$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa File: 47bf5d33-51dd-3c34-a11c-252123b2256a.roa (raw, json) Hash identifier: EctaJIl7fmHMXaEXJuYZCpM26+FG0SBps1VEJk0sbGs= Subject key identifier: E1:57:1F:5F:5F:5F:E1:9D:0A:27:8E:96:9D:0F:AC:C2:E6:02:96:C6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847A8A153E28C1BD07B3C977E80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 9009 IP address blocks: 2607:740:5e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:53:e2:8c:1b:d0:7b:3c:97:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=36d535d7-8c6b-4a25-9b66-12252e2eccd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:7f:85:4e:45:73:fc:eb:8d:e8:db:6b:65: 9e:02:58:f6:31:b0:a6:fa:a7:f5:45:95:a9:b7:ce: 77:f8:d1:07:d0:9a:c4:ac:5c:a5:72:51:0e:03:90: 4c:9d:31:d7:30:af:34:95:1e:61:63:9d:c7:0d:c1: 10:72:a8:1f:ea:ce:b5:e5:79:bb:d6:c7:3a:1e:22: 11:57:19:7f:82:52:00:f1:be:bb:07:bc:2f:29:19: 20:39:c0:92:1b:9b:e1:a9:fd:fa:e5:3d:9e:65:e9: 12:d2:29:38:78:08:ba:ed:cf:85:f0:d8:50:06:6d: 44:e2:16:34:f2:a2:09:d5:a4:b7:29:d4:47:38:53: 00:45:41:a0:dc:e8:c9:40:b7:28:36:b9:5e:28:5b: bc:9f:4c:95:b8:e8:8d:95:60:98:e9:ab:dd:c0:11: df:7c:33:40:72:16:7a:c2:91:ac:95:a9:cd:6a:d5: d9:17:89:31:1a:6e:b0:a4:73:f9:7c:5c:89:3f:3d: 8c:a9:a5:f0:1b:bf:e3:33:13:6c:65:cf:8e:d8:d8: 28:58:f7:2b:3c:46:1f:a6:41:59:b3:77:d7:db:bf: 5f:31:be:75:ec:ff:b2:72:6d:bb:21:81:9a:41:38: e9:25:aa:77:ad:ad:ee:07:dc:7e:cf:c6:f5:58:14: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:57:1F:5F:5F:5F:E1:9D:0A:27:8E:96:9D:0F:AC:C2:E6:02:96:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:16:3d:60:1d:97:8f:ba:01:b3:be:59:cc:db:99:c4:8d:22: fd:70:99:12:ec:69:f8:5e:49:37:4f:25:e5:ec:58:f3:27:a5: f6:04:f0:aa:29:bf:c7:a8:2a:90:9d:dd:76:b9:85:a1:d2:b8: 77:a8:28:d2:8a:d8:de:cd:09:cd:e7:f1:14:23:b6:52:6d:9b: 77:fa:6a:c9:fc:01:7f:99:aa:e4:5c:97:52:38:b8:36:a0:50: ff:79:42:c5:a4:94:00:c5:55:0c:22:4b:2a:b2:53:8b:49:2a: ca:71:5c:24:2d:65:d4:71:31:45:b0:57:b4:20:89:77:20:29: 28:f6:cc:86:4a:8c:d4:47:0c:a4:da:24:a6:2a:db:8c:b4:c1: 93:57:d0:d3:27:4a:e6:20:84:bb:d8:ff:a0:15:11:db:26:ce: 56:84:0f:c7:af:1d:6e:68:bf:3e:28:f1:7b:25:f1:b6:99:38: 1f:06:50:8b:2e:a0:66:cf:1b:4f:a1:27:65:04:64:89:58:e4: 63:7f:ef:93:af:f4:b4:33:3b:dd:47:d9:63:e7:c2:11:3d:2b: aa:ca:7d:90:39:85:13:44:a8:e2:0c:cc:33:e4:06:cc:b2:cb: 91:73:c4:b5:00:0e:37:d4:89:20:bb:8f:b0:d8:e0:1b:26:53: 02:b8:81:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeooVPijBvQezyXfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk MzZkNTM1ZDctOGM2Yi00YTI1LTliNjYtMTIyNTJlMmVjY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSR/hU5Fc/zrjejba2WeAlj2MbCm+qf1RZWp t853+NEH0JrErFylclEOA5BMnTHXMK80lR5hY53HDcEQcqgf6s615Xm71sc6HiIR Vxl/glIA8b67B7wvKRkgOcCSG5vhqf365T2eZekS0ik4eAi67c+F8NhQBm1E4hY0 8qIJ1aS3KdRHOFMARUGg3OjJQLcoNrleKFu8n0yVuOiNlWCY6avdwBHffDNAchZ6 wpGslanNatXZF4kxGm6wpHP5fFyJPz2MqaXwG7/jMxNsZc+O2NgoWPcrPEYfpkFZ s3fX279fMb517P+ycm27IYGaQTjpJap3ra3uB9x+z8b1WBS1mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFXH19fX+GdCieOlp0PrMLmApbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdiZjVkMzMtNTFkZC0z YzM0LWExMWMtMjUyMTIzYjIyNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsWPWAdl4+6AbO+WczbmcSNIv1wmRLsafheSTdPJeXsWPMnpfYE 8Kopv8eoKpCd3Xa5haHSuHeoKNKK2N7NCc3n8RQjtlJtm3f6asn8AX+ZquRcl1I4 uDagUP95QsWklADFVQwiSyqyU4tJKspxXCQtZdRxMUWwV7QgiXcgKSj2zIZKjNRH DKTaJKYq24y0wZNX0NMnSuYghLvY/6AVEdsmzlaED8evHW5ovz4o8Xsl8baZOB8G UIsuoGbPG0+hJ2UEZIlY5GN/75Ov9LQzO91H2WPnwhE9K6rKfZA5hRNEqOIMzDPk Bsyyy5FzxLUADjfUiSC7j7DY4BsmUwK4gak= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org