$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa File: e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa (raw, json) Hash identifier: 06SbjQa14z6/QQGkjVvJ+l6TAl+Bi/3ihPn0aeoxSyQ= Subject key identifier: E7:20:7C:F5:94:7A:63:4D:DE:85:61:C7:F3:73:D4:BA:9B:8F:5C:9B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847C8D9E5B16FD1781883A43A40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 9009 IP address blocks: 2607:740:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e5:b1:6f:d1:78:18:83:a4:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=b5466eb1-7d2d-4ca0-8d35-bce5b1a01943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a6:60:78:45:f4:0c:d7:c1:a7:a1:49:ed:18: f9:70:a0:8b:02:37:b0:a4:00:da:b1:21:9d:dc:77: fd:a4:aa:c8:60:23:36:35:31:c2:1d:37:eb:1f:bf: 89:ec:2a:48:b5:cf:29:92:c1:e7:98:e8:34:0f:b4: 93:04:29:c5:11:37:72:d3:22:1c:9a:8f:19:14:fe: f6:bb:35:fc:01:88:4e:43:29:20:84:59:61:ea:4c: 98:f1:8e:6d:cc:12:5b:b6:ac:d6:2b:c8:0d:b7:bf: 1f:59:f9:af:47:18:8f:37:8f:fe:ab:3f:d7:20:35: 14:97:1d:73:6d:24:23:0d:30:dd:2a:3a:5d:09:56: 26:f8:53:15:fa:08:c3:41:ab:b4:49:80:2f:d3:ca: a7:57:b2:2f:af:95:5a:e6:f2:2a:49:76:38:12:6c: b4:63:c0:af:02:e9:75:02:2f:2d:d7:4c:5e:02:dc: 93:af:f5:ff:48:5e:61:d7:43:cb:a4:6b:e4:95:ce: a1:fc:26:fe:b5:43:9d:99:e7:fc:c3:ee:3e:f5:df: 20:9c:30:a4:62:a0:de:57:76:1d:2b:36:df:2c:a8: cd:ef:e6:32:b9:7b:b0:ab:c4:14:04:a6:2b:76:35: 06:a4:41:35:8f:40:d0:8b:5e:3f:c4:a1:fe:6f:77: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:7C:F5:94:7A:63:4D:DE:85:61:C7:F3:73:D4:BA:9B:8F:5C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d2:a9:c3:b3:a8:56:d2:d1:fb:ca:78:b6:ea:8b:7b:b8:3e: 67:1a:ab:32:b0:af:d8:1a:24:46:1d:9a:cc:db:7b:e6:7f:f3: 96:5a:9c:8d:76:54:b3:c8:01:b8:1d:52:29:fe:24:89:56:08: 89:65:72:79:69:25:fb:90:e2:ad:f5:48:60:47:48:2b:2c:72: 5c:39:64:0f:64:a8:02:13:ed:97:83:00:77:f6:28:dd:ba:5c: 76:62:4b:f7:33:a5:0e:99:27:d0:94:bf:d6:d1:25:90:13:46: f5:23:fc:b5:fe:14:fb:8b:5b:1d:e1:bc:d8:99:3a:67:6a:66: ba:4d:03:af:92:a6:3e:35:6a:22:61:97:63:40:e2:7c:a4:1c: 48:50:f2:ec:a2:66:74:7d:78:f5:da:35:55:29:3c:88:38:e9: 4d:4e:ff:79:a7:46:bc:0a:6f:08:e9:f5:aa:b2:4c:52:8e:2f: 4b:57:53:b1:c7:df:56:55:a8:57:ce:05:c8:0a:1a:c5:63:c4: a3:05:af:26:de:cd:57:a7:60:cd:d3:53:bd:f3:14:e4:e2:be: 1f:de:80:cb:7f:42:bf:f3:a2:16:4a:3b:fc:4e:c2:5d:98:2f: c4:ed:a1:22:7b:e4:b4:d8:58:a1:8a:3b:59:5a:fe:bd:39:53: 81:6a:3a:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfI2eWxb9F4GIOkOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk YjU0NjZlYjEtN2QyZC00Y2EwLThkMzUtYmNlNWIxYTAxOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqZgeEX0DNfBp6FJ7Rj5cKCLAjewpADasSGd 3Hf9pKrIYCM2NTHCHTfrH7+J7CpItc8pksHnmOg0D7STBCnFETdy0yIcmo8ZFP72 uzX8AYhOQykghFlh6kyY8Y5tzBJbtqzWK8gNt78fWfmvRxiPN4/+qz/XIDUUlx1z bSQjDTDdKjpdCVYm+FMV+gjDQau0SYAv08qnV7Ivr5Va5vIqSXY4Emy0Y8CvAul1 Ai8t10xeAtyTr/X/SF5h10PLpGvklc6h/Cb+tUOdmef8w+4+9d8gnDCkYqDeV3Yd KzbfLKjN7+YyuXuwq8QUBKYrdjUGpEE1j0DQi14/xKH+b3fgNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOcgfPWUemNN3oVhx/Nz1Lqbj1ybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTU5YzFlZjgtZDBmMi0z MmNmLWFhOTYtZjgxYzA1ZmYzZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnSqcOzqFbS0fvKeLbqi3u4PmcaqzKwr9gaJEYdmszbe+Z/85Za nI12VLPIAbgdUin+JIlWCIllcnlpJfuQ4q31SGBHSCssclw5ZA9kqAIT7ZeDAHf2 KN26XHZiS/czpQ6ZJ9CUv9bRJZATRvUj/LX+FPuLWx3hvNiZOmdqZrpNA6+Spj41 aiJhl2NA4nykHEhQ8uyiZnR9ePXaNVUpPIg46U1O/3mnRrwKbwjp9aqyTFKOL0tX U7HH31ZVqFfOBcgKGsVjxKMFrybezVenYM3TU73zFOTivh/egMt/Qr/zohZKO/xO wl2YL8TtoSJ75LTYWKGKO1la/r05U4FqOig= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org