$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa File: e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa (raw, json) Hash identifier: aJ3Zwx6c4RQRykdKBrZlnCOf2ww0hQ+LUlQA7Xu3+5Y= Subject key identifier: 37:B4:C0:2F:F8:FB:1C:55:98:4B:A9:DB:F8:01:2C:E8:18:F3:CC:74 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F77175676528F0B2DC880 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:77:17:56:76:52:8f:0b:2d:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=9fc349fd-1fec-4c6c-8ff6-4a5489c2d55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:d3:52:e8:35:ff:ee:2f:57:02:9e:65:7c: 45:1c:4d:da:6c:74:e0:f6:61:8c:5a:21:84:50:04: a8:d9:01:95:de:65:9c:6c:58:2d:61:93:b0:ee:0f: 7a:42:68:7f:bb:51:c8:69:fd:d7:9b:df:9f:93:f5: 47:96:a6:34:8d:72:3b:35:35:27:09:4f:44:5e:5c: 3b:fa:99:ee:aa:8b:95:23:cc:18:8f:05:ba:b7:41: 30:0b:81:8e:f0:bb:71:ff:b8:19:48:7e:a6:ac:c9: 67:c2:a2:05:f2:fe:7c:d7:af:f8:92:33:0d:7a:9a: 41:00:73:37:7b:fa:3e:5d:dc:e7:03:f1:c1:72:96: d2:7e:31:7e:0d:af:68:c0:72:d9:2e:38:21:ef:f6: eb:31:5c:af:31:78:c2:7f:8d:c2:20:cd:a6:8b:d2: 77:e2:6e:68:08:ec:7b:ab:99:57:11:f7:47:40:81: 26:1f:c5:6d:23:55:47:52:a0:71:ca:a1:91:64:cc: 33:ec:81:93:42:c0:90:26:e7:71:51:e9:a1:54:f8: a9:30:3a:8d:08:e0:cf:ce:88:35:83:d4:f8:0e:a5: 36:8d:df:ac:b5:b5:d3:b5:ca:84:db:40:27:96:4f: a4:b6:d0:51:79:e7:a9:29:f5:9f:84:29:90:a7:d2: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B4:C0:2F:F8:FB:1C:55:98:4B:A9:DB:F8:01:2C:E8:18:F3:CC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:41:ef:cd:13:52:7c:da:ac:d7:75:14:8c:b0:ba:35:44:70: 94:14:5f:54:3d:92:bf:e8:0c:5d:fe:8a:bd:5a:9d:e6:b7:5b: 6e:7d:e9:d0:97:31:a7:52:28:4f:24:f9:11:c3:e0:13:52:5d: 05:9b:14:53:91:a5:7d:64:a0:c8:76:b0:26:d9:d9:c5:57:79: 88:66:8e:18:21:a1:ca:4f:fa:5d:56:6c:ec:86:68:78:a6:bb: 14:26:d6:91:e4:9f:1f:41:69:73:88:25:c3:ba:62:1f:d2:e9: 5e:40:c7:03:89:6f:b4:1a:d2:ba:c5:0f:83:eb:5a:8c:db:f4: f7:d6:cb:92:4f:c5:4c:92:a6:3b:42:70:8e:54:1b:12:f8:5a: 98:cc:ca:e2:87:89:97:11:15:1f:c4:81:bd:dd:c7:52:e4:ce: 83:d7:2c:45:49:23:5c:18:81:af:21:b2:6b:cc:6a:27:4d:ee: c6:0e:50:6f:c7:c6:34:f7:59:67:55:1e:ef:8e:6b:6d:aa:95: de:78:76:91:6e:70:c2:e9:af:b9:ae:32:3a:10:9d:0e:3d:2c: 01:69:72:dd:2c:ce:69:5a:cc:b6:c9:4b:b3:29:f7:21:40:8b: 24:d6:7b:15:ff:a1:44:ea:f4:2d:59:11:63:af:2e:15:ee:ee: b7:d0:e2:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP3cXVnZSjwstyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OWZjMzQ5ZmQtMWZlYy00YzZjLThmZjYtNGE1NDg5YzJkNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMXTUug1/+4vVwKeZXxFHE3abHTg9mGMWiGE UASo2QGV3mWcbFgtYZOw7g96Qmh/u1HIaf3Xm9+fk/VHlqY0jXI7NTUnCU9EXlw7 +pnuqouVI8wYjwW6t0EwC4GO8Ltx/7gZSH6mrMlnwqIF8v5816/4kjMNeppBAHM3 e/o+XdznA/HBcpbSfjF+Da9owHLZLjgh7/brMVyvMXjCf43CIM2mi9J34m5oCOx7 q5lXEfdHQIEmH8VtI1VHUqBxyqGRZMwz7IGTQsCQJudxUemhVPipMDqNCODPzog1 g9T4DqU2jd+stbXTtcqE20Anlk+kttBReeepKfWfhCmQp9LdCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDe0wC/4+xxVmEup2/gBLOgY88x0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTJmNjU1NmQtN2NkNC0z OTVlLTlhNWQtOGM3YzlhZWU4YTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlB780TUnzarNd1FIywujVEcJQUX1Q9kr/oDF3+ir1anea3W259 6dCXMadSKE8k+RHD4BNSXQWbFFORpX1koMh2sCbZ2cVXeYhmjhghocpP+l1WbOyG aHimuxQm1pHknx9BaXOIJcO6Yh/S6V5AxwOJb7Qa0rrFD4PrWozb9PfWy5JPxUyS pjtCcI5UGxL4WpjMyuKHiZcRFR/Egb3dx1LkzoPXLEVJI1wYga8hsmvMaidN7sYO UG/HxjT3WWdVHu+Oa22qld54dpFucMLpr7muMjoQnQ49LAFpct0szmlazLbJS7Mp 9yFAiyTWexX/oUTq9C1ZEWOvLhXu7rfQ4l0= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org