$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99457e71-e7cd-3f43-be71-06a96738c8d3.roa File: 99457e71-e7cd-3f43-be71-06a96738c8d3.roa (raw, json) Hash identifier: aA3JiXH8IQtSBWNY53h7HUaUoLBS5V5B1jO9GUfu68k= Subject key identifier: 40:A9:7E:5D:2A:CA:22:EB:87:88:47:13:EC:56:D1:63:EC:F3:58:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847579EF28A0354F60081E9F200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99457e71-e7cd-3f43-be71-06a96738c8d3.roa Signing time: Thu 26 Sep 2024 12:35:32 +0000 ROA not before: Thu 26 Sep 2024 12:35:32 +0000 ROA not after: Wed 25 Dec 2024 13:35:32 +0000 asID: 396573 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:57:9e:f2:8a:03:54:f6:00:81:e9:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 12:35:32 2024 GMT Not After : Dec 25 13:35:32 2024 GMT Subject: CN=ff72ddd2-5b7b-423a-a581-29c6c2123c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:59:d3:b7:e3:55:68:83:0d:6e:61:0b:57: 67:c0:db:16:95:a1:bb:f3:2e:5e:93:13:5d:36:f6: 2b:f7:54:61:1c:ba:d1:04:3e:66:19:1b:51:67:a0: 6b:55:b5:bd:f8:b9:38:2d:b5:e7:b2:cd:c8:1a:98: d4:bd:ad:7b:e0:6c:12:f0:7b:7a:7e:09:8b:e2:be: c9:06:10:2b:a2:61:38:09:04:42:b3:e7:25:09:dd: 0c:7e:b3:91:13:dd:ed:aa:df:16:4c:1e:4d:d6:f9: 59:98:b2:eb:4b:97:79:4c:6c:a5:07:2b:c4:06:39: bd:e8:94:d6:ac:d4:a1:d7:a0:5f:75:dd:1e:0c:0c: 59:31:3e:64:0b:12:a0:ec:b7:23:88:3b:be:15:34: bc:21:bf:42:f6:36:a1:1c:27:2d:b2:28:63:e7:68: 71:59:da:77:46:5a:ed:4f:91:9c:37:6a:af:ab:f0: c1:2f:c9:4d:7a:1c:39:27:18:14:9f:fc:c1:8e:60: 57:83:9a:54:9c:9d:4c:66:2e:13:c3:e0:b8:9a:2b: 18:92:91:56:90:e6:ee:a5:01:26:4d:e9:d7:70:9e: f7:02:c4:7b:b8:e8:12:96:f7:ff:6f:39:f9:9c:f2: d2:e8:8b:34:72:d2:ba:38:76:44:22:1c:7c:d8:39: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:7E:5D:2A:CA:22:EB:87:88:47:13:EC:56:D1:63:EC:F3:58:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99457e71-e7cd-3f43-be71-06a96738c8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d4:94:a3:85:c8:3e:0d:98:46:bf:cf:c7:0d:f1:e4:ee:c9: 51:e4:f3:16:30:d8:d9:56:7b:dd:09:ed:cb:aa:54:fe:e2:e6: 88:41:6e:36:c3:74:07:2e:f3:55:6a:ef:f3:a7:3a:c9:df:d2: a9:46:55:26:cf:7e:b3:a0:1c:73:6c:d3:a0:d9:37:bf:96:21: 1d:8f:38:16:57:91:a1:a9:4c:3a:20:1e:84:3b:86:05:17:7f: ee:4c:c0:6c:5e:db:6f:2b:ba:f2:f9:57:ca:2d:80:be:06:0e: eb:b7:82:6f:3b:b6:8b:19:c1:2f:56:93:b2:a9:24:17:75:56: 0e:77:e1:27:b5:8e:f5:fb:de:39:df:00:fd:dd:12:3f:e1:33: e2:3b:29:a4:42:41:38:1b:15:32:4f:f5:51:fa:f0:a4:a7:39: 6b:c9:a1:58:74:33:8a:d9:ae:46:6d:28:b3:17:7d:1b:7f:7e: 6c:a2:39:3b:b0:ad:21:4b:4d:9b:5e:32:ff:f6:0d:40:9e:6b: 54:42:66:ba:3a:e6:88:f5:30:2a:28:80:3f:da:03:4f:e6:49: 66:82:c9:b5:3f:94:23:9e:77:d1:bb:a3:53:b6:41:7b:ff:02: a1:34:52:cd:3e:a1:94:bc:98:64:5e:6d:4a:0e:0f:8b:5d:fa: 84:eb:eb:16 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdXnvKKA1T2AIHp8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MDkyNjEyMzUzMloXDTI0MTIyNTEzMzUzMlowLzEtMCsGA1UEAxMk ZmY3MmRkZDItNWI3Yi00MjNhLWE1ODEtMjljNmMyMTIzYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDxZ07fjVWiDDW5hC1dnwNsWlaG78y5ekxNd NvYr91RhHLrRBD5mGRtRZ6BrVbW9+Lk4LbXnss3IGpjUva174GwS8Ht6fgmL4r7J BhAromE4CQRCs+clCd0MfrORE93tqt8WTB5N1vlZmLLrS5d5TGylByvEBjm96JTW rNSh16Bfdd0eDAxZMT5kCxKg7LcjiDu+FTS8Ib9C9jahHCctsihj52hxWdp3Rlrt T5GcN2qvq/DBL8lNehw5JxgUn/zBjmBXg5pUnJ1MZi4Tw+C4misYkpFWkObupQEm TenXcJ73AsR7uOgSlvf/bzn5nPLS6Is0ctK6OHZEIhx82DmzEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFECpfl0qyiLrh4hHE+xW0WPs81hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTk0NTdlNzEtZTdjZC0z ZjQzLWJlNzEtMDZhOTY3MzhjOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA41JSjhcg+DZhGv8/HDfHk7slR5PMWMNjZVnvd Ce3LqlT+4uaIQW42w3QHLvNVau/zpzrJ39KpRlUmz36zoBxzbNOg2Te/liEdjzgW V5GhqUw6IB6EO4YFF3/uTMBsXttvK7ry+VfKLYC+Bg7rt4JvO7aLGcEvVpOyqSQX dVYOd+EntY71+9453wD93RI/4TPiOymkQkE4GxUyT/VR+vCkpzlryaFYdDOK2a5G bSizF30bf35sojk7sK0hS02bXjL/9g1AnmtUQma6OuaI9TAqKIA/2gNP5klmgsm1 P5QjnnfRu6NTtkF7/wKhNFLNPqGUvJhkXm1KDg+LXfqE6+sW -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:37 2024 by rpki-client on console-fra.rpki-client.org