$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa File: 21006f88-25cc-321a-bb06-e692d318c31d.roa (raw, json) Hash identifier: 60PW71LRlOdqHQx4tn346TTF+GyfODcGQ+V2XBHxHEI= Subject key identifier: 2B:1B:02:E7:1D:7E:EA:DA:D5:50:49:58:D0:F7:A0:82:5E:E6:49:7A Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F43285848FD56C56DDBF3AB3074769580 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 399275 IP address blocks: 2602:fcc0:6666::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c5:6d:db:f3:ab:30:74:76:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=a53aab9a-d3a2-4aa8-8238-4a4e673f159b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:f1:ef:6a:e2:81:a1:88:6a:39:48:1f:3a: a6:6f:66:3e:34:9c:71:a9:ed:62:92:1c:e5:4f:ba: f6:0a:cf:34:41:00:65:70:37:89:fb:68:4d:24:59: 8b:7d:82:a4:8f:dc:c5:84:99:62:9e:b9:2f:f0:f3: 58:e8:a6:ad:f3:83:6a:f2:d1:3e:ee:6f:df:8d:9d: a4:55:31:88:27:27:d3:b8:59:79:5e:cd:ad:84:fc: 52:77:9a:cc:fe:d9:93:60:2c:ac:f3:d6:46:b2:3b: 8d:94:2d:48:f3:a2:fc:bb:eb:a3:8b:d8:22:48:50: 82:34:66:59:cc:97:e2:66:b9:ff:4c:a9:9d:96:e6: 9c:08:8a:f2:e6:05:7f:9c:39:44:a7:24:b1:bd:9e: 4b:2d:26:59:67:72:cb:27:44:83:c8:89:42:d2:19: 1e:5d:cd:fd:d1:a8:85:1e:29:23:91:52:40:ee:08: b5:69:64:07:69:1b:dd:50:91:78:8b:20:ee:40:29: 38:3e:1d:bc:60:1d:8d:d0:f8:50:c0:e3:f9:a6:0f: c8:63:a0:89:17:57:48:2b:9c:98:e3:57:61:03:59: 2e:33:c0:64:11:b3:0f:50:db:9c:fa:cd:98:65:93: f1:9a:1b:0f:b4:6d:ee:1c:04:6a:5a:03:60:56:44: b8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1B:02:E7:1D:7E:EA:DA:D5:50:49:58:D0:F7:A0:82:5E:E6:49:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:6666::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a4:d5:e4:18:78:3f:c9:41:ef:1e:4d:f2:ee:ef:fe:14:db: 73:d6:2b:86:6f:06:1d:2e:8b:07:0c:eb:b1:26:0c:32:0c:46: af:d6:0e:25:d2:b9:74:d3:40:c8:80:d9:72:15:74:25:cc:5a: 5c:b1:99:bc:4f:81:f1:23:7b:c9:b3:4f:a3:6b:c8:35:3a:5a: a3:02:4a:62:7e:2a:52:8c:e3:36:91:d2:39:88:01:16:a9:cc: 95:e6:96:5f:14:bd:d0:eb:15:08:1b:1c:1b:64:f8:8e:b0:46: 82:80:7d:a7:f7:e9:33:6b:7c:5e:af:77:32:69:72:0e:79:94: 60:f0:0a:02:f3:7e:5f:e8:25:af:5f:23:ff:8a:e7:f1:10:4a: 87:82:e2:28:92:47:a5:c9:68:2c:c4:27:df:c6:0a:d4:c3:da: 0c:8b:6f:12:85:44:cf:b3:35:de:ca:a6:48:0a:a8:db:15:9b: c5:fb:e3:90:90:f9:34:a9:31:74:ee:c4:2f:58:71:12:af:49: 85:18:e7:e5:c2:32:2a:ee:38:d0:23:62:e5:7b:6f:3f:31:c7: 7d:f0:34:c8:41:0d:5b:7b:12:48:a6:69:c5:c5:0f:eb:a7:e8: be:8e:55:8c:01:6a:c3:2d:ad:48:ed:9e:fb:95:f1:34:a6:0a: 5a:94:51:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VsVt2/OrMHR2lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTUzYWFiOWEtZDNhMi00YWE4LTgyMzgtNGE0ZTY3M2YxNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbvx72rigaGIajlIHzqmb2Y+NJxxqe1ikhzl T7r2Cs80QQBlcDeJ+2hNJFmLfYKkj9zFhJlinrkv8PNY6Kat84Nq8tE+7m/fjZ2k VTGIJyfTuFl5Xs2thPxSd5rM/tmTYCys89ZGsjuNlC1I86L8u+uji9giSFCCNGZZ zJfiZrn/TKmdluacCIry5gV/nDlEpySxvZ5LLSZZZ3LLJ0SDyIlC0hkeXc390aiF HikjkVJA7gi1aWQHaRvdUJF4iyDuQCk4Ph28YB2N0PhQwOP5pg/IY6CJF1dIK5yY 41dhA1kuM8BkEbMPUNuc+s2YZZPxmhsPtG3uHARqWgNgVkS4AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCsbAucdfura1VBJWND3oIJe5kl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMjEwMDZmODgtMjVjYy0z MjFhLWJiMDYtZTY5MmQzMThjMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wGZm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKk1eQYeD/JQe8eTfLu7/4U23PWK4ZvBh0uiwcM67EmDDIMRq/W DiXSuXTTQMiA2XIVdCXMWlyxmbxPgfEje8mzT6NryDU6WqMCSmJ+KlKM4zaR0jmI ARapzJXmll8UvdDrFQgbHBtk+I6wRoKAfaf36TNrfF6vdzJpcg55lGDwCgLzfl/o Ja9fI/+K5/EQSoeC4iiSR6XJaCzEJ9/GCtTD2gyLbxKFRM+zNd7KpkgKqNsVm8X7 45CQ+TSpMXTuxC9YcRKvSYUY5+XCMiruONAjYuV7bz8xx33wNMhBDVt7EkimacXF D+un6L6OVYwBasMtrUjtnvuV8TSmClqUUXI= -----END CERTIFICATE-----Generated at Sat Apr 12 18:49:26 2025 by rpki-client