$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa File: 99e80352-28e0-3280-b087-90da68e9840c.roa (raw, json) Hash identifier: MBp7RanpwlBL26EDgQqBeSeLLohxdSRNoN8aaSbA5Hg= Subject key identifier: 6E:44:2F:13:9C:C0:E7:C2:2F:B2:84:19:7D:FC:8D:5D:3E:85:B8:2C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F7782203003C505B38880 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:77:82:20:30:03:c5:05:b3:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=9fe53484-feb1-49f5-911c-ee9fd1a796b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:22:50:33:2f:4d:f8:93:b9:1f:48:88:8e: 8e:2b:c4:ca:d6:a0:10:ad:1b:03:a6:29:cf:bc:67: e3:77:af:6a:86:6b:49:b6:d1:4a:f1:70:bf:6f:b5: 9d:6a:e2:b7:3c:29:9a:5c:33:2e:4c:cc:e1:a6:46: 92:ed:ce:31:e6:1e:6c:a2:ca:62:9d:6c:28:be:16: 41:28:5a:e7:d4:5c:7e:1a:94:80:bb:74:f3:82:75: 28:18:a1:9c:38:d5:5e:e8:f6:a2:e1:d1:04:91:d6: fb:7f:43:91:0c:a3:80:79:e5:70:dc:bd:e2:5a:32: c2:d3:5f:8c:99:04:c8:8c:1e:4b:43:14:f5:2e:3d: 9f:42:e2:ae:21:63:1b:31:ac:6d:c5:70:66:98:96: 94:6d:33:e5:8a:ec:57:0d:d4:59:e9:2d:c3:3b:61: 9c:f1:1f:59:bc:8d:31:7a:68:d1:2a:6f:92:06:74: 78:8e:e6:fe:8b:1e:c3:9a:46:31:c3:69:f9:93:d1: cd:f9:59:af:1d:b7:07:84:b0:65:25:73:00:68:53: 68:41:29:e4:ff:ac:c7:07:5d:fe:0a:35:1f:66:52: d6:7a:a9:69:35:a5:ca:c4:97:0f:04:f0:81:14:08: 07:1d:2a:73:e8:f9:92:ce:bd:07:4e:87:a3:20:0e: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:44:2F:13:9C:C0:E7:C2:2F:B2:84:19:7D:FC:8D:5D:3E:85:B8:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:62:52:e8:c9:a9:00:20:20:57:ec:8d:d4:76:13:0b:1d:23: 59:24:8c:9e:e4:b8:21:cc:29:6b:5e:00:57:26:60:93:eb:47: 17:dd:b7:6e:a7:5b:73:c4:03:c7:d3:82:a5:55:81:20:fb:7c: d0:f2:e6:83:6f:a7:12:d6:3a:8d:f8:a8:60:f4:76:fa:3c:8d: 8a:79:73:e3:01:12:32:08:a3:c9:39:49:f7:27:28:68:b5:2d: 55:7d:00:5f:d0:1c:3c:b5:3a:0d:f4:cf:32:1d:4e:81:e5:8f: de:84:a1:76:ac:d9:45:d1:0b:fb:f5:21:a6:21:6b:a2:ae:c1: 52:cf:47:51:ed:10:7d:b6:77:f2:a4:f5:a7:a8:47:46:2d:5a: db:9b:c6:62:39:23:8a:cb:17:85:af:03:f1:e5:bf:ae:f0:01: b5:d1:3c:17:2d:9a:67:95:28:ff:2f:7f:d8:0d:28:55:e1:f7: 8c:da:a1:92:2d:db:d5:90:28:4a:0e:ae:e8:13:d7:06:52:66: 8d:6b:4b:1d:0c:3c:16:8c:61:2b:32:cb:ee:81:23:f7:18:29: 29:86:b2:1d:af:4a:db:ef:ea:d8:71:ab:85:a7:1b:80:49:f6: b4:45:5c:2f:7a:77:b2:13:48:b3:d3:12:56:09:85:49:12:1f: 31:c0:1b:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP3eCIDADxQWziIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OWZlNTM0ODQtZmViMS00OWY1LTkxMWMtZWU5ZmQxYTc5NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY4iUDMvTfiTuR9IiI6OK8TK1qAQrRsDpinP vGfjd69qhmtJttFK8XC/b7WdauK3PCmaXDMuTMzhpkaS7c4x5h5sospinWwovhZB KFrn1Fx+GpSAu3TzgnUoGKGcONVe6Pai4dEEkdb7f0ORDKOAeeVw3L3iWjLC01+M mQTIjB5LQxT1Lj2fQuKuIWMbMaxtxXBmmJaUbTPliuxXDdRZ6S3DO2Gc8R9ZvI0x emjRKm+SBnR4jub+ix7DmkYxw2n5k9HN+VmvHbcHhLBlJXMAaFNoQSnk/6zHB13+ CjUfZlLWeqlpNaXKxJcPBPCBFAgHHSpz6PmSzr0HToejIA7DTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG5ELxOcwOfCL7KEGX38jV0+hbgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTllODAzNTItMjhlMC0z MjgwLWIwODctOTBkYTY4ZTk4NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABViUujJqQAgIFfsjdR2EwsdI1kkjJ7kuCHMKWteAFcmYJPrRxfd t26nW3PEA8fTgqVVgSD7fNDy5oNvpxLWOo34qGD0dvo8jYp5c+MBEjIIo8k5Sfcn KGi1LVV9AF/QHDy1Og30zzIdToHlj96EoXas2UXRC/v1IaYha6KuwVLPR1HtEH22 d/Kk9aeoR0YtWtubxmI5I4rLF4WvA/Hlv67wAbXRPBctmmeVKP8vf9gNKFXh94za oZIt29WQKEoOrugT1wZSZo1rSx0MPBaMYSsyy+6BI/cYKSmGsh2vStvv6thxq4Wn G4BJ9rRFXC96d7ITSLPTElYJhUkSHzHAG/Y= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org