$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa File: aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa (raw, json) Hash identifier: jeznsVSGX39gwnuji1I893GCQKqq6y+zq7feDVHZyl0= Subject key identifier: D5:2B:0D:0C:C4:62:3D:22:DA:F8:05:52:FE:E4:9C:BB:DD:67:A3:36 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847C8D9D708796580BE8418DF40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 209181 IP address blocks: 2607:740:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:d7:08:79:65:80:be:84:18:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=8a591a6f-2a4f-4b07-a1dd-f5c9f73628e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:67:c1:bf:ec:06:eb:97:50:63:97:a6:4b: 86:4d:9b:20:02:45:3e:4b:9b:b9:c6:fd:7e:90:06: aa:a4:45:65:b7:fc:20:e8:fa:09:17:2c:05:12:c4: 81:75:bc:ac:75:9b:61:ab:80:0a:b8:54:f1:d4:6c: 40:a8:20:55:ae:3a:bc:64:5b:44:e7:ee:8b:60:63: 64:ae:9a:94:b5:ad:b5:17:d9:b3:28:32:21:6e:c0: da:c3:cc:36:51:4f:1e:42:57:ec:12:b2:23:48:57: 24:b6:15:8d:d8:5c:83:65:06:8b:98:bc:f5:55:63: df:a6:4c:36:8c:3f:2c:9e:ef:23:0e:b0:b8:1b:e4: e0:87:90:e7:8b:c1:3f:99:a8:7a:93:19:de:dd:01: b2:4f:8a:0e:47:e0:28:ff:1a:99:74:0e:cc:3e:19: a3:43:8f:7c:cc:47:41:0f:75:09:f3:ef:4e:b6:6d: 20:e0:3c:39:6e:0b:b6:40:c5:05:c9:18:5f:d5:73: a9:10:a1:f7:2c:df:a4:c2:f9:46:37:a6:a4:4d:64: da:17:7f:cb:a3:cb:56:db:13:1b:b1:5f:15:73:ca: 96:0d:22:12:a4:ab:ec:5c:96:b6:d3:1c:a6:d3:2b: 65:00:77:cd:34:ec:0c:43:7c:d4:f3:53:f3:d6:78: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2B:0D:0C:C4:62:3D:22:DA:F8:05:52:FE:E4:9C:BB:DD:67:A3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:26:d9:1d:f2:ee:6f:5d:d9:7e:3f:f3:92:5c:6d:15:e6:b2: ea:82:22:8f:90:65:6f:5d:27:76:f0:48:41:38:83:f0:cf:20: 14:77:9f:f9:a5:ef:35:e3:00:f2:d5:a4:97:55:1a:5a:bb:f7: ed:ac:0d:c7:58:21:e2:4e:b4:d5:98:0b:df:68:b9:fe:4b:e6: fb:7f:40:7f:f3:2c:fd:43:99:da:94:58:aa:19:06:94:90:0c: 3e:d7:99:1c:f8:ca:b0:5f:81:ea:e0:9f:d9:e5:9f:d9:78:7d: c3:c9:bd:8b:99:83:9c:3f:ed:54:ad:8e:31:fc:12:a7:09:32: 05:6b:82:3e:e8:d5:de:0b:82:e3:cf:d4:b3:db:b9:be:de:62: 13:72:ab:06:35:44:ff:17:da:1f:b1:6c:a5:a6:67:d9:b6:47: bb:22:4d:a2:05:a1:b8:83:2c:22:70:c4:ea:3d:6b:26:2d:6c: 56:f5:74:0f:c5:79:ee:ac:38:02:f8:86:dc:c5:84:14:01:8c: a1:be:80:f6:2f:88:81:76:23:b8:c2:45:11:45:26:e6:6a:6a: 41:e0:a5:a9:59:a6:63:5b:58:bb:e3:81:dc:92:37:e4:6b:a2: 32:ab:84:9f:bf:0f:5d:ad:31:0e:dc:84:3e:c4:6e:48:b2:de: 00:df:e2:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfI2dcIeWWAvoQY30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk OGE1OTFhNmYtMmE0Zi00YjA3LWExZGQtZjVjOWY3MzYyOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB1nwb/sBuuXUGOXpkuGTZsgAkU+S5u5xv1+ kAaqpEVlt/wg6PoJFywFEsSBdbysdZthq4AKuFTx1GxAqCBVrjq8ZFtE5+6LYGNk rpqUta21F9mzKDIhbsDaw8w2UU8eQlfsErIjSFckthWN2FyDZQaLmLz1VWPfpkw2 jD8snu8jDrC4G+Tgh5Dni8E/mah6kxne3QGyT4oOR+Ao/xqZdA7MPhmjQ498zEdB D3UJ8+9Otm0g4Dw5bgu2QMUFyRhf1XOpEKH3LN+kwvlGN6akTWTaF3/Lo8tW2xMb sV8Vc8qWDSISpKvsXJa20xym0ytlAHfNNOwMQ3zU81Pz1njXIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUrDQzEYj0i2vgFUv7knLvdZ6M2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYWVmYjVmOTctNWNlMC0z YmI0LWI4MTAtN2JkOGFhNDE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUm2R3y7m9d2X4/85JcbRXmsuqCIo+QZW9dJ3bwSEE4g/DPIBR3 n/ml7zXjAPLVpJdVGlq79+2sDcdYIeJOtNWYC99ouf5L5vt/QH/zLP1DmdqUWKoZ BpSQDD7XmRz4yrBfgergn9nln9l4fcPJvYuZg5w/7VStjjH8EqcJMgVrgj7o1d4L guPP1LPbub7eYhNyqwY1RP8X2h+xbKWmZ9m2R7siTaIFobiDLCJwxOo9ayYtbFb1 dA/Fee6sOAL4htzFhBQBjKG+gPYviIF2I7jCRRFFJuZqakHgpalZpmNbWLvjgdyS N+RrojKrhJ+/D12tMQ7chD7Ebkiy3gDf4u8= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org