$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa File: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json) Hash identifier: OA02WKCiCPeFhY8jGuL2cglDmrskTsDToHEgPSFqr+s= Subject key identifier: 3E:2F:E4:0E:14:E1:20:40:EB:B6:4C:94:0C:24:F5:B8:3E:9F:28:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F43285849E91FA7233BCC9E24D9E90900 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 0 IP address blocks: 2001:504:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a7:23:3b:cc:9e:24:d9:e9:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=39a7be25-c4d0-4eab-ac1c-c2f157bae71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:77:4c:f5:4c:62:d7:4f:8f:cd:72:e2:fe: 59:d8:bd:f0:b8:6d:98:ef:6b:90:b9:78:00:58:74: 93:eb:10:59:51:6e:57:66:af:bf:72:4d:35:7f:66: 23:6e:2c:ea:fc:70:8b:63:c6:48:71:61:65:2e:92: 69:4c:5d:d7:8a:50:37:96:04:09:a6:9b:17:8d:50: 7b:b5:13:57:91:e6:06:6e:d7:ab:e6:9e:b1:1a:5f: 68:c9:95:f8:65:d8:3a:1b:2b:2c:20:43:77:a0:e7: 80:73:56:6e:ca:73:5d:64:2e:17:9f:5f:e9:cb:dd: c0:09:a6:56:eb:cb:d8:61:58:82:2b:73:0d:ca:86: 4e:61:a7:26:e7:c4:5b:3f:69:7e:43:76:aa:8e:25: 24:8e:03:ad:ce:6d:ab:a8:b8:bb:36:a4:b1:17:96: 2e:13:39:72:43:37:b1:d2:bd:53:ab:d2:c8:23:93: c4:f3:59:15:94:b2:61:6a:7f:5e:f1:9b:5e:a2:21: b9:6a:56:44:2a:54:22:db:ab:89:dc:db:f6:cd:a0: 26:70:bd:49:57:24:82:cd:2a:7c:79:58:e3:94:c8: 86:9b:a2:51:ce:21:64:bf:6a:5e:b9:a6:64:e3:5d: ed:6a:87:ad:5e:80:5b:ae:ef:f2:15:e9:42:0f:d3: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2F:E4:0E:14:E1:20:40:EB:B6:4C:94:0C:24:F5:B8:3E:9F:28:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:06:f6:36:9e:a3:b8:e3:41:d3:e8:53:43:fc:ae:0d:67:6b: 51:af:96:e3:b2:fa:77:2c:84:85:9d:e1:84:3a:4c:30:3b:ee: e7:ac:da:b0:f5:d5:a9:40:e3:10:58:41:91:ab:75:69:c9:79: fe:03:21:e0:f9:dd:5e:88:09:f9:14:ac:ad:b2:5e:12:dc:63: 21:d7:a8:98:8f:78:49:34:7e:f3:30:4c:04:88:9f:06:a4:b0: 75:19:60:0f:35:cc:95:7c:94:17:49:9b:c9:19:ba:34:3e:01: d0:67:a4:1f:3b:f6:39:d3:1e:f1:6c:2b:77:87:72:10:21:fa: 5d:dc:0e:89:af:9c:94:fa:5d:fa:81:bd:f8:be:ae:89:88:9b: 29:3c:07:fc:a2:2f:06:b7:cd:66:ce:39:41:aa:2f:b2:eb:d3: 24:e0:c6:1d:32:08:d0:be:08:6e:8c:ee:f5:e6:4c:c3:84:b3: d9:ad:86:aa:64:9c:9e:28:bd:69:d4:8d:a7:b3:3a:c8:5d:1e: 38:a8:19:0e:c8:86:ac:aa:21:1b:e0:35:ec:02:3d:71:42:3c: f0:15:d9:11:50:bd:4d:54:ac:22:fa:4a:63:43:b3:44:2e:42: a2:42:4f:2f:d1:27:6b:14:e5:1b:61:b8:1e:3e:d8:5b:cc:97: 98:7e:2b:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnpH6cjO8yeJNnpCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk MzlhN2JlMjUtYzRkMC00ZWFiLWFjMWMtYzJmMTU3YmFlNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE93TPVMYtdPj81y4v5Z2L3wuG2Y72uQuXgA WHST6xBZUW5XZq+/ck01f2Yjbizq/HCLY8ZIcWFlLpJpTF3XilA3lgQJppsXjVB7 tRNXkeYGbter5p6xGl9oyZX4Zdg6GyssIEN3oOeAc1ZuynNdZC4Xn1/py93ACaZW 68vYYViCK3MNyoZOYacm58RbP2l+Q3aqjiUkjgOtzm2rqLi7NqSxF5YuEzlyQzex 0r1Tq9LII5PE81kVlLJhan9e8ZteoiG5alZEKlQi26uJ3Nv2zaAmcL1JVySCzSp8 eVjjlMiGm6JRziFkv2peuaZk413taoetXoBbru/yFelCD9Ng4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4v5A4U4SBA67ZMlAwk9bg+nyjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhNzU4NWYtZDUxYy0z MGRhLWEwZmItMzZkOTQ2MzY1NGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACIG9jaeo7jjQdPoU0P8rg1na1GvluOy+ncshIWd4YQ6TDA77ues 2rD11alA4xBYQZGrdWnJef4DIeD53V6ICfkUrK2yXhLcYyHXqJiPeEk0fvMwTASI nwaksHUZYA81zJV8lBdJm8kZujQ+AdBnpB879jnTHvFsK3eHchAh+l3cDomvnJT6 XfqBvfi+romImyk8B/yiLwa3zWbOOUGqL7Lr0yTgxh0yCNC+CG6M7vXmTMOEs9mt hqpknJ4ovWnUjaezOshdHjioGQ7IhqyqIRvgNewCPXFCPPAV2RFQvU1UrCL6SmND s0QuQqJCTy/RJ2sU5RthuB4+2FvMl5h+Ky0= -----END CERTIFICATE-----Generated at Sun Jun 1 03:10:41 2025 by rpki-client