$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa File: 4af36c30-68b2-3899-961c-a1d8cbaed381.roa (raw, json) Hash identifier: u76Ou9Dv99tBE+L5yIkWmUldyJdtLoyGFPBygnvKAxc= Subject key identifier: A0:A4:0F:B4:88:15:34:E9:ED:89:4D:35:8A:A8:F6:DD:9B:72:03:69 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F43285848AF2B87233D302F3C2E4AA780 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 399275 IP address blocks: 2602:fcc0:5555::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:87:23:3d:30:2f:3c:2e:4a:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=dd10ae24-2451-49b1-a9e4-990ddb08609f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9f:12:fe:e5:4d:6f:ee:45:9a:e9:e1:11:08: 5a:3f:47:83:53:31:fc:87:34:74:38:45:75:83:ce: 3b:21:67:ac:57:f0:5f:4d:90:a9:56:a7:15:9c:fc: be:bc:2f:6a:cb:3d:49:ac:97:e3:fa:f2:7d:72:2b: 68:9c:1a:ca:c5:b0:23:f1:64:8e:fe:cb:9e:07:00: 77:ff:f8:99:47:67:de:e6:92:96:3c:bb:1a:27:a1: f8:5e:15:9c:cf:c5:2b:e5:89:15:33:63:66:a7:5f: 58:18:0d:fa:c7:7b:d0:87:dd:e7:d4:70:e4:31:67: fb:ba:57:59:12:e7:f7:e6:15:f8:21:10:d9:1e:3d: d3:d3:cf:72:26:31:f0:39:a0:e4:3c:f8:de:4d:ce: 2a:a7:7d:dc:2d:0d:61:da:be:a3:59:37:57:c3:01: e7:62:6c:d2:61:d4:9b:0c:f9:b8:58:82:05:55:bf: f1:e8:2e:97:d4:c5:94:7c:8c:92:9a:82:8d:62:a0: 19:81:7a:b0:1b:e7:b5:94:ee:64:24:d7:5a:cd:09: f1:49:19:e2:b3:d5:ed:12:e4:1f:f1:5e:86:9b:8b: 7b:d9:58:bc:5c:43:06:58:eb:76:8b:49:f9:bd:40: e1:7c:40:0d:ac:39:3b:ce:01:26:3e:d3:2e:d0:90: f8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:0F:B4:88:15:34:E9:ED:89:4D:35:8A:A8:F6:DD:9B:72:03:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:5555::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:20:72:2a:ce:87:71:78:6a:f1:94:a9:33:8e:ad:af:5b:1d: 9e:be:7a:e5:4e:c0:84:73:76:95:19:2f:84:44:b4:c7:94:0d: 58:67:1a:b2:75:75:e6:73:57:7e:03:f4:2e:3d:d5:fd:2b:d2: 88:d1:49:b0:65:51:74:aa:44:97:d8:77:ae:13:e6:68:ff:79: a0:76:e8:90:37:3d:bd:2e:67:ef:ea:db:5c:5b:64:93:ca:dd: 24:1b:08:2a:a2:54:13:d1:7f:ef:0e:f2:12:ca:48:18:97:80: 77:1d:d0:82:ce:91:86:88:99:1c:92:a8:e7:90:66:60:c1:b0: 60:84:56:4a:88:a5:19:96:7c:3c:45:68:c6:41:1f:3a:68:70: e1:d0:5f:c0:87:64:b9:a8:1d:8e:8e:34:51:8c:6c:2f:bf:e9: 19:2b:d4:ca:7b:4e:21:b8:f4:c6:f7:87:c1:c7:58:c0:88:43: 4e:12:ba:cf:de:cc:c3:77:00:6e:70:a3:7e:8a:59:06:df:f1: ee:cd:ee:9f:f5:43:cb:4e:c7:dc:31:7d:9c:76:8d:8c:2e:80: 17:fc:5a:d9:46:5c:f4:c3:10:e8:62:d9:76:a8:1e:b9:74:cd: 9d:af:0f:06:9f:5f:df:d1:81:57:a4:47:1b:a0:cd:fc:6e:c2: d7:41:e1:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEivK4cjPTAvPC5Kp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGQxMGFlMjQtMjQ1MS00OWIxLWE5ZTQtOTkwZGRiMDg2MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ8S/uVNb+5FmunhEQhaP0eDUzH8hzR0OEV1 g847IWesV/BfTZCpVqcVnPy+vC9qyz1JrJfj+vJ9citonBrKxbAj8WSO/sueBwB3 //iZR2fe5pKWPLsaJ6H4XhWcz8Ur5YkVM2Nmp19YGA36x3vQh93n1HDkMWf7uldZ Euf35hX4IRDZHj3T089yJjHwOaDkPPjeTc4qp33cLQ1h2r6jWTdXwwHnYmzSYdSb DPm4WIIFVb/x6C6X1MWUfIySmoKNYqAZgXqwG+e1lO5kJNdazQnxSRnis9XtEuQf 8V6Gm4t72Vi8XEMGWOt2i0n5vUDhfEANrDk7zgEmPtMu0JD4/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKCkD7SIFTTp7YlNNYqo9t2bcgNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvNGFmMzZjMzAtNjhiMi0z ODk5LTk2MWMtYTFkOGNiYWVkMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wFVV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ0gcirOh3F4avGUqTOOra9bHZ6+euVOwIRzdpUZL4REtMeUDVhn GrJ1deZzV34D9C491f0r0ojRSbBlUXSqRJfYd64T5mj/eaB26JA3Pb0uZ+/q21xb ZJPK3SQbCCqiVBPRf+8O8hLKSBiXgHcd0ILOkYaImRySqOeQZmDBsGCEVkqIpRmW fDxFaMZBHzpocOHQX8CHZLmoHY6ONFGMbC+/6Rkr1Mp7TiG49Mb3h8HHWMCIQ04S us/ezMN3AG5wo36KWQbf8e7N7p/1Q8tOx9wxfZx2jYwugBf8WtlGXPTDEOhi2Xao Hrl0zZ2vDwafX9/RgVekRxugzfxuwtdB4a8= -----END CERTIFICATE-----Generated at Sat Apr 12 18:32:17 2025 by rpki-client