$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa File: 797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa (raw, json) Hash identifier: 2JgLs/DBenj63ib66rJB1iuIfh+j3Kk6Dll3VSof6MA= Subject key identifier: 43:5C:32:4F:25:D7:61:C0:E0:3B:EE:97:D9:D7:1A:39:F5:D8:6E:F7 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584529528F23F0D78F7969609880 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 9009 IP address blocks: 2607:740:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:8f:23:f0:d7:8f:79:69:60:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=05a8e471-fe66-4717-8f6c-4eda2fcaaf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:72:0f:d6:c0:14:1d:51:4e:76:9d:2f:f8: 43:20:67:d6:0d:a9:be:3f:5b:2a:93:eb:e3:1c:40: ff:a5:07:9c:e6:d9:07:23:83:36:ba:b8:ac:10:a0: 35:09:8b:47:51:a5:48:01:bf:d4:81:02:c6:2c:7c: 2a:48:a4:8f:94:2a:77:07:bc:57:5e:a1:dc:b0:e4: 3e:f0:3d:8f:1c:15:29:be:7d:63:17:02:e1:d2:e5: 1c:4c:35:d3:86:fb:28:01:87:1f:12:40:89:3c:f2: d5:80:5b:4c:8b:4c:01:79:52:79:b8:29:83:22:21: e1:47:0b:2b:c9:73:79:be:db:1e:2f:e6:bc:bd:d5: 31:02:b3:43:2d:8c:9b:0f:8a:f1:be:d4:c7:13:03: 8e:8a:79:39:85:e4:fa:82:e0:87:c4:b5:56:cf:20: 5d:d3:6b:66:ff:50:76:f3:0a:31:67:c6:88:c2:c9: e3:ad:58:d2:3d:b2:90:57:18:da:ef:ed:79:aa:06: 26:1d:7a:b5:e0:2c:23:53:bb:57:c2:c7:3f:3b:42: 49:ab:e7:dd:3a:72:37:9d:83:ab:84:43:9f:d3:77: 54:9a:68:ba:b7:4f:94:fc:a8:a0:49:6d:c2:6c:6e: 9b:63:f4:f8:6c:8d:60:b7:bc:dc:a8:c3:1c:4d:97: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5C:32:4F:25:D7:61:C0:E0:3B:EE:97:D9:D7:1A:39:F5:D8:6E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:68:8c:5b:d2:67:ec:51:47:6e:5d:b0:e4:09:45:1a:b6:19: 51:4a:cd:e5:de:70:15:27:b7:48:6a:5e:fb:30:97:c1:45:f1: eb:d3:bb:30:d5:68:53:16:13:ac:91:fc:17:8d:a0:36:31:48: b8:47:0f:0d:94:b6:28:45:ed:d7:44:b9:71:42:db:4c:b8:ec: 27:a1:f5:76:82:80:a6:05:42:2b:56:d2:7c:ee:82:0f:0e:0e: 96:3c:6a:e2:fe:84:b8:c4:b2:db:21:70:22:06:bb:93:18:9f: d4:b9:e3:c7:d1:98:55:cb:c7:13:5f:a2:e1:1b:3e:94:e2:fb: db:c0:80:b4:91:c6:a1:9a:d6:2f:eb:f5:fc:f5:89:d5:9a:94: a8:01:5a:86:ba:ed:99:5d:de:08:b0:bf:13:c4:d3:36:00:d6: 08:6a:3f:e0:e8:25:4e:82:07:a8:7b:2c:bd:be:d9:c1:b3:06: fd:9f:d7:ab:3b:be:2c:3c:97:f0:19:95:b4:5d:50:95:c6:b5: 2c:91:d6:d0:b5:56:96:f6:e1:d6:a7:3d:89:6f:b0:fa:a0:5a: 81:d7:d5:75:58:fb:28:3d:8f:35:f8:1f:1a:df:3e:78:b9:81: 44:6d:d2:fd:b7:71:ec:91:5a:68:1e:23:18:69:43:c4:9f:59: ef:95:77:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUpUo8j8NePeWlgmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk MDVhOGU0NzEtZmU2Ni00NzE3LThmNmMtNGVkYTJmY2FhZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktpyD9bAFB1RTnadL/hDIGfWDam+P1sqk+vj HED/pQec5tkHI4M2urisEKA1CYtHUaVIAb/UgQLGLHwqSKSPlCp3B7xXXqHcsOQ+ 8D2PHBUpvn1jFwLh0uUcTDXThvsoAYcfEkCJPPLVgFtMi0wBeVJ5uCmDIiHhRwsr yXN5vtseL+a8vdUxArNDLYybD4rxvtTHEwOOink5heT6guCHxLVWzyBd02tm/1B2 8woxZ8aIwsnjrVjSPbKQVxja7+15qgYmHXq14CwjU7tXwsc/O0JJq+fdOnI3nYOr hEOf03dUmmi6t0+U/KigSW3CbG6bY/T4bI1gt7zcqMMcTZfk/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENcMk8l12HA4Dvul9nXGjn12G73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzk3ZjI1ODAtYjdiMC0z NDY4LWE1ZjAtMWQ1ZWY3OGQ5MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARojFvSZ+xRR25dsOQJRRq2GVFKzeXecBUnt0hqXvswl8FF8evT uzDVaFMWE6yR/BeNoDYxSLhHDw2UtihF7ddEuXFC20y47Ceh9XaCgKYFQitW0nzu gg8ODpY8auL+hLjEstshcCIGu5MYn9S548fRmFXLxxNfouEbPpTi+9vAgLSRxqGa 1i/r9fz1idWalKgBWoa67Zld3giwvxPE0zYA1ghqP+DoJU6CB6h7LL2+2cGzBv2f 16s7viw8l/AZlbRdUJXGtSyR1tC1Vpb24danPYlvsPqgWoHX1XVY+yg9jzX4Hxrf Pni5gURt0v23ceyRWmgeIxhpQ8SfWe+Vd6g= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:14 2024 by rpki-client on console-fra.rpki-client.org