$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa File: c86bea9a-2b90-3624-a5e2-2428810756d4.roa (raw, json) Hash identifier: sQ3qGN1F4xoEAoJJkuNYXN+oJWFlRmTTt3jebaQNPnQ= Subject key identifier: 85:50:B5:56:10:7E:F0:DD:50:5E:90:53:A4:CE:A4:36:1B:44:3C:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847818BBCDD47B53E947B79FA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa Signing time: Fri 11 Oct 2024 13:00:41 +0000 ROA not before: Fri 11 Oct 2024 13:00:41 +0000 ROA not after: Thu 09 Jan 2025 14:00:41 +0000 asID: 40717 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:81:8b:bc:dd:47:b5:3e:94:7b:79:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 11 13:00:41 2024 GMT Not After : Jan 9 14:00:41 2025 GMT Subject: CN=db656877-dd81-43c6-bc7c-3ce2acc8d07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:8e:ca:2d:c1:72:20:56:8b:1a:c4:2f:3b: 23:28:cc:64:9b:26:99:46:0c:45:6f:ca:eb:d7:31: 98:ed:0b:57:55:37:01:5c:40:d3:55:5e:b6:d9:70: 69:d7:bf:e7:49:b1:98:fe:78:3a:1d:14:1b:39:12: 19:80:96:34:9f:fb:71:56:10:ca:37:56:fd:9d:3b: d5:d2:27:17:b9:08:d7:f8:46:e8:71:30:5d:66:1a: 22:53:94:b2:a7:41:ee:5d:a5:c8:8c:bf:49:ec:2b: 99:18:e2:1b:27:c2:80:85:cd:10:4c:f1:14:da:89: bd:3a:26:9d:e9:e9:ab:d2:a2:a0:78:76:88:d7:e8: a0:d8:b9:b9:92:7a:05:06:09:3a:98:b4:94:8a:ef: ad:54:7c:88:8b:2c:2c:e8:a2:34:90:1d:47:4b:48: 86:cc:cd:22:9c:3d:19:0c:87:83:f7:23:fa:7b:5a: d1:91:55:1a:f4:ee:9e:78:b6:5f:f6:a2:91:6b:cc: 1e:69:7e:34:3d:c4:3a:94:be:ea:a1:a9:2f:db:cf: 24:03:22:41:f5:4d:c1:18:82:9e:e2:09:b1:9c:44: ba:f5:42:05:59:bb:d9:05:80:6e:9a:ff:86:08:ce: c9:21:6a:6c:1d:dc:22:dd:d7:cb:c8:d2:b9:10:f7: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:B5:56:10:7E:F0:DD:50:5E:90:53:A4:CE:A4:36:1B:44:3C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:05:46:07:96:69:a7:09:87:a3:ab:a4:65:a9:35:73:bc:d0: 40:12:73:b7:be:69:7e:7c:ae:0f:06:c1:6d:18:8c:0a:57:f4: 67:0a:d9:d5:ad:c2:1e:19:1d:52:e2:26:49:20:e7:f8:71:75: 85:9b:15:66:a5:1a:3a:9e:fd:28:79:92:14:3a:ef:9d:a3:96: 36:8b:74:17:65:cc:8c:ae:ae:99:10:b9:39:c0:3a:80:7d:7e: 2b:9d:38:2b:34:d3:4d:2a:95:fc:58:c0:34:3c:e9:54:8f:b2: 43:4f:5e:c6:92:01:36:13:04:ec:d3:44:f5:5a:a4:95:7c:9d: 24:af:2f:b8:4a:a6:65:18:5b:cb:f4:38:97:1b:83:24:6c:47: d2:b2:41:e6:d9:58:50:a4:c5:f4:9d:bc:fe:2b:0d:38:c4:32: 90:97:d8:3c:e3:bf:b3:35:48:68:27:10:ac:5d:90:f0:05:3b: ab:c7:a9:90:bd:2b:8d:ea:16:15:fa:bd:4a:c0:9a:58:9e:8c: b0:3e:a6:af:bb:8c:49:9b:1c:13:35:ab:4c:0c:c5:77:2f:df: db:4b:ad:9f:b5:1a:3b:91:d2:13:65:8f:9c:fb:f2:52:bf:8f: 2f:e8:d3:80:68:56:bd:da:b5:94:b8:b1:9f:40:10:0c:6c:c2: 60:e1:d1:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEeBi7zdR7U+lHt5+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTAxMTEzMDA0MVoXDTI1MDEwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGI2NTY4NzctZGQ4MS00M2M2LWJjN2MtM2NlMmFjYzhkMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy2Oyi3BciBWixrELzsjKMxkmyaZRgxFb8rr 1zGY7QtXVTcBXEDTVV622XBp17/nSbGY/ng6HRQbORIZgJY0n/txVhDKN1b9nTvV 0icXuQjX+EbocTBdZhoiU5Syp0HuXaXIjL9J7CuZGOIbJ8KAhc0QTPEU2om9Oiad 6emr0qKgeHaI1+ig2Lm5knoFBgk6mLSUiu+tVHyIiyws6KI0kB1HS0iGzM0inD0Z DIeD9yP6e1rRkVUa9O6eeLZf9qKRa8weaX40PcQ6lL7qoakv288kAyJB9U3BGIKe 4gmxnES69UIFWbvZBYBumv+GCM7JIWpsHdwi3dfLyNK5EPcQmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIVQtVYQfvDdUF6QU6TOpDYbRDxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg2YmVhOWEtMmI5MC0z NjI0LWE1ZTItMjQyODgxMDc1NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7BUYHlmmnCYejq6RlqTVzvNBAEnO3vml+fK4P BsFtGIwKV/RnCtnVrcIeGR1S4iZJIOf4cXWFmxVmpRo6nv0oeZIUOu+do5Y2i3QX ZcyMrq6ZELk5wDqAfX4rnTgrNNNNKpX8WMA0POlUj7JDT17GkgE2EwTs00T1WqSV fJ0kry+4SqZlGFvL9DiXG4MkbEfSskHm2VhQpMX0nbz+Kw04xDKQl9g847+zNUho JxCsXZDwBTurx6mQvSuN6hYV+r1KwJpYnoywPqavu4xJmxwTNatMDMV3L9/bS62f tRo7kdITZY+c+/JSv48v6NOAaFa92rWUuLGfQBAMbMJg4dHx -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:15 2024 by rpki-client on console-ams.rpki-client.org