$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dd81f5-9841-31ca-9468-4e4b36480488.roa File: c2dd81f5-9841-31ca-9468-4e4b36480488.roa (raw, json) Hash identifier: bcNQQ7xopH6vnJe1f09RerwrzvHJZDuFBCBK4OjMhR0= Subject key identifier: E7:90:0E:26:20:DA:A7:6E:3A:C7:E3:89:98:13:70:DA:7D:D1:59:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847DAF51E9D785D30C76DA5EA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dd81f5-9841-31ca-9468-4e4b36480488.roa Signing time: Tue 12 Nov 2024 13:40:03 +0000 ROA not before: Tue 12 Nov 2024 13:40:03 +0000 ROA not after: Mon 10 Feb 2025 13:40:03 +0000 asID: 396545 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:f5:1e:9d:78:5d:30:c7:6d:a5:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 12 13:40:03 2024 GMT Not After : Feb 10 13:40:03 2025 GMT Subject: CN=a42c9a11-e25b-4471-8065-354229a3b879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:67:77:c6:d8:d1:e7:3a:25:7a:61:8c:2e: de:14:51:a3:5a:10:68:6a:96:e0:aa:c7:6b:62:00: 9c:2c:33:fc:73:8d:b0:b5:6d:08:85:e5:6f:7b:44: 93:54:8a:3f:5b:d7:11:0f:1b:78:be:73:b0:97:85: 3c:d2:d5:db:bb:68:a7:99:03:f9:c7:91:3c:0d:aa: 2c:56:75:b2:e0:47:37:2c:fa:c6:b7:60:5e:3a:07: 47:e4:10:b4:9e:e8:35:69:72:17:ac:90:2e:6f:63: 89:84:f8:c8:2e:0e:5d:b3:14:96:2f:c4:5a:ae:c2: 10:ee:2b:ea:3e:1b:16:5d:0b:c4:df:dd:93:ba:93: cd:e6:38:63:33:12:37:50:42:dd:d2:50:7e:15:23: e1:70:8c:12:07:cc:14:32:9f:fa:1f:08:7f:87:3d: e7:dd:00:7d:67:34:52:64:ad:2a:4f:91:77:08:36: 31:fe:cf:30:a5:e5:95:39:88:f0:2f:a1:77:2b:19: b5:1c:a5:a2:c8:ef:f1:a5:91:69:15:e0:02:8c:4c: 14:67:1b:d4:0a:a7:f3:7a:41:2f:76:60:81:bf:0f: af:6a:c4:f4:44:7e:70:9a:56:0c:0f:d6:fa:ac:1e: ef:d4:9d:e8:70:11:a0:b9:1e:aa:3a:1f:80:5a:6d: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:90:0E:26:20:DA:A7:6E:3A:C7:E3:89:98:13:70:DA:7D:D1:59:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dd81f5-9841-31ca-9468-4e4b36480488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b8:d2:f1:a9:e6:a6:62:1d:7d:4c:0d:30:38:fe:b0:8f:51: aa:64:17:35:16:37:6b:d5:85:4b:49:87:b0:ac:a0:e1:ea:5f: 2c:83:c1:33:42:a9:65:e3:1e:99:37:b4:9a:2b:cf:21:3c:8e: a4:99:27:81:9a:8d:e1:9f:06:da:a2:9c:9e:73:53:86:64:0d: 8f:81:5e:62:98:05:2a:38:a5:e1:55:56:53:22:b6:e5:ee:98: b1:2d:75:14:41:a7:63:9d:31:ac:20:7d:fc:63:6c:b1:c2:8c: be:9d:5b:6c:e7:35:52:3e:0a:58:a6:b8:0d:3a:dc:1b:e7:06: 18:43:29:d7:e2:0e:df:5f:fc:e4:77:eb:31:53:1c:19:a1:66: f6:18:39:7d:0c:c8:2d:84:5b:39:8f:f7:91:54:51:fd:ad:7f: 58:0a:a7:91:f1:d8:05:c1:28:36:0f:06:17:85:68:b8:fc:67: d8:72:54:40:a1:83:53:3a:59:b1:ef:4b:c9:e8:ec:16:31:f4: d4:20:e8:3f:4a:39:c5:ed:63:62:4e:db:07:60:fd:66:e9:d9: 47:65:eb:fe:4f:a2:b7:54:83:13:74:81:7b:81:18:b5:0b:ba: c3:0e:6c:e7:3a:f9:1e:7f:20:f4:62:0d:14:3d:9a:85:79:9b: 77:10:e8:70 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfa9R6deF0wx22l6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTExMjEzNDAwM1oXDTI1MDIxMDEzNDAwM1owLzEtMCsGA1UEAxMk YTQyYzlhMTEtZTI1Yi00NDcxLTgwNjUtMzU0MjI5YTNiODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTpnd8bY0ec6JXphjC7eFFGjWhBoapbgqsdr YgCcLDP8c42wtW0IheVve0STVIo/W9cRDxt4vnOwl4U80tXbu2inmQP5x5E8Daos VnWy4Ec3LPrGt2BeOgdH5BC0nug1aXIXrJAub2OJhPjILg5dsxSWL8RarsIQ7ivq PhsWXQvE392TupPN5jhjMxI3UELd0lB+FSPhcIwSB8wUMp/6Hwh/hz3n3QB9ZzRS ZK0qT5F3CDYx/s8wpeWVOYjwL6F3Kxm1HKWiyO/xpZFpFeACjEwUZxvUCqfzekEv dmCBvw+vasT0RH5wmlYMD9b6rB7v1J3ocBGguR6qOh+AWm3pcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOeQDiYg2qduOsfjiZgTcNp90VneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJkZDgxZjUtOTg0MS0z MWNhLTk0NjgtNGU0YjM2NDgwNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCxuNLxqeamYh19TA0wOP6wj1GqZBc1Fjdr1YVL SYewrKDh6l8sg8EzQqll4x6ZN7SaK88hPI6kmSeBmo3hnwbaopyec1OGZA2PgV5i mAUqOKXhVVZTIrbl7pixLXUUQadjnTGsIH38Y2yxwoy+nVts5zVSPgpYprgNOtwb 5wYYQynX4g7fX/zkd+sxUxwZoWb2GDl9DMgthFs5j/eRVFH9rX9YCqeR8dgFwSg2 DwYXhWi4/GfYclRAoYNTOlmx70vJ6OwWMfTUIOg/SjnF7WNiTtsHYP1m6dlHZev+ T6K3VIMTdIF7gRi1C7rDDmznOvkefyD0Yg0UPZqFeZt3EOhw -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:45 2024 by rpki-client on console-fra.rpki-client.org