$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa File: b20be8f7-0638-3370-8715-f0aae40447c9.roa (raw, json) Hash identifier: DAcwPuR6Qbk5NFywRIArByXIaImeHqRa3bZ8YPmJ/rs= Subject key identifier: DB:25:87:26:28:5E:45:52:65:38:53:39:2A:2F:F6:49:5A:AF:D9:49 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584961B998FF12E5A69DA6F6B300 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 399275 IP address blocks: 2602:fcc0:4444::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:98:ff:12:e5:a6:9d:a6:f6:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=76b20fc5-3c70-4819-9dee-560a70d3de08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:5d:41:e8:e8:d4:98:d3:47:05:6d:dc:6a: b5:f7:5b:c0:5a:ae:37:7f:97:30:52:42:bf:54:51: a8:43:16:19:11:ee:27:ae:94:55:38:e3:e5:ff:70: f8:d7:4a:b1:25:82:00:87:23:df:77:f1:47:54:cd: fd:b4:b4:0c:de:fb:cd:99:23:6f:5f:5f:83:6e:b3: ca:0d:96:de:5b:52:6d:96:82:4e:d2:e5:1f:28:d3: 21:ff:58:e9:31:b6:00:b3:32:29:ee:0c:65:a4:8e: 8a:8d:df:12:d7:fd:a3:38:f6:b9:20:31:96:c5:aa: 26:ca:64:77:a4:e6:c2:b4:10:78:4e:7d:4c:fb:8a: e9:6d:a4:56:61:ba:72:5f:d5:cc:18:df:7a:93:02: 50:aa:19:28:90:97:9c:d3:d8:52:a2:32:66:47:76: dd:12:13:01:6f:6d:3d:57:4f:30:09:95:86:cd:4e: ba:01:7d:2c:92:f4:f3:fc:33:d7:be:f8:73:10:00: a8:ee:f8:89:a6:5c:72:c8:f0:ee:99:b7:3e:81:b2: 5d:4e:23:6d:15:61:ab:57:25:4a:2e:ae:a1:2d:b1: 92:d2:64:48:2e:6d:26:be:f8:e0:a2:b6:88:cf:52: 78:85:f0:27:e3:fd:a9:3b:2a:84:64:69:09:d8:0b: fd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:25:87:26:28:5E:45:52:65:38:53:39:2A:2F:F6:49:5A:AF:D9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:4444::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fd:c3:ae:35:66:d7:e2:93:84:fd:f4:9e:4d:64:97:84:12: 90:57:c0:a3:2d:12:62:3c:d5:b0:fa:39:23:41:d1:11:7d:f9: 96:73:ab:f0:ac:aa:05:94:16:77:d6:83:2e:c6:bc:26:52:3c: 54:19:d3:2e:01:bb:54:ab:08:86:74:2b:39:f0:63:20:e6:d2: 0a:aa:9b:af:58:78:24:1d:83:7d:08:ab:42:d0:c3:0e:ed:a7: 13:f4:aa:a6:a7:a8:98:87:9a:92:e7:84:c4:df:b8:34:f8:4b: e1:63:f2:16:0b:ab:d5:8f:a0:40:5f:cb:56:f2:79:ca:e1:c2: bb:9e:c2:13:ba:5a:47:c2:51:73:0f:96:1f:8d:01:7d:e0:f5: ff:12:29:f1:e6:df:91:db:10:be:91:23:2d:df:9e:f0:09:ba: 97:57:f4:ca:84:d9:84:82:55:1e:ea:44:23:83:8c:be:fe:f5: a9:e7:20:fc:b6:1d:89:ab:8a:8b:97:15:72:0b:34:7f:ea:82: d1:c2:93:07:67:6d:89:66:8f:0f:74:cd:80:79:8f:31:b0:a9: 20:0c:78:a4:f8:1e:86:32:80:8e:cf:49:40:64:8c:ca:58:23: f7:cf:4d:e3:4c:30:6b:d2:5d:8d:b3:55:79:50:cf:9b:b1:0d: 61:70:39:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElhuZj/EuWmnab2swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NzZiMjBmYzUtM2M3MC00ODE5LTlkZWUtNTYwYTcwZDNkZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM5dQejo1JjTRwVt3Gq191vAWq43f5cwUkK/ VFGoQxYZEe4nrpRVOOPl/3D410qxJYIAhyPfd/FHVM39tLQM3vvNmSNvX1+DbrPK DZbeW1JtloJO0uUfKNMh/1jpMbYAszIp7gxlpI6Kjd8S1/2jOPa5IDGWxaomymR3 pObCtBB4Tn1M+4rpbaRWYbpyX9XMGN96kwJQqhkokJec09hSojJmR3bdEhMBb209 V08wCZWGzU66AX0skvTz/DPXvvhzEACo7viJplxyyPDumbc+gbJdTiNtFWGrVyVK Lq6hLbGS0mRILm0mvvjgoraIz1J4hfAn4/2pOyqEZGkJ2Av97wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNslhyYoXkVSZThTOSov9klar9lJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYjIwYmU4ZjctMDYzOC0z MzcwLTg3MTUtZjBhYWU0MDQ0N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wERE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFX9w641Ztfik4T99J5NZJeEEpBXwKMtEmI81bD6OSNB0RF9+ZZz q/CsqgWUFnfWgy7GvCZSPFQZ0y4Bu1SrCIZ0KznwYyDm0gqqm69YeCQdg30Iq0LQ ww7tpxP0qqanqJiHmpLnhMTfuDT4S+Fj8hYLq9WPoEBfy1byecrhwruewhO6WkfC UXMPlh+NAX3g9f8SKfHm35HbEL6RIy3fnvAJupdX9MqE2YSCVR7qRCODjL7+9ann IPy2HYmriouXFXILNH/qgtHCkwdnbYlmjw90zYB5jzGwqSAMeKT4HoYygI7PSUBk jMpYI/fPTeNMMGvSXY2zVXlQz5uxDWFwOQQ= -----END CERTIFICATE-----Generated at Sat Apr 12 18:39:28 2025 by rpki-client