$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa File: 175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa (raw, json) Hash identifier: MYKZyXjxNtA02fC3aX1wUnOsxOoq110S3zgOEvf+rU4= Subject key identifier: 22:71:EC:F6:B6:09:A6:0E:66:0A:D0:2C:83:CD:73:42:49:79:01:94 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858479D76C381B3CFE672040C3D00 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 14511 IP address blocks: 2610:188::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c3:81:b3:cf:e6:72:04:0c:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=55676967-0e8b-4e07-9b1d-8e4c64fb8146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:68:f4:d1:e7:9e:dc:7b:a2:5a:45:08:5a: 53:8d:f8:f6:46:b7:28:40:1c:f4:03:35:c1:5d:f7: 0d:ac:86:cd:d6:42:57:45:b7:6d:63:7d:75:8e:27: d1:3d:1b:57:f7:57:1a:fb:89:29:67:d3:cc:4f:a9: 90:0b:65:84:10:16:75:72:5f:dd:7b:46:cc:ed:46: bb:63:98:0c:45:da:9e:61:aa:c3:33:54:5f:6b:4b: 61:db:fe:f0:6c:ec:ff:32:95:c4:6e:bb:72:59:b2: 09:76:3f:f6:48:b2:71:4d:19:38:17:34:45:86:94: 5f:52:57:43:fd:8e:0e:53:5a:25:7d:9c:5a:8f:96: 4d:c4:5c:79:c4:e9:6f:51:da:0c:80:97:04:d3:bb: 03:66:62:a8:18:b6:1f:c5:ed:d1:4e:69:5d:b5:8d: 9f:d8:22:e2:7e:6b:f7:34:2e:8e:67:6e:7a:94:9d: a1:5a:18:db:4e:de:f8:49:2d:df:c0:fc:fb:03:83: 3c:ac:84:c3:81:3e:16:6a:6b:c4:8f:19:8c:81:59: 16:7e:84:8b:ce:52:e3:ba:13:44:30:9e:e2:24:24: 70:cd:9f:3b:5f:16:6c:29:dc:44:42:77:16:9a:82: fb:e7:b9:f8:f7:47:92:68:72:53:00:14:d6:e1:69: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:71:EC:F6:B6:09:A6:0E:66:0A:D0:2C:83:CD:73:42:49:79:01:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv6: 2610:188::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:16:bf:1e:af:47:aa:7e:03:13:15:6c:d1:b8:5f:cf:5d:fb: 6c:c9:79:73:94:0a:b6:e0:9b:5a:e4:07:b6:07:27:92:9a:cd: 49:61:e6:45:d3:e7:4e:92:b1:4e:7c:69:78:f9:3c:92:4f:30: 12:10:12:89:ba:a2:45:e0:8f:b6:0f:09:f6:72:41:1f:9c:76: c7:5f:e2:a0:aa:f4:4a:48:f0:c3:ef:07:15:f7:e6:b3:23:11: 36:3b:38:19:a4:7f:22:25:75:cb:00:ca:cf:9a:9a:24:03:ba: 07:0a:52:89:56:77:e0:4e:30:1d:a4:73:a8:5d:69:00:93:76: 80:9e:56:0d:31:aa:0d:79:b9:2c:b9:4c:a3:11:35:36:88:ea: 92:25:5f:7b:16:22:ce:43:0f:c6:a3:16:40:63:57:15:20:2c: 44:59:7f:2b:65:d8:65:59:4b:c1:c5:a2:0b:ea:3a:db:ac:dd: 0b:22:ee:37:a2:72:48:d6:2d:b1:8f:ab:90:b8:2c:a6:c0:b9: 01:03:08:53:be:84:69:99:ae:47:12:ba:6e:fc:2e:74:ea:90: 7d:13:5c:89:fe:9a:b5:36:36:fc:22:a1:0c:ed:99:65:ac:47: 60:c4:1e:2e:22:c7:cd:63:f0:f7:b1:f0:b3:08:af:5a:73:c6: 5c:5b:1a:c3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeddsOBs8/mcgQMPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk NTU2NzY5NjctMGU4Yi00ZTA3LTliMWQtOGU0YzY0ZmI4MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqxo9NHnntx7olpFCFpTjfj2RrcoQBz0AzXB XfcNrIbN1kJXRbdtY311jifRPRtX91ca+4kpZ9PMT6mQC2WEEBZ1cl/de0bM7Ua7 Y5gMRdqeYarDM1Rfa0th2/7wbOz/MpXEbrtyWbIJdj/2SLJxTRk4FzRFhpRfUldD /Y4OU1olfZxaj5ZNxFx5xOlvUdoMgJcE07sDZmKoGLYfxe3RTmldtY2f2CLifmv3 NC6OZ256lJ2hWhjbTt74SS3fwPz7A4M8rITDgT4WamvEjxmMgVkWfoSLzlLjuhNE MJ7iJCRwzZ87XxZsKdxEQncWmoL757n490eSaHJTABTW4WmTJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCJx7Pa2CaYOZgrQLIPNc0JJeQGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMTc1YWQyYjItMDdjMi0z MTMyLWJkMzktYWQ5MDUwYTFhZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZFr8er0eqfgMTFWzRuF/PXftsyXlzlAq24Jta5Ae2ByeSms1JYeZF 0+dOkrFOfGl4+TySTzASEBKJuqJF4I+2Dwn2ckEfnHbHX+KgqvRKSPDD7wcV9+az IxE2OzgZpH8iJXXLAMrPmpokA7oHClKJVnfgTjAdpHOoXWkAk3aAnlYNMaoNebks uUyjETU2iOqSJV97FiLOQw/GoxZAY1cVICxEWX8rZdhlWUvBxaIL6jrbrN0LIu43 onJI1i2xj6uQuCymwLkBAwhTvoRpma5HErpu/C506pB9E1yJ/pq1Njb8IqEM7Zll rEdgxB4uIsfNY/D3sfCzCK9ac8ZcWxrD -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org