$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85e79f25-cbfe-3977-b682-8a0d27e99364.roa File: 85e79f25-cbfe-3977-b682-8a0d27e99364.roa (raw, json) Hash identifier: 7MDDx+dRTWsrPDlV70RIEX9sQ9FK4k74wQwhzENLAbY= Subject key identifier: D5:35:26:77:40:46:12:5C:9F:14:D4:6F:37:26:64:1D:E5:23:C9:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847DAF51963852F070D504B6C41 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85e79f25-cbfe-3977-b682-8a0d27e99364.roa Signing time: Tue 12 Nov 2024 13:40:01 +0000 ROA not before: Tue 12 Nov 2024 13:40:01 +0000 ROA not after: Mon 10 Feb 2025 13:40:01 +0000 asID: 396558 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:f5:19:63:85:2f:07:0d:50:4b:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 12 13:40:01 2024 GMT Not After : Feb 10 13:40:01 2025 GMT Subject: CN=1a9ebefa-90d1-4337-86c3-af118d1b45e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:20:07:ce:e0:44:c0:3f:a8:02:00:f7:67: b2:c8:92:02:c1:58:5a:ca:26:75:fd:45:6c:e3:33: c9:1f:79:12:67:9f:68:25:39:fa:f3:69:34:17:28: c8:b9:b8:00:a3:dc:aa:d6:af:00:1d:70:d8:54:90: 1f:b8:34:71:d3:c8:9e:06:49:d5:3c:ba:c7:26:3c: 5b:d3:6d:1f:eb:09:c4:30:8c:ff:c6:99:7f:b9:44: 0b:98:52:00:39:d4:6b:3b:42:dc:87:bd:6f:85:e5: d4:b1:02:84:f2:76:f9:f5:b3:68:7e:04:f5:d7:a8: 0c:cb:dc:ef:d7:f3:c9:f8:30:b7:39:de:27:ce:39: e3:96:b7:8a:29:0d:d1:be:6e:54:91:2c:80:3e:e5: 1c:09:39:69:af:c5:e9:ae:ae:1d:b3:d2:ef:35:98: 7b:1d:05:7e:bd:84:c6:a9:86:31:c9:a0:62:d2:bd: 99:13:1f:64:fb:fa:b0:bd:9a:53:bc:7c:51:c9:94: 7e:ec:b7:f2:f1:f2:8e:fa:87:36:2d:e2:56:e5:76: 0b:93:34:a6:f8:56:ec:3e:72:7f:42:bd:62:a9:ee: 9b:f0:2b:1a:7b:be:53:bf:f1:57:bd:55:7f:cf:f5: b8:26:76:c9:36:0e:5d:be:01:7b:0f:ee:44:95:24: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:35:26:77:40:46:12:5C:9F:14:D4:6F:37:26:64:1D:E5:23:C9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85e79f25-cbfe-3977-b682-8a0d27e99364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:92:68:5f:29:4c:2d:f1:7c:72:f6:f0:a1:c6:f3:08:bc:2f: 70:d1:53:7b:73:da:5e:c5:92:77:82:75:d8:0d:60:bd:33:66: 20:01:a4:1e:69:59:38:57:6c:48:c3:11:93:db:34:8a:05:8a: cc:1a:d7:09:48:e8:ba:52:c6:b3:9e:49:c1:db:da:a8:29:5f: 13:10:17:0d:96:3e:e1:5b:bd:be:c8:53:c8:db:bd:97:09:dc: ee:d9:21:8c:b3:32:8f:eb:b7:be:de:62:44:1a:c3:ea:e1:6e: 94:a6:98:ef:b7:7c:4e:47:cd:83:84:5d:66:43:60:b6:79:aa: 2e:9f:5a:ae:4d:17:d5:1e:63:54:77:db:45:a9:e3:eb:20:92: 1c:eb:5a:da:6f:9c:0e:20:0b:e7:a8:a8:d8:3d:64:2f:1f:a0: 8a:34:4c:ae:c1:b6:d2:10:e1:e6:73:7b:8a:8a:ee:cb:ec:5a: f5:d5:95:68:29:d5:d0:27:db:dd:bf:a1:e4:49:00:4c:7d:65: 35:6a:f4:b8:57:02:f1:50:ab:38:5e:79:e0:2c:55:33:32:70: 3d:23:48:f6:fb:0f:09:94:cd:06:31:cf:0e:bb:ae:d6:cc:4c: 3d:5d:19:23:8e:3e:4e:99:fe:18:d2:2e:9f:69:e0:00:73:f9: 32:99:3f:00 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfa9RljhS8HDVBLbEEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTExMjEzNDAwMVoXDTI1MDIxMDEzNDAwMVowLzEtMCsGA1UEAxMk MWE5ZWJlZmEtOTBkMS00MzM3LTg2YzMtYWYxMThkMWI0NWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsYgB87gRMA/qAIA92eyyJICwVhayiZ1/UVs 4zPJH3kSZ59oJTn682k0FyjIubgAo9yq1q8AHXDYVJAfuDRx08ieBknVPLrHJjxb 020f6wnEMIz/xpl/uUQLmFIAOdRrO0Lch71vheXUsQKE8nb59bNofgT116gMy9zv 1/PJ+DC3Od4nzjnjlreKKQ3Rvm5UkSyAPuUcCTlpr8Xprq4ds9LvNZh7HQV+vYTG qYYxyaBi0r2ZEx9k+/qwvZpTvHxRyZR+7Lfy8fKO+oc2LeJW5XYLkzSm+FbsPnJ/ Qr1iqe6b8Csae75Tv/FXvVV/z/W4JnbJNg5dvgF7D+5ElSTQ7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNU1JndARhJcnxTUbzcmZB3lI8l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODVlNzlmMjUtY2JmZS0z OTc3LWI2ODItOGEwZDI3ZTk5MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCpkmhfKUwt8Xxy9vChxvMIvC9w0VN7c9pexZJ3 gnXYDWC9M2YgAaQeaVk4V2xIwxGT2zSKBYrMGtcJSOi6UsaznknB29qoKV8TEBcN lj7hW72+yFPI272XCdzu2SGMszKP67e+3mJEGsPq4W6Uppjvt3xOR82DhF1mQ2C2 eaoun1quTRfVHmNUd9tFqePrIJIc61rab5wOIAvnqKjYPWQvH6CKNEyuwbbSEOHm c3uKiu7L7Fr11ZVoKdXQJ9vdv6HkSQBMfWU1avS4VwLxUKs4XnngLFUzMnA9I0j2 +w8JlM0GMc8Ou67WzEw9XRkjjj5Omf4Y0i6faeAAc/kymT8A -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org