$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aeb52e2-1a65-3157-88c2-77c0eb8e974a.roa File: 7aeb52e2-1a65-3157-88c2-77c0eb8e974a.roa (raw, json) Hash identifier: 8BDHbuMArWbdeX/ySJ7cKWaYECvpKQrxb/sJGWgT3/A= Subject key identifier: 77:2E:A5:61:53:18:A1:12:05:B6:5C:2A:7F:59:83:F3:C1:D7:DF:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847791CF9CA4FA268673E38B100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aeb52e2-1a65-3157-88c2-77c0eb8e974a.roa Signing time: Tue 08 Oct 2024 12:31:09 +0000 ROA not before: Tue 08 Oct 2024 12:31:09 +0000 ROA not after: Mon 06 Jan 2025 13:31:09 +0000 asID: 396574 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:1c:f9:ca:4f:a2:68:67:3e:38:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 8 12:31:09 2024 GMT Not After : Jan 6 13:31:09 2025 GMT Subject: CN=144fcc56-9ca3-4570-815e-e6ef580936ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:59:ea:90:14:b3:64:33:3c:85:78:61:e6: be:10:86:9e:87:f6:71:03:4e:ee:d8:5d:50:c6:82: 18:37:3c:4a:ca:d4:4b:71:b5:67:d1:26:db:ee:c8: b9:61:68:fa:bb:07:a3:b3:59:70:29:e5:e7:d6:3f: ac:21:4b:65:97:ab:f5:db:3d:1c:58:ad:05:a6:aa: f0:79:d0:14:e1:e4:93:ce:d0:b8:2f:8a:53:64:95: 8a:b2:0f:1b:1b:1f:8e:78:8d:db:b2:fb:c1:d2:05: 66:79:91:1c:ac:6d:1e:a4:f5:23:53:e0:88:b2:50: 3b:98:f1:02:c1:66:21:45:0b:83:07:c0:91:2f:3b: 60:22:b8:71:de:4e:7c:e7:d3:b4:d6:f4:93:6d:80: e3:48:7b:aa:86:26:3c:33:8b:6e:0d:14:08:dd:ff: 2d:11:90:fb:fe:ea:81:a2:a0:54:e8:90:a9:f1:8b: 2a:68:bb:c1:d9:2e:f1:ab:7f:a2:75:7f:c7:c7:0a: ba:0f:e5:3e:6e:1c:99:1d:73:b6:86:04:bf:13:25: 93:64:71:aa:df:a4:e9:e2:46:4a:4c:b9:b4:e6:c2: 3f:06:f6:52:3d:66:d8:26:78:03:18:21:16:34:e7: 21:02:cd:21:fd:3a:8f:1a:c7:70:69:2f:bb:26:f6: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2E:A5:61:53:18:A1:12:05:B6:5C:2A:7F:59:83:F3:C1:D7:DF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aeb52e2-1a65-3157-88c2-77c0eb8e974a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:72:f4:44:e6:a1:76:8b:0e:25:54:b0:f6:de:ff:07:7f:26: aa:09:80:ab:3b:e6:9f:d2:b7:f1:0b:67:4b:df:5f:32:6a:90: 2f:0f:ed:9d:b0:31:b6:c5:9d:c0:59:52:be:c4:56:5a:66:ee: 23:63:76:3d:70:ff:7e:ba:09:8d:a9:6e:ea:f7:75:41:04:87: 1b:9f:fd:4a:97:49:39:a5:c5:90:f1:cf:5a:72:f5:54:81:1b: d9:36:e0:07:8e:db:0a:fc:f2:6d:45:50:ca:d1:02:80:e8:79: 8a:c3:30:77:de:24:9d:a2:ab:7a:c7:75:57:0b:2e:21:61:fe: c3:f3:de:7f:6a:b9:dd:1b:d3:eb:13:ea:64:2d:57:6e:22:2a: 5d:8a:7b:36:39:4b:51:4f:d1:d7:39:b7:39:d3:07:34:b4:27: f9:c0:28:f9:60:16:09:a1:37:b4:45:79:5d:fe:9c:60:6e:49: ea:7f:27:12:ed:09:c0:47:dc:2a:44:e5:5a:c1:e6:9d:eb:65: 82:c4:75:fd:4c:5e:30:38:27:d8:05:91:44:24:b3:0b:7b:23: 49:c6:14:ef:fc:9d:38:4a:33:04:fa:70:37:ea:ab:27:48:7b: 85:8c:2f:6f:39:47:ef:86:81:4a:91:76:ee:62:5a:43:cc:72: 04:7e:7d:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEd5HPnKT6JoZz44sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTAwODEyMzEwOVoXDTI1MDEwNjEzMzEwOVowLzEtMCsGA1UEAxMk MTQ0ZmNjNTYtOWNhMy00NTcwLTgxNWUtZTZlZjU4MDkzNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiupZ6pAUs2QzPIV4Yea+EIaeh/ZxA07u2F1Q xoIYNzxKytRLcbVn0Sbb7si5YWj6uwejs1lwKeXn1j+sIUtll6v12z0cWK0Fpqrw edAU4eSTztC4L4pTZJWKsg8bGx+OeI3bsvvB0gVmeZEcrG0epPUjU+CIslA7mPEC wWYhRQuDB8CRLztgIrhx3k5859O01vSTbYDjSHuqhiY8M4tuDRQI3f8tEZD7/uqB oqBU6JCp8YsqaLvB2S7xq3+idX/Hxwq6D+U+bhyZHXO2hgS/EyWTZHGq36Tp4kZK TLm05sI/BvZSPWbYJngDGCEWNOchAs0h/TqPGsdwaS+7JvZEnwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHcupWFTGKESBbZcKn9Zg/PB199FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2FlYjUyZTItMWE2NS0z MTU3LTg4YzItNzdjMGViOGU5NzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBycvRE5qF2iw4lVLD23v8HfyaqCYCrO+af0rfx C2dL318yapAvD+2dsDG2xZ3AWVK+xFZaZu4jY3Y9cP9+ugmNqW7q93VBBIcbn/1K l0k5pcWQ8c9acvVUgRvZNuAHjtsK/PJtRVDK0QKA6HmKwzB33iSdoqt6x3VXCy4h Yf7D895/arndG9PrE+pkLVduIipdins2OUtRT9HXObc50wc0tCf5wCj5YBYJoTe0 RXld/pxgbknqfycS7QnAR9wqROVawead62WCxHX9TF4wOCfYBZFEJLMLeyNJxhTv /J04SjME+nA36qsnSHuFjC9vOUfvhoFKkXbuYlpDzHIEfn3T -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org