$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa File: a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa (raw, json) Hash identifier: 72zkCIh1ipvKYAwmZLe+8CNj/1nSa+t3c5x71VLLSnA= Subject key identifier: 0C:87:61:82:F1:1C:31:28:96:02:6A:43:92:59:FF:99:9C:DF:7B:2C Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584961B998DD71EF852E5B7AFB80 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 399275 IP address blocks: 2602:fcc0:2222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:98:dd:71:ef:85:2e:5b:7a:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=ff9278a8-3150-4ffb-81c0-f4b672af54e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:bd:56:9b:9a:8b:e0:83:f0:1d:a0:89:4e: 1a:e1:f2:ef:15:56:d0:70:5e:93:92:bc:ea:b9:ba: f4:5e:a6:19:88:cd:1c:05:e6:a2:f3:a6:2c:8f:55: c8:6f:c9:ea:39:90:f2:4f:5e:24:04:de:2d:8b:89: ba:5e:ae:2e:ab:2c:62:54:6c:1c:8b:b7:4e:61:70: 19:87:a4:e2:97:26:26:d2:a7:85:c8:18:ae:e1:16: a4:2b:37:44:8a:62:49:82:1a:eb:e8:06:61:f3:b9: 73:02:29:e8:9f:e6:be:92:e3:a4:7e:ac:be:ad:47: 25:8b:f8:e3:49:60:17:bb:7e:8a:90:7f:6b:5c:2b: 1e:b2:d3:a0:e4:d9:cf:fb:2a:3c:54:a8:34:85:2c: d8:7d:df:09:d3:40:a1:85:21:f5:46:5e:40:7d:fd: 89:0e:3d:f1:c2:75:fc:b5:25:0f:9d:42:84:36:70: f1:1d:fb:ee:0d:92:fc:47:bf:4a:84:3c:3d:28:ad: ff:52:e4:96:44:e5:da:71:f6:ad:8e:83:4f:90:ab: 42:f6:d9:4f:c0:d4:9f:6c:f4:94:93:c0:d7:6c:2a: 9f:f5:82:fd:5a:40:1a:28:f9:32:10:49:3a:39:e0: b5:24:a7:72:1b:98:8a:83:66:38:16:d5:c1:d1:e1: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:87:61:82:F1:1C:31:28:96:02:6A:43:92:59:FF:99:9C:DF:7B:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:2222::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:66:ae:bf:56:95:63:d5:7b:1d:17:26:c5:1a:f0:06:e8:7e: dd:0d:2d:46:25:f3:be:cb:6d:2b:92:86:ac:53:09:4a:d8:51: 7b:12:75:b3:a5:89:5d:c8:cb:ad:0d:38:46:77:3f:1a:25:01: 64:de:bc:c8:ba:2e:d5:75:84:b0:1d:58:ba:01:ea:cd:ef:f9: 6d:30:ee:3a:44:cf:ec:72:c9:49:7b:9a:f6:26:b8:a5:2b:b0: c4:55:b3:c9:04:93:c7:8c:c0:84:3e:f9:91:87:2a:e2:b0:75: 63:4b:80:2d:3d:c5:38:81:25:93:2a:a1:6f:a1:16:98:97:70: dc:f3:7a:e2:45:d9:8a:1e:a6:8f:04:14:36:10:9c:28:19:22: d5:49:8a:ef:6d:6c:5f:7a:2e:53:71:25:64:f8:ea:3f:fd:b0: ba:04:00:6e:50:19:75:74:2a:59:c3:e2:ba:04:da:f1:47:12: d6:73:02:cf:97:7c:fe:95:20:2c:c6:05:77:41:6d:ab:d1:dc: 53:fa:9e:10:30:a2:a0:be:bc:61:3e:1a:4a:03:60:55:44:18: 91:8e:f3:f1:b4:80:a2:7a:d2:84:2d:b6:7c:6f:ab:ad:f7:3f: 75:10:22:27:18:0f:be:e7:ab:c4:c4:10:0e:6c:bd:ec:b2:75: 30:61:eb:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElhuZjdce+FLlt6+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmY5Mjc4YTgtMzE1MC00ZmZiLTgxYzAtZjRiNjcyYWY1NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk69Vpuai+CD8B2giU4a4fLvFVbQcF6Tkrzq ubr0XqYZiM0cBeai86Ysj1XIb8nqOZDyT14kBN4ti4m6Xq4uqyxiVGwci7dOYXAZ h6TilyYm0qeFyBiu4RakKzdEimJJghrr6AZh87lzAinon+a+kuOkfqy+rUcli/jj SWAXu36KkH9rXCsestOg5NnP+yo8VKg0hSzYfd8J00ChhSH1Rl5Aff2JDj3xwnX8 tSUPnUKENnDxHfvuDZL8R79KhDw9KK3/UuSWROXacfatjoNPkKtC9tlPwNSfbPSU k8DXbCqf9YL9WkAaKPkyEEk6OeC1JKdyG5iKg2Y4FtXB0eG+bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAyHYYLxHDEolgJqQ5JZ/5mc33ssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYTJlNDFhYmUtZjBhOC0z Y2VjLThiOTMtNzc4MTFlNzRmYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wCIi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhmrr9WlWPVex0XJsUa8Aboft0NLUYl877LbSuShqxTCUrYUXsS dbOliV3Iy60NOEZ3PxolAWTevMi6LtV1hLAdWLoB6s3v+W0w7jpEz+xyyUl7mvYm uKUrsMRVs8kEk8eMwIQ++ZGHKuKwdWNLgC09xTiBJZMqoW+hFpiXcNzzeuJF2Yoe po8EFDYQnCgZItVJiu9tbF96LlNxJWT46j/9sLoEAG5QGXV0KlnD4roE2vFHEtZz As+XfP6VICzGBXdBbavR3FP6nhAwoqC+vGE+GkoDYFVEGJGO8/G0gKJ60oQttnxv q633P3UQIicYD77nq8TEEA5sveyydTBh65k= -----END CERTIFICATE-----Generated at Sat Apr 12 18:32:14 2025 by rpki-client