$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa File: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json) Hash identifier: slbWcC4RHqufxlXIc19XM128WP+s+G1Qp0JZt+W7cZQ= Subject key identifier: 90:E0:03:D2:7F:D2:CF:4B:6C:6E:DD:12:BD:6C:99:EC:CB:3E:D8:C3 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F432858458B088E3AB30B030C482B5E20 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa Signing time: Sun 14 Apr 2024 13:00:34 +0000 ROA not before: Sun 14 Apr 2024 13:00:34 +0000 ROA not after: Sat 13 Jul 2024 13:00:34 +0000 asID: 0 IP address blocks: 2001:504:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8b:08:8e:3a:b3:0b:03:0c:48:2b:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Apr 14 13:00:34 2024 GMT Not After : Jul 13 13:00:34 2024 GMT Subject: CN=8b2006a9-53b4-4e60-ba6a-deaf4c3147ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:1f:32:f7:51:d4:7e:04:3a:b8:4d:14:b2: 7d:a0:49:f1:7d:e7:36:45:35:b3:c5:2c:f2:88:9b: 3b:10:a3:db:54:6a:70:d2:4c:9d:39:ec:f5:b4:5a: 48:4d:a5:3f:5d:84:e2:c2:39:d1:50:5d:30:e3:30: a1:4b:6a:4b:38:4e:5e:74:91:94:79:a8:92:a2:1a: dd:40:06:a1:77:c5:ae:56:b7:cb:ec:36:55:bf:93: f1:d8:d5:8c:3a:2f:2e:97:86:5b:44:9f:4b:61:cc: 65:a7:95:42:d8:a4:24:45:02:1a:c7:52:2c:e8:bd: e4:bd:e4:d8:9d:a9:2f:c7:ad:21:a8:90:4b:2c:b7: 50:3d:f9:ac:f7:a5:81:31:fb:74:1f:bb:15:3c:31: c5:85:c8:ba:34:a1:eb:3f:17:8e:76:ad:64:66:7a: 39:b3:b8:54:3d:fb:60:7b:78:d5:9b:c4:76:7d:8d: d2:3f:68:fa:05:65:02:54:1e:c9:8d:b5:83:0c:96: 8f:89:74:10:a3:53:8c:bd:15:ab:8a:eb:1a:d8:b5: 81:7f:c7:8e:11:b7:fe:90:f4:a7:0e:81:51:d9:2f: a0:aa:1c:a1:0f:e6:74:cb:a4:09:6a:e7:0c:0d:6f: 55:dc:04:6c:42:f0:2c:c8:db:3f:47:1a:30:f1:27: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E0:03:D2:7F:D2:CF:4B:6C:6E:DD:12:BD:6C:99:EC:CB:3E:D8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ab:a1:e3:72:ae:aa:02:69:21:68:cd:9d:12:20:f3:32:1d: 04:c9:40:83:bf:a5:80:f9:d8:2b:f4:b7:26:bd:02:b6:de:fa: bf:97:d3:ab:bf:09:98:fd:8f:41:c2:ec:38:fa:ca:28:8a:64: b0:53:34:13:8a:b7:5f:81:d7:7e:41:a0:a2:a0:ef:14:cb:b2: 0a:11:73:16:cf:e5:1b:50:e9:a2:da:27:13:0b:5e:b3:95:dc: cf:04:7d:c3:62:de:05:ea:4e:32:d6:02:ce:d6:f0:ae:dd:a7: 5a:c7:a3:c9:e5:f0:2f:c7:d1:82:cf:76:1f:9a:00:73:9a:86: cd:4e:a6:bf:a4:69:c6:5f:8a:d0:5d:cd:12:54:b8:44:ac:dc: 82:49:8b:c8:11:a5:1f:19:44:5e:2b:9b:7b:46:ac:06:de:67: a6:bd:42:59:af:ed:96:f5:a9:ef:6f:90:8c:a6:e5:ae:d3:38: 57:72:62:b0:8f:ed:71:c1:fa:38:e2:ac:f5:b6:b0:68:f9:8e: 59:be:cb:92:57:f8:6c:cf:b2:d2:2b:04:d9:76:0a:b4:93:95: 6f:ef:04:c2:f5:3e:cb:db:05:3a:33:52:d5:d4:18:e6:60:71: 26:04:8e:63:a2:d0:a0:f8:ed:6a:b2:0f:ed:a5:bf:bd:a4:97: 44:27:b7:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWLCI46swsDDEgrXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk OGIyMDA2YTktNTNiNC00ZTYwLWJhNmEtZGVhZjRjMzE0N2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEsfMvdR1H4EOrhNFLJ9oEnxfec2RTWzxSzy iJs7EKPbVGpw0kydOez1tFpITaU/XYTiwjnRUF0w4zChS2pLOE5edJGUeaiSohrd QAahd8WuVrfL7DZVv5Px2NWMOi8ul4ZbRJ9LYcxlp5VC2KQkRQIax1Is6L3kveTY nakvx60hqJBLLLdQPfms96WBMft0H7sVPDHFhci6NKHrPxeOdq1kZno5s7hUPftg e3jVm8R2fY3SP2j6BWUCVB7JjbWDDJaPiXQQo1OMvRWriusa2LWBf8eOEbf+kPSn DoFR2S+gqhyhD+Z0y6QJaucMDW9V3ARsQvAsyNs/Rxow8SelMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJDgA9J/0s9LbG7dEr1smezLPtjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhNzU4NWYtZDUxYy0z MGRhLWEwZmItMzZkOTQ2MzY1NGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASroeNyrqoCaSFozZ0SIPMyHQTJQIO/pYD52Cv0tya9Arbe+r+X 06u/CZj9j0HC7Dj6yiiKZLBTNBOKt1+B135BoKKg7xTLsgoRcxbP5RtQ6aLaJxML XrOV3M8EfcNi3gXqTjLWAs7W8K7dp1rHo8nl8C/H0YLPdh+aAHOahs1Opr+kacZf itBdzRJUuESs3IJJi8gRpR8ZRF4rm3tGrAbeZ6a9Qlmv7Zb1qe9vkIym5a7TOFdy YrCP7XHB+jjirPW2sGj5jlm+y5JX+GzPstIrBNl2CrSTlW/vBML1PsvbBTozUtXU GOZgcSYEjmOi0KD47WqyD+2lv72kl0Qntzw= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:54 2024 by rpki-client on console-fra.rpki-client.org