:4f:10:65:83: 38:2f:aa:0d:9a:0e:d2:01:7b:ee:1f:ec:35:02:20: b9:fb:75:c4:27:ee:9b:0a:f9:9b:51:79:87:36:31: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C2:CE:60:98:76:2C:C7:E9:69:44:05:72:85:6A:35:7A:85:80:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67b3c35a-ca01-39cd-990f-48b43ceaecb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d7:35:01:1e:74:94:e6:6a:8b:74:0e:b1:48:17:d8:63:87: 9c:9e:7d:53:d7:7f:74:9d:46:c6:9a:54:a8:13:e9:7a:81:03: 46:f4:a0:58:3b:bd:bf:cb:8a:ae:6f:73:e2:03:91:81:e0:cd: 99:c0:d5:db:f0:e4:51:c5:ae:7a:12:be:f4:a7:3b:64:58:ac: 91:25:78:9f:77:01:bc:b6:21:c4:21:ec:1c:99:50:14:3f:c0: ba:6d:a8:51:a3:91:34:57:39:37:6d:e1:60:b1:e5:86:77:c9: 92:fe:fb:16:43:86:6d:30:6d:d4:df:1e:ed:a2:08:ff:8b:61: e5:b0:6b:26:dd:e1:fe:80:95:65:86:2d:b9:6e:ba:a7:8a:bc: 8b:af:e3:1b:b0:e4:e8:d8:bf:73:7c:7c:1f:53:02:c7:15:f9: 51:e5:59:0d:b3:ae:c2:52:57:e6:e7:86:4c:4a:62:85:50:1d: 48:60:38:fa:3c:7a:27:4f:bd:cb:7e:2d:67:80:b7:3a:a6:5f: 94:0d:bb:82:77:75:4d:08:ef:4c:78:b7:7d:7d:73:7f:9e:03: 42:e5:32:d5:bb:c2:9f:c3:84:84:cf:f5:0f:8f:1c:36:d2:c4: 5c:a6:1a:46:44:8b:0f:36:be:02:fa:0f:f4:9b:57:ec:d8:2f: b8:e5:1f:e7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe8LBh1Q9bPHr1tv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGVjMTBmOGQtNDEzMS00NWE2LWFmY2YtN2Y5MGMxZWQ3YjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYl+u4c5hV5QRS/3dj9mcDpEUDuVayK5MKc1 yd+RYGljMmJ37nijtho3fxfD6wVZQ9g5NXH93ydvgvNOMvwI6PoFR5ESFmd1pMr5 s2hysb433aXGlWlj10LjyGjH71+c1yx1/KUv8TZBGbPgsLlzxByFEdBs+NhFqgZP Z4MVRszVi2cPtDCmV2RbTQpq+3jTxRIag2Dz8anoVkm1FKPASOwfxC5Z5Yvz/Tm9 2GcOdXffqWAS3ji9t6GG0xQXgi+TlupfxzmNVJEnjHELxyrXaVBe89JGl+OqGGCA hU8QZYM4L6oNmg7SAXvuH+w1AiC5+3XEJ+6bCvmbUXmHNjGqZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM7CzmCYdizH6WlEBXKFajV6hYBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjdiM2MzNWEtY2EwMS0z OWNkLTk5MGYtNDhiNDNjZWFlY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBY1zUBHnSU5mqLdA6xSBfYY4ecnn1T1390nUbG mlSoE+l6gQNG9KBYO72/y4qub3PiA5GB4M2ZwNXb8ORRxa56Er70pztkWKyRJXif dwG8tiHEIewcmVAUP8C6bahRo5E0Vzk3beFgseWGd8mS/vsWQ4ZtMG3U3x7togj/ i2HlsGsm3eH+gJVlhi25brqniryLr+MbsOTo2L9zfHwfUwLHFflR5VkNs67CUlfm 54ZMSmKFUB1IYDj6PHonT73Lfi1ngLc6pl+UDbuCd3VNCO9MeLd9fXN/ngNC5TLV u8Kfw4SEz/UPjxw20sRcphpGRIsPNr4C+g/0m1fs2C+45R/n -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org