$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa File: 5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa (raw, json) Hash identifier: xzuuNta7ystkgFRMYTg205j9FitiJ1V2LStbfxehd7I= Subject key identifier: 56:9F:97:61:DF:D2:94:C9:6E:05:94:C8:FC:A0:6D:16:22:28:9A:B8 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F7CF3DB9563BC46975440 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7c:f3:db:95:63:bc:46:97:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=9fc140cd-cfa1-47fc-9a44-a3ee5950a50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:22:7f:d2:a2:8a:7f:9b:81:b1:55:3d:13:a6: 6e:fe:0c:5b:29:c4:80:61:89:68:34:8e:23:be:11: 15:65:4a:ba:3a:73:1c:1e:3c:01:f7:16:5b:8a:16: 6d:52:87:74:60:84:3d:0e:8b:20:ee:1e:46:11:f3: 6b:31:94:a1:9e:c7:ef:d7:b8:85:e9:72:78:82:ee: 6b:a9:4a:4e:e1:c8:57:82:ea:15:c3:c5:cb:7c:98: 6f:4d:9b:a9:0a:59:03:54:22:d6:e6:db:cd:eb:39: 50:fa:a8:aa:ec:e2:19:54:e1:a1:2d:38:fa:1f:be: b0:2a:60:a6:42:8e:35:d3:8d:dd:86:32:fe:6a:af: 9e:0b:b6:82:55:cc:d3:5f:d8:84:fa:f0:74:67:0b: 97:b3:b0:51:53:d9:9e:e7:68:91:46:53:f8:5b:99: 3c:d0:0d:6b:6b:0c:d1:3d:2e:b6:07:19:96:47:4c: fe:9d:ab:4d:34:24:4c:34:f0:d0:9c:a4:8a:6c:73: 5a:fd:33:9c:73:1a:70:f1:a5:88:67:ae:8d:e6:b6: b9:d7:1e:9a:8f:69:be:e5:db:71:81:bb:a6:ac:68: 90:ac:d1:ae:59:46:3f:4a:19:0e:98:a3:10:93:f4: 26:05:95:be:15:ca:14:78:ea:e2:26:ab:aa:27:dd: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9F:97:61:DF:D2:94:C9:6E:05:94:C8:FC:A0:6D:16:22:28:9A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9d:db:80:76:61:95:3c:6b:aa:07:c6:71:c0:07:4a:df:d7: b6:4f:a5:77:b9:8b:1e:88:ca:d1:44:18:17:a2:24:e9:05:76: 0b:e9:78:98:05:e4:ee:c8:ab:5b:8f:5f:fc:6c:2e:18:28:82: bb:39:62:69:df:0e:d9:48:b7:be:9f:79:1d:c7:29:c8:a4:07: 05:b4:c2:a3:41:2a:16:2f:ab:4e:e3:28:25:52:9d:e9:69:6c: 2c:fc:0c:65:db:6f:1b:63:fb:29:f2:0c:89:c0:aa:7a:0a:ec: 50:c0:d7:39:0f:7f:5f:f4:04:b8:60:a2:cd:42:0f:bb:77:2b: 86:9b:22:96:0e:31:55:f6:da:19:cf:92:31:4f:8a:8a:57:ee: e2:20:4f:5e:dc:cf:04:5d:d8:cc:45:76:88:a2:65:b4:9a:1e: 2c:10:5c:a3:28:04:13:7e:b8:e3:3f:fe:61:5a:a4:a2:e1:1a: c8:ad:ed:a6:d7:91:1c:e3:3d:80:43:e1:72:f4:ec:d6:27:d6: 76:8a:3f:96:a8:cc:3e:9f:8c:07:e8:46:7c:54:57:fb:55:0b: e1:f4:ee:bb:c5:74:29:7f:e4:79:e0:19:0a:a7:83:36:26:11: b8:8b:6c:51:9f:2e:b4:ee:ef:e7:75:e6:95:f2:78:f3:7f:b9: c5:6e:84:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP3zz25VjvEaXVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OWZjMTQwY2QtY2ZhMS00N2ZjLTlhNDQtYTNlZTU5NTBhNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyJ/0qKKf5uBsVU9E6Zu/gxbKcSAYYloNI4j vhEVZUq6OnMcHjwB9xZbihZtUod0YIQ9Dosg7h5GEfNrMZShnsfv17iF6XJ4gu5r qUpO4chXguoVw8XLfJhvTZupClkDVCLW5tvN6zlQ+qiq7OIZVOGhLTj6H76wKmCm Qo41043dhjL+aq+eC7aCVczTX9iE+vB0ZwuXs7BRU9me52iRRlP4W5k80A1rawzR PS62BxmWR0z+natNNCRMNPDQnKSKbHNa/TOccxpw8aWIZ66N5ra51x6aj2m+5dtx gbumrGiQrNGuWUY/ShkOmKMQk/QmBZW+FcoUeOriJquqJ92dDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFafl2Hf0pTJbgWUyPygbRYiKJq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTMzN2IxMzgtMGZlOS0z YjZkLWFlMjEtNWZmNmZmNDQ3NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2d24B2YZU8a6oHxnHAB0rf17ZPpXe5ix6IytFEGBeiJOkFdgvp eJgF5O7Iq1uPX/xsLhgogrs5YmnfDtlIt76feR3HKcikBwW0wqNBKhYvq07jKCVS nelpbCz8DGXbbxtj+ynyDInAqnoK7FDA1zkPf1/0BLhgos1CD7t3K4abIpYOMVX2 2hnPkjFPiopX7uIgT17czwRd2MxFdoiiZbSaHiwQXKMoBBN+uOM//mFapKLhGsit 7abXkRzjPYBD4XL07NYn1naKP5aozD6fjAfoRnxUV/tVC+H07rvFdCl/5HngGQqn gzYmEbiLbFGfLrTu7+d15pXyePN/ucVuhFw= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org