$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa File: 51d41b22-8e48-3167-a304-52a2feb74dfb.roa (raw, json) Hash identifier: JsOxvS+atf+7MgchuUFbrnz8nhWZ/XzlJaKX3SNnpt4= Subject key identifier: 55:5C:5D:92:53:24:7D:EF:49:C3:75:A9:E7:A3:DB:84:B2:D1:95:BC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F7790C66621D59108AC00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:77:90:c6:66:21:d5:91:08:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=e5d5e2e7-72b8-40fb-8e1a-d6f0c45fce47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:80:bc:d2:9f:e3:1b:91:f0:ff:81:92:ad: e8:04:63:29:9d:49:06:8d:cd:4e:0c:86:02:19:f4: a1:d3:a1:66:8e:f3:ef:81:f2:67:ee:61:fe:13:a0: 54:eb:d4:19:bb:3f:e9:97:e1:70:a8:78:cf:17:a8: 0c:50:5c:c1:00:89:d8:a5:7f:b4:72:52:f4:3d:ca: 71:b4:69:51:24:8e:6d:8a:f6:0b:e1:a0:89:39:dd: 80:72:57:33:f1:15:d4:ed:e3:46:b9:a3:da:f6:1b: b2:26:fe:f0:82:2f:fa:92:78:b7:fc:1a:8e:02:bd: ad:9b:40:ff:25:a1:f0:d5:ef:36:8a:6c:f3:5b:d3: 1a:12:eb:88:b6:c4:b9:29:84:c2:6d:9f:23:0a:24: 69:75:98:93:bd:5b:73:3b:4c:d7:70:6e:b7:40:25: 7e:c8:93:71:a7:92:b4:78:08:4a:93:c5:be:10:c7: 0b:20:08:2f:2a:a6:cb:3e:5d:5f:32:48:75:57:ba: 7c:73:68:6e:1f:9a:71:be:1f:13:35:28:cb:12:1a: 64:66:d5:d3:d8:12:63:19:be:16:97:70:94:7e:d7: cd:9f:49:e7:5c:79:83:c8:5d:fa:35:33:95:d1:72: f9:4a:36:a2:bd:b9:f0:ad:e3:29:52:53:7e:0f:fe: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5C:5D:92:53:24:7D:EF:49:C3:75:A9:E7:A3:DB:84:B2:D1:95:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:37::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:15:9b:c9:6a:c1:01:c4:bb:51:36:30:4f:74:39:cc:33:61: d9:2c:f2:a1:24:6d:68:dc:01:02:d5:a3:94:ec:be:29:b9:ed: 68:d8:bb:ce:cb:58:4a:9d:45:3c:74:21:04:a1:c5:59:44:72: 9c:55:5a:1b:76:b6:4f:a2:4f:46:d2:73:4e:d9:a4:dc:ce:76: a6:95:30:c6:d4:af:36:61:8f:8a:9c:f8:5b:09:be:45:b2:a0: 91:7b:20:26:e0:28:d8:6d:2b:32:f5:2d:58:06:2f:d6:dc:37: dc:15:27:c1:d0:7d:92:18:d0:64:f9:d7:fc:8d:24:6e:8c:3e: c6:1a:f6:81:f3:2c:12:91:bc:0c:49:c8:e3:42:09:84:00:06: 14:ae:eb:19:48:06:11:7b:08:1d:c1:fd:eb:e6:56:de:62:41: 4f:a6:a3:d6:af:0a:a1:7c:c5:fa:59:e2:6c:60:12:90:21:1b: 2f:8b:d3:00:ca:cc:35:d0:a4:1d:38:fa:d8:6a:03:61:16:c2: 0b:88:b1:d2:cc:f5:79:75:69:13:eb:2e:55:11:82:70:6d:25: 3c:d6:7c:65:62:b8:b4:0a:66:c9:1e:aa:6e:4f:f0:a5:6e:ae: 26:95:92:fd:e6:a2:c4:d7:d6:f6:7e:90:9a:6e:c5:b9:07:f7: f6:0d:22:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP3eQxmYh1ZEIrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTVkNWUyZTctNzJiOC00MGZiLThlMWEtZDZmMGM0NWZjZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxWAvNKf4xuR8P+Bkq3oBGMpnUkGjc1ODIYC GfSh06FmjvPvgfJn7mH+E6BU69QZuz/pl+FwqHjPF6gMUFzBAInYpX+0clL0Pcpx tGlRJI5tivYL4aCJOd2Aclcz8RXU7eNGuaPa9huyJv7wgi/6kni3/BqOAr2tm0D/ JaHw1e82imzzW9MaEuuItsS5KYTCbZ8jCiRpdZiTvVtzO0zXcG63QCV+yJNxp5K0 eAhKk8W+EMcLIAgvKqbLPl1fMkh1V7p8c2huH5pxvh8TNSjLEhpkZtXT2BJjGb4W l3CUftfNn0nnXHmDyF36NTOV0XL5SjaivbnwreMpUlN+D/6QhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVcXZJTJH3vScN1qeej24Sy0ZW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTFkNDFiMjItOGU0OC0z MTY3LWEzMDQtNTJhMmZlYjc0ZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHMVm8lqwQHEu1E2ME90OcwzYdks8qEkbWjcAQLVo5Tsvim57WjY u87LWEqdRTx0IQShxVlEcpxVWht2tk+iT0bSc07ZpNzOdqaVMMbUrzZhj4qc+FsJ vkWyoJF7ICbgKNhtKzL1LVgGL9bcN9wVJ8HQfZIY0GT51/yNJG6MPsYa9oHzLBKR vAxJyONCCYQABhSu6xlIBhF7CB3B/evmVt5iQU+mo9avCqF8xfpZ4mxgEpAhGy+L 0wDKzDXQpB04+thqA2EWwguIsdLM9Xl1aRPrLlURgnBtJTzWfGViuLQKZskeqm5P 8KVuriaVkv3mosTX1vZ+kJpuxbkH9/YNIlg= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org