$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa File: cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa (raw, json) Hash identifier: CeIpyP9mNFHoefUhfKcLEeIpJko4PZ7PMfkvdj4c5m0= Subject key identifier: F7:F0:9C:DA:9B:21:1A:9D:05:A6:6C:1B:91:45:6B:30:21:1F:25:09 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F77622784769A76308480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:77:62:27:84:76:9a:76:30:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=853a55fb-05bb-4ee9-9055-6aaf68302ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:37:0f:07:4a:03:c7:85:3c:93:eb:59:c9: 9a:60:e3:db:97:18:e6:a8:04:20:67:e8:97:7d:cf: ed:9b:a2:03:b9:5b:d7:9d:4c:e6:e1:b7:9a:6c:38: 10:c2:1b:da:ec:4f:91:be:4d:0f:33:a3:11:02:ac: 14:28:7b:f0:be:8d:8d:00:02:18:a0:60:b7:ed:22: ab:0c:49:b3:4a:61:37:cf:e5:56:6d:26:b1:1d:ef: 78:71:69:62:0d:e7:81:af:b7:5b:b2:be:6b:d1:26: d4:7d:4c:00:fa:39:67:e7:22:e2:a7:a1:46:54:6a: 6a:48:f6:82:3c:54:9b:5f:ae:43:60:3f:05:94:41: 3c:0f:64:78:c2:aa:64:34:9a:76:4f:ff:2b:27:49: ea:d0:7d:c1:c2:95:c6:ff:21:37:81:cb:d6:10:04: 5a:68:ca:0a:7d:ce:50:45:b4:a2:51:49:73:e4:10: 23:05:ac:f1:c7:50:cd:32:7e:41:36:26:bb:ec:5e: 0f:45:3b:0a:99:cd:12:85:6c:3a:6e:75:b4:5c:f3: 5c:12:27:0d:5d:e7:5a:80:07:c9:01:7d:a8:e8:44: 39:48:ea:a3:00:12:92:86:36:6c:7c:a4:7f:28:01: de:9d:30:f0:41:76:9a:70:d9:80:4a:95:e9:2b:0f: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F0:9C:DA:9B:21:1A:9D:05:A6:6C:1B:91:45:6B:30:21:1F:25:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:18:91:2b:cf:0c:2d:5d:e0:a8:de:a4:d9:a8:83:4d:72:5f: 61:81:c6:10:95:ab:36:57:d1:81:fc:6c:80:6a:74:35:47:d4: 07:cf:d2:a3:19:b0:37:22:49:e6:6a:f7:41:6e:16:fc:a3:1d: 51:7a:5c:4c:9c:5b:7d:c9:4b:63:6a:d3:b4:37:16:91:25:9b: 87:5d:0a:18:d4:92:d7:d3:90:a2:5d:d2:1a:59:fe:19:d0:21: f6:0f:c8:56:60:d1:94:0f:e3:ad:45:dc:67:08:f6:72:14:67: 10:71:74:f9:a3:af:a7:b5:eb:32:8e:bc:a5:57:99:5b:85:16: 45:77:4c:4d:c4:da:fe:7a:5c:94:29:4e:37:c1:2b:39:9b:9a: 0c:51:40:91:88:34:3d:77:a6:21:83:36:b7:3d:96:c5:ae:92: 90:25:34:bb:2a:de:5d:0f:bf:f6:47:f8:6d:3e:28:75:75:a2: d0:eb:41:89:d1:8f:0c:ff:eb:65:21:89:0f:83:58:0c:9c:79: 00:8d:93:a2:5f:bf:a7:1d:5c:7d:e7:14:0f:ec:14:02:6d:78: a0:0a:be:ac:fc:00:e3:08:5a:95:19:fe:af:35:2e:32:28:37: d8:bf:df:b9:4f:a8:a7:d8:f2:47:55:46:8d:55:ec:e0:22:b7: 96:9e:06:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP3diJ4R2mnYwhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ODUzYTU1ZmItMDViYi00ZWU5LTkwNTUtNmFhZjY4MzAyZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVs3DwdKA8eFPJPrWcmaYOPblxjmqAQgZ+iX fc/tm6IDuVvXnUzm4beabDgQwhva7E+Rvk0PM6MRAqwUKHvwvo2NAAIYoGC37SKr DEmzSmE3z+VWbSaxHe94cWliDeeBr7dbsr5r0SbUfUwA+jln5yLip6FGVGpqSPaC PFSbX65DYD8FlEE8D2R4wqpkNJp2T/8rJ0nq0H3BwpXG/yE3gcvWEARaaMoKfc5Q RbSiUUlz5BAjBazxx1DNMn5BNia77F4PRTsKmc0ShWw6bnW0XPNcEicNXedagAfJ AX2o6EQ5SOqjABKShjZsfKR/KAHenTDwQXaacNmASpXpKw/JMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPfwnNqbIRqdBaZsG5FFazAhHyUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2JlYTZjYTEtYjJmYS0z M2VjLTg4MDMtMTUyYTA1ZDhmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsYkSvPDC1d4KjepNmog01yX2GBxhCVqzZX0YH8bIBqdDVH1AfP 0qMZsDciSeZq90FuFvyjHVF6XEycW33JS2Nq07Q3FpElm4ddChjUktfTkKJd0hpZ /hnQIfYPyFZg0ZQP461F3GcI9nIUZxBxdPmjr6e16zKOvKVXmVuFFkV3TE3E2v56 XJQpTjfBKzmbmgxRQJGIND13piGDNrc9lsWukpAlNLsq3l0Pv/ZH+G0+KHV1otDr QYnRjwz/62UhiQ+DWAyceQCNk6Jfv6cdXH3nFA/sFAJteKAKvqz8AOMIWpUZ/q81 LjIoN9i/37lPqKfY8kdVRo1V7OAit5aeBgs= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org