$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa File: a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa (raw, json) Hash identifier: xNPaSJPDtcudO87VxTlejdoY1ezmYdipCxgZXl/7JTM= Subject key identifier: DD:73:F8:65:80:1E:03:DC:02:91:A2:D3:5C:E0:1B:DF:BC:DC:E0:2F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847C8D9E57F8C29F69DD9C5F850 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 9009 IP address blocks: 2607:740:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e5:7f:8c:29:f6:9d:d9:c5:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=ebba9989-da33-4df1-89c1-4d897466eb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:bd:eb:b4:d1:05:d7:31:9e:a3:94:91:2b: f3:01:11:89:d3:78:2c:01:d9:e5:d2:54:8c:7e:d2: b4:32:c6:4e:5e:29:0f:f5:1e:15:19:8c:6d:6e:25: 9b:9a:ef:03:38:a3:3e:e5:85:09:0b:0b:0b:56:05: 51:1a:43:13:3b:54:9f:d9:5e:4f:2c:98:d7:29:0e: c3:b0:95:0a:3b:8f:a4:1d:17:b3:9b:da:62:ba:c2: 20:50:e8:84:52:c1:82:cb:ce:42:6c:99:77:fa:16: f1:a1:94:f8:98:b8:5d:ed:f7:87:1a:8a:27:25:dd: 36:fb:0f:87:20:1f:4a:9c:d2:47:f7:32:13:95:c8: 5e:bd:00:89:3c:ea:a3:5b:83:f7:1c:c8:7d:e3:0f: 3f:f7:16:7e:32:9c:73:63:bb:bc:c2:5a:53:eb:d9: da:9e:66:7c:57:da:73:45:c4:ea:1d:dd:d7:7d:2e: db:5c:98:92:6d:d4:3d:65:00:db:27:e9:3f:41:2a: 41:a9:4d:07:04:e4:a3:13:e4:6d:d4:da:f8:92:d0: 1f:97:fd:87:5a:94:2c:aa:5b:41:7e:3b:f8:fb:a0: 54:31:1c:8e:2d:86:c2:fc:1a:ee:38:88:98:a2:f7: bd:0f:40:2a:79:6b:d3:80:3c:6a:e7:6b:54:80:c9: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:73:F8:65:80:1E:03:DC:02:91:A2:D3:5C:E0:1B:DF:BC:DC:E0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:25:fc:a6:4a:5d:aa:29:1e:12:4a:df:50:82:a4:74:ea:18: 90:e7:ef:cd:36:1d:bf:f6:25:c6:8e:c3:bd:d9:47:d4:38:e2: 81:9b:a6:f2:2c:fb:a3:bb:7a:1e:e7:1a:a5:bd:4d:a8:9a:12: 76:4b:ba:93:ac:db:93:94:15:4b:5f:15:55:21:5f:c5:ce:43: 7e:2b:a4:e8:4f:86:3a:ed:ef:b5:76:95:9b:c9:44:1f:2b:d7: 8e:43:d2:4e:a5:74:80:6f:ca:86:43:62:6a:f2:f6:f7:ad:50: 42:6b:5b:2e:f8:20:77:a8:3f:fa:31:b6:f4:6f:e7:c5:22:9b: 81:39:ff:ef:a3:5d:e4:22:6c:e9:ca:7f:9e:0b:85:74:7e:a4: 6e:66:1f:a9:02:a3:a4:03:02:de:8d:58:4c:ac:44:23:cd:d5: 90:c5:83:68:b3:1c:d5:2a:07:0d:cf:3f:52:fb:4e:3f:af:9c: 51:bf:cc:d7:d9:2f:d2:84:fc:67:81:52:92:cd:57:47:3d:9c: b6:d9:60:29:f4:bb:7b:b2:26:22:f7:6b:64:06:4c:7d:72:7b: b2:a1:1a:b7:eb:4c:ff:18:20:f6:ff:ce:29:2c:8c:f5:ea:77: 46:de:51:15:9f:d4:31:23:29:8b:24:28:09:ea:99:2f:c3:ce: b0:3f:ef:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfI2eV/jCn2ndnF+FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk ZWJiYTk5ODktZGEzMy00ZGYxLTg5YzEtNGQ4OTc0NjZlYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh6967TRBdcxnqOUkSvzARGJ03gsAdnl0lSM ftK0MsZOXikP9R4VGYxtbiWbmu8DOKM+5YUJCwsLVgVRGkMTO1Sf2V5PLJjXKQ7D sJUKO4+kHRezm9piusIgUOiEUsGCy85CbJl3+hbxoZT4mLhd7feHGoonJd02+w+H IB9KnNJH9zITlchevQCJPOqjW4P3HMh94w8/9xZ+MpxzY7u8wlpT69nanmZ8V9pz RcTqHd3XfS7bXJiSbdQ9ZQDbJ+k/QSpBqU0HBOSjE+Rt1Nr4ktAfl/2HWpQsqltB fjv4+6BUMRyOLYbC/BruOIiYove9D0AqeWvTgDxq52tUgMlu8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN1z+GWAHgPcApGi01zgG9+83OAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTJhOTdkMzktNmE3Mi0z Nzc5LWJjYmItY2ZkYmIyODhjNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8l/KZKXaopHhJK31CCpHTqGJDn7802Hb/2JcaOw73ZR9Q44oGb pvIs+6O7eh7nGqW9TaiaEnZLupOs25OUFUtfFVUhX8XOQ34rpOhPhjrt77V2lZvJ RB8r145D0k6ldIBvyoZDYmry9vetUEJrWy74IHeoP/oxtvRv58Uim4E5/++jXeQi bOnKf54LhXR+pG5mH6kCo6QDAt6NWEysRCPN1ZDFg2izHNUqBw3PP1L7Tj+vnFG/ zNfZL9KE/GeBUpLNV0c9nLbZYCn0u3uyJiL3a2QGTH1ye7KhGrfrTP8YIPb/ziks jPXqd0beURWf1DEjKYskKAnqmS/DzrA/7+g= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org