$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc1b7bf3-d2f0-30f9-8db8-9202cd163895.roa File: bc1b7bf3-d2f0-30f9-8db8-9202cd163895.roa (raw, json) Hash identifier: qMiX9SQDGpGrUGSxaoV/TJ5DRqSkxslIk+otrmvbezg= Subject key identifier: 0D:EA:FC:30:98:17:E8:F6:F9:CF:F5:BB:63:C9:A1:28:88:02:32:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847579EF0445026D4669B959A60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc1b7bf3-d2f0-30f9-8db8-9202cd163895.roa Signing time: Thu 26 Sep 2024 12:35:31 +0000 ROA not before: Thu 26 Sep 2024 12:35:31 +0000 ROA not after: Wed 25 Dec 2024 13:35:31 +0000 asID: 20362 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:57:9e:f0:44:50:26:d4:66:9b:95:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 12:35:31 2024 GMT Not After : Dec 25 13:35:31 2024 GMT Subject: CN=dca2da36-8405-4a60-a7e1-5b7ffd8419a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:be:c8:67:9a:a4:f1:82:f6:78:3f:c7:fb: 8c:61:64:33:54:de:5e:bf:d2:e7:64:2c:ca:3c:d8: b0:b4:f6:87:a9:fe:cb:03:08:aa:12:ab:62:ac:71: dd:a2:15:54:7b:26:81:41:d3:f5:92:42:8a:7e:ca: 4c:94:64:39:3d:bc:f9:04:c6:da:dd:35:4d:0e:b0: 53:e8:8b:9c:75:9a:11:d7:17:e4:26:6e:98:ba:f5: 9b:e0:18:a5:8e:4f:5a:b8:97:5b:a9:9b:c7:35:4b: 9d:9b:51:d6:09:34:01:ae:e2:34:ab:60:56:6b:32: 89:fd:d0:29:15:5e:48:5e:c5:4f:36:62:f1:78:ba: 4d:08:b8:92:d6:b4:8a:28:98:62:81:3d:be:c2:87: 1f:b9:01:77:81:b7:58:1e:5e:75:71:35:88:19:4c: 92:36:03:bc:ba:ac:da:25:48:65:8b:c6:06:86:82: c3:04:da:d1:12:05:bb:95:77:4e:28:b0:7c:9b:fd: 12:06:69:51:19:3d:d7:5a:7c:bd:8b:e9:2f:08:ce: ee:0f:2d:10:0b:3c:71:ff:b9:34:e2:95:0b:60:53: 8a:66:cd:d7:89:eb:4b:7d:0d:ac:3f:f6:55:5b:f9: d1:64:d0:fe:07:79:78:1d:87:24:ae:69:b6:57:94: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:FC:30:98:17:E8:F6:F9:CF:F5:BB:63:C9:A1:28:88:02:32:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc1b7bf3-d2f0-30f9-8db8-9202cd163895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2f:c0:b6:94:ae:81:9c:bb:d1:f7:79:c3:ba:6e:dc:bb:71: 82:ad:82:f7:88:3e:dd:86:a2:5c:84:a9:0f:e4:2b:f7:e5:a4: d5:ec:fa:ba:9c:98:df:95:d9:ec:f3:7d:a3:41:0b:1b:b3:9e: a0:9b:1d:34:84:9a:2b:3c:5a:2d:82:34:e1:f0:70:c3:50:55: 9e:ad:71:09:9b:be:24:69:22:3e:8d:1a:65:90:02:31:91:05: ca:b9:5e:3e:f5:f2:c8:f9:71:bd:42:26:82:62:1e:10:4b:18: a4:03:0b:ad:46:e4:98:62:af:96:9d:02:fa:09:1e:61:57:bd: 30:67:59:75:dc:59:2b:6f:c5:f9:db:54:b5:47:ae:da:28:5a: e6:9c:c3:c7:96:3e:b7:bd:f1:bb:f2:b1:8d:fe:64:a8:d8:5c: 0f:c2:42:0c:82:da:75:b3:92:6b:05:64:5c:bf:51:3f:04:29: 00:dd:2e:14:09:f3:da:e9:cc:b5:20:10:55:ab:ec:f4:f4:94: 50:c5:26:1c:36:4b:58:5e:ac:98:ac:c5:00:04:07:89:60:d0: 02:4f:9a:36:02:fb:cf:e2:eb:c2:7e:c9:fa:5e:1d:bd:6c:43: 7e:b8:86:95:d7:df:ba:fb:95:2d:87:54:5d:21:5d:3d:23:ff: 91:3a:2c:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdXnvBEUCbUZpuVmmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MDkyNjEyMzUzMVoXDTI0MTIyNTEzMzUzMVowLzEtMCsGA1UEAxMk ZGNhMmRhMzYtODQwNS00YTYwLWE3ZTEtNWI3ZmZkODQxOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHm+yGeapPGC9ng/x/uMYWQzVN5ev9LnZCzK PNiwtPaHqf7LAwiqEqtirHHdohVUeyaBQdP1kkKKfspMlGQ5Pbz5BMba3TVNDrBT 6IucdZoR1xfkJm6YuvWb4Biljk9auJdbqZvHNUudm1HWCTQBruI0q2BWazKJ/dAp FV5IXsVPNmLxeLpNCLiS1rSKKJhigT2+wocfuQF3gbdYHl51cTWIGUySNgO8uqza JUhli8YGhoLDBNrREgW7lXdOKLB8m/0SBmlRGT3XWny9i+kvCM7uDy0QCzxx/7k0 4pULYFOKZs3XietLfQ2sP/ZVW/nRZND+B3l4HYckrmm2V5RzywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA3q/DCYF+j2+c/1u2PJoSiIAjLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmMxYjdiZjMtZDJmMC0z MGY5LThkYjgtOTIwMmNkMTYzODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATL8C2lK6BnLvR93nDum7cu3GCrYL3iD7dhqJc hKkP5Cv35aTV7Pq6nJjfldns832jQQsbs56gmx00hJorPFotgjTh8HDDUFWerXEJ m74kaSI+jRplkAIxkQXKuV4+9fLI+XG9QiaCYh4QSxikAwutRuSYYq+WnQL6CR5h V70wZ1l13Fkrb8X521S1R67aKFrmnMPHlj63vfG78rGN/mSo2FwPwkIMgtp1s5Jr BWRcv1E/BCkA3S4UCfPa6cy1IBBVq+z09JRQxSYcNktYXqyYrMUABAeJYNACT5o2 AvvP4uvCfsn6Xh29bEN+uIaV19+6+5Uth1RdIV09I/+ROixg -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:13 2024 by rpki-client on console-ams.rpki-client.org