$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa File: d93dda25-13c9-3b65-a1fd-a54bf749998e.roa (raw, json) Hash identifier: gD/PkRe0f+VFmewmTrPYR5Gxg9iTqbtdi1EYP/rL238= Subject key identifier: 72:8E:AD:C7:CB:F5:9B:DC:03:5F:A2:75:6C:B7:ED:C7:30:E3:5E:6F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847C8D9D6F6904094D65E460480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 9009 IP address blocks: 2607:740:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:d6:f6:90:40:94:d6:5e:46:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=44f0ccca-4798-4d7b-8d27-df1937965db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0b:f2:91:75:37:ad:82:d9:96:2e:c7:44:4c: a4:be:84:86:8a:dd:aa:c5:de:9b:58:85:7f:59:76: 7a:0c:df:58:d0:df:aa:a0:70:4d:8f:7a:c1:59:b9: bc:f8:29:f9:e7:ca:4f:11:75:60:34:00:fe:12:7a: dd:cb:9c:25:7e:d1:21:46:20:90:03:5c:ea:47:0e: 4f:74:c9:a0:63:52:75:e5:8b:f4:19:12:cd:01:bc: 3e:ea:79:66:44:2f:99:9b:a7:35:fb:39:70:32:29: ef:f2:4f:78:c6:e9:17:8f:39:56:0d:18:da:eb:72: 5d:7d:41:85:f0:76:b1:65:c3:42:eb:0e:1c:07:d2: 3f:0b:2f:d4:30:01:f4:7b:1a:87:3a:4a:af:5f:93: 56:ae:87:74:77:91:14:dc:ee:1e:c2:73:7b:17:eb: d3:1b:9d:60:ee:78:6a:3b:54:f3:b6:66:6d:bf:72: 75:01:c3:f7:41:75:89:30:91:94:66:c1:e6:f5:ea: 91:81:7d:cd:05:d4:e2:a7:f3:6f:ca:3b:b7:c5:82: cf:2b:54:b3:d3:fd:37:cf:c8:c5:c8:7e:89:51:02: 7f:88:f3:05:a9:36:d9:dc:2c:d6:a4:af:a9:cb:74: 80:df:64:de:29:13:52:31:b8:f5:8a:73:4d:9a:30: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8E:AD:C7:CB:F5:9B:DC:03:5F:A2:75:6C:B7:ED:C7:30:E3:5E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1f:04:5d:38:d4:f4:3d:e0:da:a7:af:1f:33:b9:f5:5a:5d: e7:20:45:b3:99:6b:be:8d:87:08:78:38:dc:95:8c:7b:93:40: 3e:91:5f:d2:4a:37:47:05:2f:a3:9b:33:68:b9:56:81:1d:09: 7a:80:8a:d9:f7:a5:22:88:de:fe:04:94:08:b1:d7:d2:be:a6: 5b:d7:3c:d7:04:75:5e:ef:ce:34:59:1b:06:f5:7c:45:d2:d5: 50:13:dd:bc:e9:88:05:5b:76:c0:43:39:c4:5d:1f:91:99:61: 2a:b1:1f:ab:77:ac:00:3f:cf:94:a4:9b:9e:4a:d4:ef:a1:7c: cb:a1:93:83:48:38:b3:bd:7f:76:70:0a:2d:6b:a5:61:17:90: 0d:ba:3d:9f:71:01:31:0a:37:fe:77:d7:ff:dc:14:8c:95:c0: 00:8e:b7:d6:9a:c2:91:bd:5c:59:c2:96:6d:eb:fd:49:13:7d: db:68:30:a3:fc:35:a0:74:04:a5:1c:e1:ec:ab:55:52:ec:b9: 8f:e4:c6:82:41:4c:7a:53:26:76:fa:2d:a9:d0:0c:36:f0:8f: 5b:a7:cf:12:68:6e:39:f9:c1:2b:f7:ef:f8:6d:3d:53:a6:d2: 3a:21:a6:e6:cc:e6:cc:ec:33:40:77:95:5b:fd:61:49:5f:e3: bc:c7:cf:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfI2db2kECU1l5GBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NDRmMGNjY2EtNDc5OC00ZDdiLThkMjctZGYxOTM3OTY1ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggvykXU3rYLZli7HREykvoSGit2qxd6bWIV/ WXZ6DN9Y0N+qoHBNj3rBWbm8+Cn558pPEXVgNAD+Enrdy5wlftEhRiCQA1zqRw5P dMmgY1J15Yv0GRLNAbw+6nlmRC+Zm6c1+zlwMinv8k94xukXjzlWDRja63JdfUGF 8HaxZcNC6w4cB9I/Cy/UMAH0exqHOkqvX5NWrod0d5EU3O4ewnN7F+vTG51g7nhq O1TztmZtv3J1AcP3QXWJMJGUZsHm9eqRgX3NBdTip/Nvyju3xYLPK1Sz0/03z8jF yH6JUQJ/iPMFqTbZ3CzWpK+py3SA32TeKRNSMbj1inNNmjCsYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKOrcfL9ZvcA1+idWy37ccw415vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDkzZGRhMjUtMTNjOS0z YjY1LWExZmQtYTU0YmY3NDk5OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYfBF041PQ94Nqnrx8zufVaXecgRbOZa76Nhwh4ONyVjHuTQD6R X9JKN0cFL6ObM2i5VoEdCXqAitn3pSKI3v4ElAix19K+plvXPNcEdV7vzjRZGwb1 fEXS1VAT3bzpiAVbdsBDOcRdH5GZYSqxH6t3rAA/z5Skm55K1O+hfMuhk4NIOLO9 f3ZwCi1rpWEXkA26PZ9xATEKN/531//cFIyVwACOt9aawpG9XFnClm3r/UkTfdto MKP8NaB0BKUc4eyrVVLsuY/kxoJBTHpTJnb6LanQDDbwj1unzxJobjn5wSv37/ht PVOm0johpubM5szsM0B3lVv9YUlf47zHz4A= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org