$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa File: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json) Hash identifier: OX7NtfjOEXNJuhVjSzEnzRg/m/KVHksGhGfjCN+eQ+U= Subject key identifier: C8:91:5A:8A:0C:24:F7:FA:F5:D0:6D:D1:CE:88:5C:79:6F:1F:0A:64 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584909E6A5BBF0865E3F3F614900 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 0 IP address blocks: 2001:504:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a5:bb:f0:86:5e:3f:3f:61:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=bf690638-3c49-44ec-bfbf-8a50234215f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:36:b0:95:fb:91:3e:9e:22:1b:de:07:3a: aa:5f:b4:94:73:0e:89:47:ab:ad:93:86:e1:0f:e2: 11:95:04:30:9a:27:c7:4d:92:fd:80:f9:50:a6:66: f3:bd:a1:f8:f7:8f:3e:ad:ee:95:04:df:72:8f:0b: 63:af:14:5e:f2:26:f2:c5:bf:0b:a2:ac:10:b6:23: 5b:95:d0:db:86:f5:48:1a:0b:9b:71:01:ac:bd:b0: 41:26:6d:fc:31:e9:b8:bd:7c:a4:d7:b8:39:21:c2: e0:40:d7:4b:99:1a:38:8d:c7:9c:7c:58:ac:52:54: 69:e4:79:94:50:42:2a:b5:8e:24:98:70:c2:6e:f8: 08:5c:ce:41:11:b7:e8:5e:68:57:20:15:d9:c9:35: ac:5c:2e:0e:1c:da:13:1a:82:34:28:09:bc:c4:a9: 6e:8a:29:df:03:1d:91:6f:49:ce:d2:a6:f6:3b:ed: ed:85:39:70:5e:dd:16:a7:df:93:06:c4:4c:6f:dc: b1:e4:02:84:95:84:b7:7b:d3:b7:5a:59:b4:8b:d4: 6e:d0:12:a9:29:ee:89:d0:7a:cd:06:e0:e7:9f:b2: 6c:c3:c1:53:fb:4b:65:f6:bb:6d:59:d8:82:5c:6b: 52:f1:3b:dc:d2:51:ab:3f:2e:d6:ab:ff:ec:c6:61: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:91:5A:8A:0C:24:F7:FA:F5:D0:6D:D1:CE:88:5C:79:6F:1F:0A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:36:58:48:89:d5:ea:32:7d:b4:e3:b0:fc:f8:df:d0:48:8b: 7a:3c:d1:c6:d8:97:c2:3d:6f:75:55:3b:0e:42:2b:f0:18:9e: e5:ce:05:da:ad:78:b6:e6:69:4b:d0:a9:9c:90:17:9d:e8:5f: 09:23:85:21:a6:22:8f:b1:31:19:80:15:eb:d6:eb:51:59:33: 49:2a:61:8c:c0:cf:76:a3:e3:07:5d:76:e2:16:b7:bd:27:27: e1:de:fc:98:95:ed:14:1e:5b:af:11:b4:a1:b3:c6:1c:a8:a4: 6b:9f:e8:17:a8:79:a5:3f:58:cb:a2:5b:53:35:92:34:e1:29: 70:3e:20:82:6b:7d:d5:b2:50:85:6d:66:12:6f:54:c6:54:15: ad:b2:d0:a2:3f:39:51:f8:53:34:05:b1:f0:ed:9b:30:0b:cf: 3e:e4:c4:3a:44:af:74:10:ba:91:41:00:a3:7e:36:6e:bd:b2: c3:f8:25:3f:6d:49:0b:f7:4a:23:10:57:ea:aa:3c:73:9f:d9: 60:74:98:a6:fb:74:a5:b4:2d:ee:02:a6:17:47:1a:3f:e2:a6: 87:f8:8d:53:00:51:40:d7:d6:52:b6:43:25:94:24:d5:3d:05: cb:f9:a6:2d:c4:5b:7f:66:0c:97:4e:25:5a:31:e1:2c:1a:08: c7:44:38:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkJ5qW78IZePz9hSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk YmY2OTA2MzgtM2M0OS00NGVjLWJmYmYtOGE1MDIzNDIxNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv42sJX7kT6eIhveBzqqX7SUcw6JR6utk4bh D+IRlQQwmifHTZL9gPlQpmbzvaH4948+re6VBN9yjwtjrxRe8ibyxb8LoqwQtiNb ldDbhvVIGgubcQGsvbBBJm38Mem4vXyk17g5IcLgQNdLmRo4jcecfFisUlRp5HmU UEIqtY4kmHDCbvgIXM5BEbfoXmhXIBXZyTWsXC4OHNoTGoI0KAm8xKluiinfAx2R b0nO0qb2O+3thTlwXt0Wp9+TBsRMb9yx5AKElYS3e9O3Wlm0i9Ru0BKpKe6J0HrN BuDnn7Jsw8FT+0tl9rttWdiCXGtS8Tvc0lGrPy7Wq//sxmE/GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMiRWooMJPf69dBt0c6IXHlvHwpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmExMWZmMDUtMGQxYy0z YmU4LTkzNjEtMmEwOTE0ODJjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHs2WEiJ1eoyfbTjsPz439BIi3o80cbYl8I9b3VVOw5CK/AYnuXO BdqteLbmaUvQqZyQF53oXwkjhSGmIo+xMRmAFevW61FZM0kqYYzAz3aj4wddduIW t70nJ+He/JiV7RQeW68RtKGzxhyopGuf6BeoeaU/WMuiW1M1kjThKXA+IIJrfdWy UIVtZhJvVMZUFa2y0KI/OVH4UzQFsfDtmzALzz7kxDpEr3QQupFBAKN+Nm69ssP4 JT9tSQv3SiMQV+qqPHOf2WB0mKb7dKW0Le4CphdHGj/ipof4jVMAUUDX1lK2QyWU JNU9Bcv5pi3EW39mDJdOJVox4SwaCMdEONw= -----END CERTIFICATE-----Generated at Sat Apr 12 02:03:28 2025 by rpki-client