$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa File: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json) Hash identifier: BnqfRlulCELdnMEOdm+M1gyVWJ1AQNUOEHemUS5AkMQ= Subject key identifier: 28:37:AD:E4:43:C0:6C:58:16:16:12:62:01:15:27:43:AF:7C:E3:4A Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F432858458B088E64FC081D0C9B4E1420 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa Signing time: Sun 14 Apr 2024 13:00:34 +0000 ROA not before: Sun 14 Apr 2024 13:00:34 +0000 ROA not after: Sat 13 Jul 2024 13:00:34 +0000 asID: 0 IP address blocks: 2001:504:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8b:08:8e:64:fc:08:1d:0c:9b:4e:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Apr 14 13:00:34 2024 GMT Not After : Jul 13 13:00:34 2024 GMT Subject: CN=96b984e0-056b-4c6d-87f0-bd747f22c927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:07:a4:f4:3c:46:f9:01:bf:e8:2f:ff:21: e0:79:10:9b:06:c5:7d:1e:dd:2c:db:fa:20:80:81: 7b:fa:0c:4e:bc:5c:9c:89:bb:5c:b4:88:0f:d9:1e: 0d:1a:4a:74:ec:67:27:55:5d:2a:06:31:0a:65:be: c0:97:fb:9c:79:2c:1c:51:8d:a9:66:2b:c8:e6:17: e2:f4:6c:c2:20:3b:aa:d6:f1:f9:7f:3d:8f:1a:f9: 5a:0f:c5:4a:57:18:c9:b6:4b:b4:ca:00:6a:09:f1: 5c:03:37:00:75:5d:01:5a:d6:b8:b9:c8:cd:33:f2: 1b:f1:2b:f1:ec:bb:bc:d6:77:8d:3f:85:cf:31:67: 2d:a0:6d:25:b3:1e:c1:6f:33:00:01:40:32:fd:05: d0:bb:bd:7d:66:a9:f3:7b:ad:9f:73:8b:88:50:a9: 85:f1:9a:5e:7a:c3:00:69:15:1e:4e:61:37:21:7f: 4e:ad:37:b8:50:69:77:71:20:ec:4e:a8:7e:85:66: b2:d2:40:ba:b3:9a:22:d4:be:c0:b5:7e:82:4c:ae: a4:35:dc:0d:52:ed:5d:28:b8:07:ea:b7:6e:88:f5: 54:ae:cc:82:f9:7a:8d:ab:9e:fd:6b:b9:14:fe:87: 6b:a6:07:11:6a:05:07:eb:a0:5a:ab:46:15:f3:87: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:AD:E4:43:C0:6C:58:16:16:12:62:01:15:27:43:AF:7C:E3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:51:8e:05:95:92:30:00:03:50:52:2d:c1:9d:8d:24:de:67: fd:59:04:a4:f7:90:cd:cb:02:aa:af:79:70:3a:94:05:92:eb: 56:58:78:37:bb:40:36:c5:62:9a:0d:3e:b7:eb:37:5d:93:dd: 84:bc:e3:e0:47:5e:3b:30:30:af:15:c4:e8:bb:37:da:3c:71: ff:b4:46:41:54:ea:b3:9b:50:d4:dc:06:5d:4e:bf:70:7c:a3: fd:f4:8c:87:9b:e8:6d:3c:dd:61:5b:b4:11:7e:76:54:b3:13: fa:8f:f2:82:e8:6d:49:62:f8:01:57:85:9d:a8:09:cc:d0:e5: 81:94:a5:d9:f0:ce:c9:20:03:f5:c3:d8:84:e6:1f:22:c3:df: d8:a3:76:cd:cf:30:c3:aa:a5:e0:7b:a3:12:df:dc:27:1d:5e: f9:fa:dc:75:19:35:7a:40:c0:98:fd:3a:84:9e:e6:c5:3a:08: 73:ee:f5:16:15:f9:7e:0f:9d:d1:62:10:f6:7a:7c:51:af:7b: 68:9c:a9:ef:2e:4b:bc:8c:7d:2a:92:5c:37:31:41:c3:7a:39: e1:59:d3:84:14:b1:20:dd:fb:d0:18:91:4e:b9:db:2a:77:e9: ad:ab:8a:32:9a:b5:02:e4:07:8f:fb:4e:d1:3e:b3:c3:14:21: 03:b4:29:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWLCI5k/AgdDJtOFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk OTZiOTg0ZTAtMDU2Yi00YzZkLTg3ZjAtYmQ3NDdmMjJjOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpkHpPQ8RvkBv+gv/yHgeRCbBsV9Ht0s2/og gIF7+gxOvFycibtctIgP2R4NGkp07GcnVV0qBjEKZb7Al/uceSwcUY2pZivI5hfi 9GzCIDuq1vH5fz2PGvlaD8VKVxjJtku0ygBqCfFcAzcAdV0BWta4ucjNM/Ib8Svx 7Lu81neNP4XPMWctoG0lsx7BbzMAAUAy/QXQu719Zqnze62fc4uIUKmF8ZpeesMA aRUeTmE3IX9OrTe4UGl3cSDsTqh+hWay0kC6s5oi1L7AtX6CTK6kNdwNUu1dKLgH 6rduiPVUrsyC+XqNq579a7kU/odrpgcRagUH66Baq0YV84cmWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCg3reRDwGxYFhYSYgEVJ0OvfONKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmExMWZmMDUtMGQxYy0z YmU4LTkzNjEtMmEwOTE0ODJjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlRjgWVkjAAA1BSLcGdjSTeZ/1ZBKT3kM3LAqqveXA6lAWS61ZY eDe7QDbFYpoNPrfrN12T3YS84+BHXjswMK8VxOi7N9o8cf+0RkFU6rObUNTcBl1O v3B8o/30jIeb6G083WFbtBF+dlSzE/qP8oLobUli+AFXhZ2oCczQ5YGUpdnwzskg A/XD2ITmHyLD39ijds3PMMOqpeB7oxLf3CcdXvn63HUZNXpAwJj9OoSe5sU6CHPu 9RYV+X4PndFiEPZ6fFGve2icqe8uS7yMfSqSXDcxQcN6OeFZ04QUsSDd+9AYkU65 2yp36a2rijKatQLkB4/7TtE+s8MUIQO0KSk= -----END CERTIFICATE-----Generated at Sat May 4 02:07:55 2024 by rpki-client on console-ams.rpki-client.org