$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa File: 1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa (raw, json) Hash identifier: yD+Zr582xlknnHtdh/0mta7z+7FMFje9ZPn2BM/3LMg= Subject key identifier: 74:3F:D0:08:88:B3:EF:3D:95:60:88:DB:BB:12:0F:34:7B:4D:4D:25 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F7D3714C85DF13E4FA400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7d:37:14:c8:5d:f1:3e:4f:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=e8e67ab5-1ee5-4c27-a9c3-b50c27d1b051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9a:17:ed:9d:52:6c:da:cd:e0:44:cf:d9:e6: 3c:aa:19:ff:2b:c0:cc:53:f7:c2:a1:0d:43:1d:f4: 39:43:35:1b:25:62:35:eb:d1:55:98:fc:c0:ed:41: d1:eb:a8:f6:f7:5b:11:00:d3:65:bb:44:96:0d:af: ba:6f:9a:7c:8b:5e:90:f7:2a:15:76:4a:b0:98:ad: 15:26:6f:f4:86:52:7b:a7:76:92:86:ef:b8:82:72: 6e:e9:96:64:79:dc:c6:55:8c:bd:27:65:44:7d:a2: 65:11:19:88:82:3b:15:6a:8f:ba:71:62:c0:0d:c4: 55:83:ac:b6:ec:0a:8a:d2:13:97:e1:3f:ae:a8:59: cd:fd:06:5a:77:96:1b:c9:df:6e:e5:0c:68:de:99: b3:d6:8e:1a:41:1b:4e:b2:35:00:4d:36:82:31:ce: 32:6c:1d:8d:2d:45:0b:6a:23:1e:4a:bb:c2:7a:ba: 67:a1:ff:e2:dd:43:5f:56:78:7a:07:e1:b6:e5:6d: ec:30:3f:c6:46:6d:c6:c9:73:52:54:d4:3a:69:8f: 8d:89:b5:b8:b2:7c:f3:db:d7:56:60:d9:9a:a2:81: 3d:ad:47:56:62:a7:69:cd:6a:91:37:b3:67:5a:92: 68:5b:0b:59:ab:2d:05:3a:26:b0:49:18:6b:d5:ee: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3F:D0:08:88:B3:EF:3D:95:60:88:DB:BB:12:0F:34:7B:4D:4D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:13:78:24:6e:8b:7f:62:d3:8e:b3:b7:ad:e1:3d:d4:2b:28: 90:a6:45:f2:5d:e2:2b:e7:c2:d6:bd:75:44:73:0b:d4:a5:3e: 61:5e:a7:63:75:3e:18:6c:5d:5f:08:37:34:94:4e:ef:64:fe: ca:0f:01:e8:0d:d4:f2:41:06:f5:1d:ad:2e:cf:05:33:51:a3: d0:3c:87:84:fb:6d:95:a1:95:ee:fb:75:6b:65:ca:db:ba:44: db:c4:dd:14:fd:36:01:b7:fc:89:47:85:db:66:5b:dd:12:84: 38:b1:72:ec:73:fa:3e:4c:8f:3b:f9:ac:ff:25:76:de:f3:b3: 09:f5:08:a7:76:11:c4:52:a0:8f:12:bd:54:f9:4d:dd:b2:b8: 1a:d9:d1:5f:57:2e:89:45:63:cb:f4:90:31:ed:07:3d:c8:0e: 49:81:12:9c:aa:e5:56:30:06:e0:47:49:cd:3e:09:87:3e:13: ca:01:14:69:8e:cf:7c:60:c3:6f:76:e6:e0:af:37:d3:5a:b7: 8f:c2:18:f8:ae:cc:85:07:b4:a3:3a:f1:84:7f:8d:87:0e:d1: f1:b2:ef:31:17:3e:0b:e8:fd:a4:f8:a6:78:f4:b4:31:28:7c: 40:43:fa:7d:29:24:4e:6c:f4:e1:6a:24:d7:61:c2:18:3d:18: 31:b0:02:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP303FMhd8T5PpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZThlNjdhYjUtMWVlNS00YzI3LWE5YzMtYjUwYzI3ZDFiMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5oX7Z1SbNrN4ETP2eY8qhn/K8DMU/fCoQ1D HfQ5QzUbJWI169FVmPzA7UHR66j291sRANNlu0SWDa+6b5p8i16Q9yoVdkqwmK0V Jm/0hlJ7p3aShu+4gnJu6ZZkedzGVYy9J2VEfaJlERmIgjsVao+6cWLADcRVg6y2 7AqK0hOX4T+uqFnN/QZad5Ybyd9u5Qxo3pmz1o4aQRtOsjUATTaCMc4ybB2NLUUL aiMeSrvCerpnof/i3UNfVnh6B+G25W3sMD/GRm3GyXNSVNQ6aY+NibW4snzz29dW YNmaooE9rUdWYqdpzWqRN7NnWpJoWwtZqy0FOiawSRhr1e7zEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHQ/0AiIs+89lWCI27sSDzR7TU0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWNkODA4MDMtM2FkYi0z YmI1LThiNTItNDBiM2FhMTdmOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAoTeCRui39i046zt63hPdQrKJCmRfJd4ivnwta9dURzC9SlPmFe p2N1PhhsXV8INzSUTu9k/soPAegN1PJBBvUdrS7PBTNRo9A8h4T7bZWhle77dWtl ytu6RNvE3RT9NgG3/IlHhdtmW90ShDixcuxz+j5Mjzv5rP8ldt7zswn1CKd2EcRS oI8SvVT5Td2yuBrZ0V9XLolFY8v0kDHtBz3IDkmBEpyq5VYwBuBHSc0+CYc+E8oB FGmOz3xgw2925uCvN9Nat4/CGPiuzIUHtKM68YR/jYcO0fGy7zEXPgvo/aT4pnj0 tDEofEBD+n0pJE5s9OFqJNdhwhg9GDGwAh4= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org