$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa File: b98d60c1-4e90-3557-9926-b060e98a4fe0.roa (raw, json) Hash identifier: X0jUVl2rQD2+BhPzBBgt7VymtF4WikBWoOj+IBmFZxA= Subject key identifier: A2:91:6D:44:0E:B1:F2:19:1D:5E:DD:F5:64:5C:DF:A5:2E:81:5F:12 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285844FCC56AFBB64943E368892580 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa Signing time: Fri 23 Feb 2024 14:00:31 +0000 ROA not before: Fri 23 Feb 2024 14:00:31 +0000 ROA not after: Thu 23 May 2024 13:00:31 +0000 asID: 9009 IP address blocks: 2607:740:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fc:c5:6a:fb:b6:49:43:e3:68:89:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 23 14:00:31 2024 GMT Not After : May 23 13:00:31 2024 GMT Subject: CN=685550ca-a5d0-4cb9-8d24-973ae6c160a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:42:95:9b:a1:32:2b:46:74:d0:eb:a6:33: f2:c4:1f:3a:48:6e:f4:c9:80:f9:79:11:4b:c2:a0: 21:81:a1:a1:ce:c7:8d:4b:10:28:64:68:9d:89:97: 86:1b:8b:1d:82:f1:45:ad:9f:01:2d:af:2b:75:39: fb:63:1d:db:67:e6:b2:e5:e5:d6:7a:25:bb:21:e5: 8c:f5:c6:15:27:25:9a:00:ac:c2:83:df:98:98:64: b3:4b:ec:7f:73:25:1c:db:69:77:e9:48:74:27:c5: 83:2f:1b:c7:29:a8:f1:51:7f:23:fb:d1:cc:28:58: 6b:0f:05:e8:d6:98:4b:81:b3:78:66:7e:22:cd:0e: 51:2c:74:03:72:fe:90:75:45:2e:77:dd:eb:d1:6c: e5:e2:80:ed:14:89:5f:dc:20:5e:41:1f:38:a9:e4: 4f:71:eb:f8:1c:ed:b8:2a:98:1a:f6:a6:1b:a7:24: 0a:81:2a:30:f6:db:e0:64:dc:63:d2:21:e0:44:ad: 56:ec:00:20:6e:55:45:f2:8f:6a:15:b2:9d:78:84: 5c:5e:d1:d9:98:3c:4b:30:26:f8:56:17:3d:5c:51: da:ba:fb:38:3b:d6:92:28:dd:a2:80:d0:c7:2f:43: c9:a7:08:ec:3f:8d:fa:8c:87:07:b8:38:66:92:5b: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:6D:44:0E:B1:F2:19:1D:5E:DD:F5:64:5C:DF:A5:2E:81:5F:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:40:59:84:d0:08:5e:0d:5e:b3:8a:1c:2e:d3:b6:1e:2f:f3: 47:51:63:df:32:36:9a:8d:f2:23:7c:ad:fa:c7:f0:dd:b8:7a: 86:a4:62:1a:0f:9d:b0:e4:61:85:96:ba:35:c9:71:84:c7:9a: 0c:ed:86:3b:db:1c:dd:c0:88:21:79:de:b7:ad:00:1e:8a:9b: c8:28:cf:3f:03:e4:57:30:0d:f2:ec:21:96:ac:b0:28:69:48: ca:56:a2:55:5a:16:32:12:57:be:b2:51:97:d1:e6:24:1b:6a: 65:8a:5d:4f:ac:dc:b5:cb:00:aa:f6:c3:3b:42:1f:e3:07:bd: a8:6a:a7:88:70:44:8f:a8:10:9f:ce:d3:cf:cc:eb:3b:a2:5d: 98:d7:b5:c0:e9:65:23:0a:e4:59:cf:21:de:d8:8c:c2:54:c8: ba:05:3b:82:cd:5a:c9:48:e2:2d:90:3f:08:ab:7a:47:90:d5: c6:d3:29:60:6d:c6:10:9c:3f:0d:f9:6e:d4:7e:08:ed:4c:68: 8d:11:75:28:67:90:bc:8e:e8:c7:fd:e7:05:b0:3d:c9:36:1c: 6f:9d:0f:79:64:31:26:1d:b1:15:ad:1b:94:d2:ef:b8:e7:22: c7:25:99:5a:a9:b2:f1:5d:f7:d0:5d:3c:d1:74:06:3a:f7:99: d1:a9:5b:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET8xWr7tklD42iJJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk Njg1NTUwY2EtYTVkMC00Y2I5LThkMjQtOTczYWU2YzE2MGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbtClZuhMitGdNDrpjPyxB86SG70yYD5eRFL wqAhgaGhzseNSxAoZGidiZeGG4sdgvFFrZ8BLa8rdTn7Yx3bZ+ay5eXWeiW7IeWM 9cYVJyWaAKzCg9+YmGSzS+x/cyUc22l36Uh0J8WDLxvHKajxUX8j+9HMKFhrDwXo 1phLgbN4Zn4izQ5RLHQDcv6QdUUud93r0Wzl4oDtFIlf3CBeQR84qeRPcev4HO24 Kpga9qYbpyQKgSow9tvgZNxj0iHgRK1W7AAgblVF8o9qFbKdeIRcXtHZmDxLMCb4 Vhc9XFHauvs4O9aSKN2igNDHL0PJpwjsP436jIcHuDhmkluffQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKRbUQOsfIZHV7d9WRc36UugV8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjk4ZDYwYzEtNGU5MC0z NTU3LTk5MjYtYjA2MGU5OGE0ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERAWYTQCF4NXrOKHC7Tth4v80dRY98yNpqN8iN8rfrH8N24eoak YhoPnbDkYYWWujXJcYTHmgzthjvbHN3AiCF53retAB6Km8gozz8D5FcwDfLsIZas sChpSMpWolVaFjISV76yUZfR5iQbamWKXU+s3LXLAKr2wztCH+MHvahqp4hwRI+o EJ/O08/M6zuiXZjXtcDpZSMK5FnPId7YjMJUyLoFO4LNWslI4i2QPwirekeQ1cbT KWBtxhCcPw35btR+CO1MaI0RdShnkLyO6Mf95wWwPck2HG+dD3lkMSYdsRWtG5TS 77jnIsclmVqpsvFd99BdPNF0Bjr3mdGpW/Y= -----END CERTIFICATE-----Generated at Sun Apr 28 03:23:39 2024 by rpki-client on console-ams.rpki-client.org