$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa File: e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa (raw, json) Hash identifier: u8CS/LjFjtfLI6N1aQOeFbogMRZa6ykm9FIkZQLBK+A= Subject key identifier: 65:29:FC:3F:30:CE:89:A0:F5:02:44:35:46:27:19:10:DD:A4:83:53 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CA3F779DC7EF7AEBD2F48380 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 262287 IP address blocks: 2607:740:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:77:9d:c7:ef:7a:eb:d2:f4:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=71ed3f08-d50a-4dc8-bbc5-0d08a250ff72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:f3:93:91:37:f3:f4:a7:42:74:b1:fb:a9: d1:70:8b:b0:80:e5:23:69:f7:db:53:8a:af:dc:7f: d6:48:4b:da:cb:9f:e7:62:4a:9a:c8:04:47:a9:5e: 68:50:90:e2:6a:ff:75:8b:78:9d:45:1e:8f:93:4c: fc:1a:d5:13:e9:51:40:81:3c:b6:5c:3c:4e:e4:30: a9:9f:3f:eb:a1:67:c0:80:f7:41:2b:76:3c:de:68: d8:ff:fd:2d:70:ed:54:4c:7e:0b:d5:d8:ce:8c:6b: 8d:9e:52:03:7b:a9:b2:b8:44:78:71:09:c1:3c:f3: af:2b:56:18:26:3b:06:00:62:31:56:84:7b:c7:93: e0:f3:09:25:a8:d2:2e:a7:6e:b8:76:a2:2f:48:24: 46:61:d6:04:0c:1d:91:79:a1:e1:5d:5e:ec:37:05: 81:00:48:69:72:0b:b6:e6:53:9c:18:77:8b:50:11: 05:c5:2c:b2:e9:78:0f:e7:7f:82:20:f5:20:03:31: 57:06:ca:03:db:1a:90:77:aa:e0:de:88:d2:c5:67: 83:06:7c:57:6b:ab:39:a2:1c:e7:ef:30:60:bf:f0: a4:f9:a6:22:be:48:f3:7f:a0:02:b7:7b:be:09:72: 9d:33:cb:dd:ed:6d:3a:b8:45:a6:75:df:52:e0:dc: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:29:FC:3F:30:CE:89:A0:F5:02:44:35:46:27:19:10:DD:A4:83:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2c:8a:95:17:f0:91:94:0a:04:af:a1:da:ce:6b:45:fa:e9: 23:2a:15:fc:a3:92:2c:76:32:e1:b7:ba:ea:8c:11:3e:14:b3: 8f:9e:10:07:5b:d7:cf:78:cf:f7:34:34:8e:45:84:0b:d3:3f: 72:89:56:8d:cf:a8:b4:d3:77:c1:fd:f7:69:9a:13:b0:01:c9: 52:1a:3f:5a:5f:cb:50:5e:20:b7:76:f6:e0:70:35:5e:cc:cf: bd:54:44:63:7f:9c:15:9f:72:4b:ed:c9:c5:65:3d:e4:ed:77: 13:68:c2:0e:e4:68:f3:a8:15:e0:8e:e0:29:32:96:2e:16:5b: a6:59:e7:8e:99:b0:83:dc:d8:24:f6:0f:2b:75:0d:44:b1:b7: 9a:e7:2d:4e:58:ec:74:a8:54:5b:98:48:cb:46:5a:8a:89:65: 19:bf:97:76:10:5d:03:2f:f0:07:b0:ab:b4:33:de:30:84:e4: c8:fc:72:2b:6f:f6:d9:aa:2e:23:97:25:13:07:15:c9:be:77: 57:2e:1d:1b:ad:dd:41:89:6f:f2:9f:c7:28:ee:ab:fa:5a:63: 0a:35:1a:c3:31:81:36:b0:ba:a7:cb:e6:f1:41:ce:4a:ad:3f: c4:ec:bc:b7:95:66:23:db:f7:9f:8f:f4:0a:6f:8f:14:07:55: b1:72:2f:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP3edx+9669L0g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NzFlZDNmMDgtZDUwYS00ZGM4LWJiYzUtMGQwOGEyNTBmZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnrzk5E38/SnQnSx+6nRcIuwgOUjaffbU4qv 3H/WSEvay5/nYkqayARHqV5oUJDiav91i3idRR6Pk0z8GtUT6VFAgTy2XDxO5DCp nz/roWfAgPdBK3Y83mjY//0tcO1UTH4L1djOjGuNnlIDe6myuER4cQnBPPOvK1YY JjsGAGIxVoR7x5Pg8wklqNIup264dqIvSCRGYdYEDB2ReaHhXV7sNwWBAEhpcgu2 5lOcGHeLUBEFxSyy6XgP53+CIPUgAzFXBsoD2xqQd6rg3ojSxWeDBnxXa6s5ohzn 7zBgv/Ck+aYivkjzf6ACt3u+CXKdM8vd7W06uEWmdd9S4NwvhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUp/D8wzomg9QJENUYnGRDdpINTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTYwZGNkYWQtZTQxYS0z M2I1LTkyNTktZmRiZWIxOGNhNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAIsipUX8JGUCgSvodrOa0X66SMqFfyjkix2MuG3uuqMET4Us4+e EAdb1894z/c0NI5FhAvTP3KJVo3PqLTTd8H992maE7AByVIaP1pfy1BeILd29uBw NV7Mz71URGN/nBWfckvtycVlPeTtdxNowg7kaPOoFeCO4Ckyli4WW6ZZ546ZsIPc 2CT2Dyt1DUSxt5rnLU5Y7HSoVFuYSMtGWoqJZRm/l3YQXQMv8Aewq7Qz3jCE5Mj8 citv9tmqLiOXJRMHFcm+d1cuHRut3UGJb/Kfxyjuq/paYwo1GsMxgTawuqfL5vFB zkqtP8TsvLeVZiPb95+P9ApvjxQHVbFyL3I= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:26 2024 by rpki-client on console-ams.rpki-client.org