$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa File: 0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa (raw, json) Hash identifier: p9eDypUMOw8naH4+8zZs7+AjIxPQzDfPgFZ+nkRzqkg= Subject key identifier: 70:49:85:24:3C:9C:8A:B9:0A:3A:E5:37:16:11:83:8B:1A:1E:E3:F7 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F7D193DDE05C76C211F20 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7d:19:3d:de:05:c7:6c:21:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=a03fb14f-055e-4bec-8a54-c496136942cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:12:2a:b9:86:d1:6a:70:ee:87:90:0f:82: f4:a4:66:60:9e:32:44:37:91:28:13:d0:2c:f4:54: 42:26:04:32:fc:eb:41:04:5e:bf:e8:f2:92:ba:9b: 76:12:a6:f5:7d:69:ed:aa:7f:ba:4e:10:56:3c:dd: 37:19:33:7e:b7:86:0b:58:2a:08:64:2b:04:52:d4: 89:9f:db:ef:75:72:c2:87:22:2f:2c:ad:84:cf:09: 9f:e6:a4:e3:be:f5:45:c8:24:4a:fc:94:c9:9c:24: 3e:e7:af:f2:a7:4f:97:ae:db:74:2a:36:c9:a2:2b: 9f:dd:41:43:3f:d9:81:4c:e7:15:6e:b0:cb:38:bd: a2:03:a9:eb:d9:33:c1:d6:6c:44:2e:f0:1f:31:86: 8d:b5:82:4b:23:81:f3:75:57:af:2e:55:ea:f0:be: 50:a3:4e:1f:51:53:4e:b8:91:73:ec:75:b3:5c:eb: 8d:73:78:37:47:df:d6:73:63:bb:2b:ed:b5:ec:d4: de:0c:cc:5c:f3:43:50:99:d4:1d:de:b3:ad:20:a7: a8:75:3b:67:d6:92:cc:09:86:7c:50:cc:0f:8d:63: fe:e1:9d:da:c8:d6:78:e1:55:34:37:fd:68:60:a1: 1d:f4:f9:9f:92:af:01:68:af:09:78:2c:be:c5:28: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:49:85:24:3C:9C:8A:B9:0A:3A:E5:37:16:11:83:8B:1A:1E:E3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d8:7b:ed:0a:b3:94:38:8d:c0:36:c4:9b:4a:62:ec:2c:75: 27:4b:63:54:f5:03:97:04:bf:72:34:c8:62:9c:4a:b2:3a:d7: c9:59:b5:89:49:ce:6e:03:72:16:2a:d1:d9:b9:23:ab:61:35: 0a:a2:a8:37:3e:b4:c7:1d:5e:be:62:b0:92:cf:dc:8f:f6:af: 42:52:f6:a7:91:fe:42:cc:ba:d5:59:1b:5d:8f:db:d9:f2:07: 42:7e:82:8c:88:a6:82:a5:bb:f8:92:83:98:83:2b:d9:5a:1e: 39:f6:72:a0:9a:a9:43:ca:7b:54:16:b3:36:5d:54:36:b4:62: a0:c4:0e:e8:6a:ff:99:76:c2:7e:e6:72:dc:60:67:99:e5:6b: c7:ed:53:e2:d9:3c:8a:ca:bd:c2:9a:3a:02:d6:e8:9d:b8:e7: 62:18:f1:5d:b6:b4:a8:b3:80:5c:7a:3e:71:80:ea:15:76:d5: 5a:6d:77:75:a4:b2:cc:75:8c:e2:bb:6e:63:83:16:d5:99:e9: ce:a4:38:87:f9:12:01:d4:59:f6:04:e9:7c:6b:5a:cb:5a:68: 61:b9:d7:c6:40:17:dd:c6:c6:55:60:c0:b9:3a:cc:df:d7:bf: 5f:09:71:2a:36:5f:90:d8:ca:1f:aa:f6:4f:5e:a5:28:9b:72: 85:14:ab:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP30ZPd4Fx2whHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTAzZmIxNGYtMDU1ZS00YmVjLThhNTQtYzQ5NjEzNjk0MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJgSKrmG0Wpw7oeQD4L0pGZgnjJEN5EoE9As 9FRCJgQy/OtBBF6/6PKSupt2Eqb1fWntqn+6ThBWPN03GTN+t4YLWCoIZCsEUtSJ n9vvdXLChyIvLK2Ezwmf5qTjvvVFyCRK/JTJnCQ+56/yp0+Xrtt0KjbJoiuf3UFD P9mBTOcVbrDLOL2iA6nr2TPB1mxELvAfMYaNtYJLI4HzdVevLlXq8L5Qo04fUVNO uJFz7HWzXOuNc3g3R9/Wc2O7K+217NTeDMxc80NQmdQd3rOtIKeodTtn1pLMCYZ8 UMwPjWP+4Z3ayNZ44VU0N/1oYKEd9Pmfkq8BaK8JeCy+xSiXHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBJhSQ8nIq5CjrlNxYRg4saHuP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGU5ZmFkZjQtZjdiYy0z YWUwLTlkNjktOTE0NWZlMDRlMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABjYe+0Ks5Q4jcA2xJtKYuwsdSdLY1T1A5cEv3I0yGKcSrI618lZ tYlJzm4DchYq0dm5I6thNQqiqDc+tMcdXr5isJLP3I/2r0JS9qeR/kLMutVZG12P 29nyB0J+goyIpoKlu/iSg5iDK9laHjn2cqCaqUPKe1QWszZdVDa0YqDEDuhq/5l2 wn7mctxgZ5nla8ftU+LZPIrKvcKaOgLW6J2452IY8V22tKizgFx6PnGA6hV21Vpt d3Wkssx1jOK7bmODFtWZ6c6kOIf5EgHUWfYE6XxrWstaaGG518ZAF93GxlVgwLk6 zN/Xv18JcSo2X5DYyh+q9k9epSibcoUUq1U= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org