$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa File: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json) Hash identifier: UtoXe4ugFYSCVmHRn5I5k+tnHMh/3Dwg9SbQ4Q0V3n8= Subject key identifier: 75:D4:8A:5E:61:FE:56:5A:E9:72:79:CE:84:EA:75:0B:EA:30:65:F8 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F43285849E91FA7444B546911177792C0 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 0 IP address blocks: 2001:504:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a7:44:4b:54:69:11:17:77:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=58df6a32-efdb-4e8d-bb76-908f13667fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:c4:d0:b1:51:e3:29:88:61:ff:e2:a3:d4: eb:39:9c:2d:0c:4a:d6:17:d4:d5:d4:1b:c9:b9:79: 8b:f9:6f:f2:05:f6:29:f1:93:6d:77:81:7f:78:d4: 89:f0:e2:16:9e:7e:9d:fe:67:10:2b:e2:1e:bb:b5: de:17:93:bf:2e:8a:62:53:13:96:cb:44:13:d1:cd: 51:9d:43:8b:48:ae:b7:47:64:1a:39:25:42:99:ae: e0:07:37:89:48:33:72:5a:11:cb:9f:7d:fb:a4:29: 54:1f:c9:e1:7a:0c:ad:2e:78:ba:fc:6f:40:4b:30: 46:ab:bb:8b:24:2e:16:06:c0:a1:5d:6d:96:fd:da: 45:ab:04:db:21:0c:aa:a9:f5:18:67:3d:e7:3c:65: 90:61:c9:02:30:ab:89:fb:83:5f:e3:b0:e8:a1:72: 8b:00:a3:c7:b2:2a:48:a9:37:ed:a7:aa:70:4d:af: 86:78:9f:da:ae:7c:9c:a4:ae:0b:e1:0b:60:ba:81: 82:c6:f9:a5:ef:d2:1a:28:95:2d:98:80:5b:a6:5b: ec:96:3c:a9:d7:27:9f:eb:f6:bb:43:13:a3:b9:7f: 41:64:11:4a:c0:65:21:b6:5b:5b:36:e8:94:bb:c5: 45:ee:a6:53:1f:b3:f1:69:01:f0:a3:04:16:04:5f: c6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:8A:5E:61:FE:56:5A:E9:72:79:CE:84:EA:75:0B:EA:30:65:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4a:4f:c7:ec:e6:ea:93:ad:93:88:99:5e:d1:c7:0a:85:67: 87:ad:7d:0c:6c:7b:f9:b7:f6:10:2d:ab:10:65:cf:8f:9c:e5: a7:77:8c:15:a0:c8:11:db:80:95:f4:55:2d:13:1c:be:12:54: 68:63:2c:74:29:98:5f:c6:7d:29:7c:f6:6f:a6:e4:6c:1e:27: 40:c7:7f:5a:9d:1d:27:68:5d:ef:e1:37:04:b2:76:12:c1:59: eb:8f:cb:98:bb:c1:aa:e7:0b:dd:a6:0e:72:b7:9b:a8:35:b5: a6:b3:3b:be:dc:c9:c0:2e:aa:9e:0a:ea:77:58:d4:f8:50:19: ab:10:57:be:a1:1a:47:b6:1d:33:1c:1f:0d:f3:21:35:15:63: e1:62:d3:df:fc:93:6f:d7:35:6d:4f:56:ca:3a:1d:6c:10:90: 63:fe:b4:79:fe:00:3f:77:f3:52:b3:c8:8e:6e:60:99:ac:ec: f0:2f:70:d9:c9:0c:3a:47:ca:7d:43:81:87:a3:cd:cf:3b:d6: 4d:9d:fe:bb:a8:d2:9d:50:ba:9d:31:43:b6:eb:2d:c0:20:4a: 1c:ee:a2:55:7b:01:ee:51:54:2c:29:e2:40:2d:cf:0f:be:fb: c1:b7:88:7c:02:e9:42:de:0a:b8:4f:b1:60:be:c7:d5:5d:67: 6b:8d:8c:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnpH6dES1RpERd3ksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk NThkZjZhMzItZWZkYi00ZThkLWJiNzYtOTA4ZjEzNjY3ZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLbE0LFR4ymIYf/io9TrOZwtDErWF9TV1BvJ uXmL+W/yBfYp8ZNtd4F/eNSJ8OIWnn6d/mcQK+Ieu7XeF5O/LopiUxOWy0QT0c1R nUOLSK63R2QaOSVCma7gBzeJSDNyWhHLn337pClUH8nhegytLni6/G9ASzBGq7uL JC4WBsChXW2W/dpFqwTbIQyqqfUYZz3nPGWQYckCMKuJ+4Nf47DooXKLAKPHsipI qTftp6pwTa+GeJ/arnycpK4L4QtguoGCxvml79IaKJUtmIBbplvsljyp1yef6/a7 QxOjuX9BZBFKwGUhtltbNuiUu8VF7qZTH7PxaQHwowQWBF/GpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHXUil5h/lZa6XJ5zoTqdQvqMGX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmExMWZmMDUtMGQxYy0z YmU4LTkzNjEtMmEwOTE0ODJjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGdKT8fs5uqTrZOImV7RxwqFZ4etfQxse/m39hAtqxBlz4+c5ad3 jBWgyBHbgJX0VS0THL4SVGhjLHQpmF/GfSl89m+m5GweJ0DHf1qdHSdoXe/hNwSy dhLBWeuPy5i7warnC92mDnK3m6g1taazO77cycAuqp4K6ndY1PhQGasQV76hGke2 HTMcHw3zITUVY+Fi09/8k2/XNW1PVso6HWwQkGP+tHn+AD9381KzyI5uYJms7PAv cNnJDDpHyn1DgYejzc871k2d/ruo0p1Qup0xQ7brLcAgShzuolV7Ae5RVCwp4kAt zw+++8G3iHwC6ULeCrhPsWC+x9VdZ2uNjFs= -----END CERTIFICATE-----Generated at Sun Jun 1 03:11:37 2025 by rpki-client