$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa File: 21006f88-25cc-321a-bb06-e692d318c31d.roa (raw, json) Hash identifier: MRZJ+s1I6ecJvX3Bvo2olm+Ox6oYnHzMrvWqtrZhYw8= Subject key identifier: 19:20:CD:33:21:F5:91:CE:E3:0E:65:76:CF:61:29:6A:11:EF:4C:99 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F43285849DC8FC937986791D00B25CF00 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 399275 IP address blocks: 2602:fcc0:6666::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c9:37:98:67:91:d0:0b:25:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=222df4c8-7865-4c8d-a693-192cd4ac8851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:72:29:8a:b5:30:76:47:01:a4:cc:b5:d4: 42:dc:68:0e:9f:9b:dd:9c:a4:43:2d:30:e1:3e:ad: 4f:ce:48:23:ea:ef:c7:9c:f7:21:2a:5a:19:cf:cc: f2:23:42:7d:d8:a5:9c:99:04:a2:24:48:1f:71:c2: 61:f5:67:29:e4:81:59:1a:4d:27:5d:4a:53:0e:93: 25:ce:35:15:a4:e8:28:66:cf:29:b2:a7:61:0c:ad: a0:ab:97:5e:64:4e:77:38:a8:7b:1a:95:3a:a8:d9: 08:ab:de:15:9b:07:96:f4:30:3d:e4:9b:68:60:70: 47:8b:be:45:6f:50:a0:d7:ac:42:ec:bb:e0:63:e9: 0f:63:2a:fe:e5:68:7d:35:3a:61:d1:01:57:ba:b5: c7:d8:b1:0a:4c:46:0b:a6:c2:34:a9:1a:84:a6:80: d0:71:51:47:e8:9a:5f:e9:95:05:83:45:71:1b:60: a4:30:d9:c9:dd:f8:cb:84:bd:1a:fd:3f:19:1c:86: 79:05:9c:0d:7c:9b:79:b8:03:9a:0f:9e:88:ed:91: bc:c1:88:6c:ba:a5:ec:15:a2:84:2e:2c:c7:73:37: 25:b7:ce:0d:7d:16:cc:39:34:bb:70:c1:eb:3a:20: 6f:75:de:81:d8:19:ed:b7:fe:a8:b7:f3:4e:21:ef: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:CD:33:21:F5:91:CE:E3:0E:65:76:CF:61:29:6A:11:EF:4C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:6666::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:57:4f:f0:77:03:fc:80:56:9d:b7:7a:66:97:96:9f:5f:9b: b6:f7:7d:cc:79:a7:33:f7:c6:f2:3b:77:93:e8:a5:30:9d:50: a1:b7:b4:81:e0:35:14:6c:2d:97:fe:6d:64:ee:2c:60:46:97: a9:20:51:f7:15:d5:33:83:e0:c0:de:a5:d3:f4:36:d5:a8:70: bc:11:de:50:41:fc:a5:79:d4:06:a0:e9:65:29:29:b6:bc:d7: 0c:e6:38:17:c7:99:5b:15:e5:01:38:16:ce:82:ee:26:e7:7d: 4e:89:21:c3:d6:b7:1f:62:f5:3f:61:14:e3:80:74:43:21:3c: 73:58:98:e1:d2:af:8e:f1:cf:69:0a:0d:66:cf:17:c2:07:75: ff:bf:2d:44:71:04:3a:45:e2:9d:48:ff:83:cc:ac:e3:81:03: fa:ad:57:15:5b:af:b0:e7:82:1b:29:cc:f4:18:69:7e:e9:47: 1d:d5:92:b6:9b:76:9f:bd:0a:47:ba:af:87:c9:8b:b0:63:3f: fc:55:91:e2:7f:11:76:be:8a:c1:43:1d:01:c1:66:56:7a:b5: 01:19:5f:d1:ea:0f:13:b2:d8:d1:15:f4:00:a0:e2:9d:7f:4b: 24:34:39:fa:14:1f:cc:ed:16:cd:c5:72:7c:45:d5:ff:81:1e: f2:e7:d9:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj8k3mGeR0AslzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MjIyZGY0YzgtNzg2NS00YzhkLWE2OTMtMTkyY2Q0YWM4ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlchyKYq1MHZHAaTMtdRC3GgOn5vdnKRDLTDh Pq1Pzkgj6u/HnPchKloZz8zyI0J92KWcmQSiJEgfccJh9Wcp5IFZGk0nXUpTDpMl zjUVpOgoZs8psqdhDK2gq5deZE53OKh7GpU6qNkIq94VmweW9DA95JtoYHBHi75F b1Cg16xC7LvgY+kPYyr+5Wh9NTph0QFXurXH2LEKTEYLpsI0qRqEpoDQcVFH6Jpf 6ZUFg0VxG2CkMNnJ3fjLhL0a/T8ZHIZ5BZwNfJt5uAOaD56I7ZG8wYhsuqXsFaKE LizHczclt84NfRbMOTS7cMHrOiBvdd6B2Bntt/6ot/NOIe+R8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBkgzTMh9ZHO4w5lds9hKWoR70yZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMjEwMDZmODgtMjVjYy0z MjFhLWJiMDYtZTY5MmQzMThjMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wGZm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINXT/B3A/yAVp23emaXlp9fm7b3fcx5pzP3xvI7d5PopTCdUKG3 tIHgNRRsLZf+bWTuLGBGl6kgUfcV1TOD4MDepdP0NtWocLwR3lBB/KV51Aag6WUp Kba81wzmOBfHmVsV5QE4Fs6C7ibnfU6JIcPWtx9i9T9hFOOAdEMhPHNYmOHSr47x z2kKDWbPF8IHdf+/LURxBDpF4p1I/4PMrOOBA/qtVxVbr7DnghspzPQYaX7pRx3V krabdp+9Cke6r4fJi7BjP/xVkeJ/EXa+isFDHQHBZlZ6tQEZX9HqDxOy2NEV9ACg 4p1/SyQ0OfoUH8ztFs3FcnxF1f+BHvLn2T0= -----END CERTIFICATE-----Generated at Wed Jun 11 20:16:08 2025 by rpki-client