$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa File: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json) Hash identifier: eVzhK/UfUS1TfDlIyTz9t8o+f5P5s4cZMx3Nxjn0SCg= Subject key identifier: 7C:E7:5C:47:C1:0E:80:E7:D4:3F:1E:3D:DD:C7:B1:44:95:6A:2E:2F Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584909E6A59EAAB5D00C03D07D00 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 0 IP address blocks: 2001:504:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a5:9e:aa:b5:d0:0c:03:d0:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=12e43441-6e1c-4d2a-9ec5-2a29df278cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1f:ab:f7:5d:3a:51:e8:fa:2b:e0:3e:21:c5: ad:c9:49:41:e3:cd:8a:d7:ab:1d:db:4f:f8:93:75: e7:37:66:7c:de:10:98:89:54:de:5a:07:a9:09:79: 73:83:34:4b:47:f7:79:5a:3f:78:e2:27:67:ba:3a: e9:14:60:48:fb:59:ef:08:2b:0a:d5:4e:1f:d1:52: 1b:91:58:7f:f5:bb:eb:37:b7:0b:e1:bf:34:89:6b: 0b:8f:58:3a:ac:21:62:b5:1d:61:ba:31:b0:e3:93: 02:ed:e1:05:2f:9d:a1:af:10:c7:51:7a:5d:13:8a: e9:1d:a3:4e:bc:ac:f5:33:04:bf:d5:83:45:ff:56: e7:f1:b1:39:d4:3a:a5:9b:f5:16:26:84:a8:8e:3e: 20:48:f7:33:a5:b5:1d:fe:bd:68:98:7e:b2:42:41: a3:f7:1c:5c:25:33:95:16:d9:6e:ca:79:0d:0f:f2: 10:88:16:da:04:d6:17:2b:87:96:4e:62:7e:39:cc: d4:1c:12:62:4a:b1:53:9f:34:92:d6:fb:eb:dc:1f: f2:77:52:d7:84:cc:55:23:a6:cd:97:5f:53:4b:df: 5b:8c:e1:17:e1:01:b1:e7:78:99:b4:16:5e:5c:82: 56:66:12:8a:13:e1:2f:1e:df:85:21:27:d3:77:31: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E7:5C:47:C1:0E:80:E7:D4:3F:1E:3D:DD:C7:B1:44:95:6A:2E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4f:93:d0:a4:b5:8e:7c:34:19:49:81:16:40:9c:5e:86:7b: ec:48:d0:e3:2a:d7:54:28:9c:13:da:33:68:02:28:f0:a9:3d: 3a:86:fa:a2:13:60:51:05:e0:8c:b0:6e:e1:5f:d3:0c:9a:05: c1:7e:e5:b0:c3:f3:e5:de:6e:ce:40:4d:09:78:58:71:64:8a: 95:1e:d3:e3:89:7f:5c:42:f5:1a:53:cd:e8:b2:ae:16:95:27: 27:65:39:44:38:2f:d3:7f:02:de:d8:69:91:22:5f:cc:d0:f7: 0d:b7:b1:f1:b7:d7:07:41:c1:42:4b:15:55:3a:e3:cb:31:3c: 5f:29:6e:d3:45:3f:9b:ad:9c:4a:e9:70:b8:40:da:d4:77:2e: 86:82:9d:97:f3:27:11:f9:63:18:e7:86:59:c9:a9:1b:b6:45: 14:08:e3:83:14:56:f7:50:36:7f:e4:fc:b5:17:6e:79:6c:94: ab:de:98:34:a8:4a:bd:54:b6:11:a5:33:fb:57:a2:f9:9d:51: 8d:06:8f:3f:24:56:4b:b3:f5:de:76:ec:e5:6e:a0:fd:a9:ff: f0:0e:4c:d5:c2:81:3d:4e:48:e7:2d:72:40:c9:7e:c1:03:3c: 91:c0:c3:69:c5:25:39:06:b4:92:5e:e1:29:d3:c8:95:cc:f0: 5f:7a:20:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkJ5qWeqrXQDAPQfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MTJlNDM0NDEtNmUxYy00ZDJhLTllYzUtMmEyOWRmMjc4Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh+r9106Uej6K+A+IcWtyUlB482K16sd20/4 k3XnN2Z83hCYiVTeWgepCXlzgzRLR/d5Wj944idnujrpFGBI+1nvCCsK1U4f0VIb kVh/9bvrN7cL4b80iWsLj1g6rCFitR1hujGw45MC7eEFL52hrxDHUXpdE4rpHaNO vKz1MwS/1YNF/1bn8bE51Dqlm/UWJoSojj4gSPczpbUd/r1omH6yQkGj9xxcJTOV FtluynkND/IQiBbaBNYXK4eWTmJ+OczUHBJiSrFTnzSS1vvr3B/yd1LXhMxVI6bN l19TS99bjOEX4QGx53iZtBZeXIJWZhKKE+EvHt+FISfTdzH2BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHznXEfBDoDn1D8ePd3HsUSVai4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhNzU4NWYtZDUxYy0z MGRhLWEwZmItMzZkOTQ2MzY1NGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVPk9CktY58NBlJgRZAnF6Ge+xI0OMq11QonBPaM2gCKPCpPTqG +qITYFEF4IywbuFf0wyaBcF+5bDD8+Xebs5ATQl4WHFkipUe0+OJf1xC9RpTzeiy rhaVJydlOUQ4L9N/At7YaZEiX8zQ9w23sfG31wdBwUJLFVU648sxPF8pbtNFP5ut nErpcLhA2tR3LoaCnZfzJxH5YxjnhlnJqRu2RRQI44MUVvdQNn/k/LUXbnlslKve mDSoSr1UthGlM/tXovmdUY0Gjz8kVkuz9d527OVuoP2p//AOTNXCgT1OSOctckDJ fsEDPJHAw2nFJTkGtJJe4SnTyJXM8F96IAM= -----END CERTIFICATE-----Generated at Sun May 11 20:31:29 2025 by rpki-client