$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa File: af5c3765-147f-3db1-b56e-1f20fa7259fc.roa (raw, json) Hash identifier: GaRhlOaIeLqq7tqU4iMStNP98mXYIb7obHyZU5MGLHA= Subject key identifier: 4B:87:E4:03:7E:29:88:BD:32:C8:D0:45:03:B7:08:9B:FC:28:3B:A2 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584A411058CB44427117FFD12A40 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 399275 IP address blocks: 2602:fcc0:3333::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:58:cb:44:42:71:17:ff:d1:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=03cae479-4835-4baf-b59f-48e01d5ee05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:5f:de:69:a1:bc:30:67:d0:7f:5a:8f:0f: 5e:3a:7f:87:b7:ed:60:62:45:3a:ff:b5:43:a2:01: 94:e8:25:d0:3f:5d:8e:d9:cc:8c:a9:31:1e:5c:00: 2a:b0:04:3e:be:92:d6:46:b0:63:b7:3b:6f:37:32: e6:0f:78:7f:fa:96:8a:28:bc:5c:5d:2c:91:d7:ec: d0:93:81:6e:43:19:53:06:c8:73:a7:72:2b:c2:99: 1e:0d:01:c5:cd:63:63:9d:33:3b:cd:37:21:d0:5b: 5c:be:1f:15:7b:67:4a:5d:4b:9c:1b:95:11:7e:d5: 66:e6:56:78:e0:dd:89:8f:0d:fc:39:bb:c3:27:03: 6a:12:9d:d6:cd:b3:be:a4:fb:ee:76:c2:83:32:e0: e0:3f:8f:66:e1:57:4e:f0:3d:86:39:cd:0e:27:ea: 63:03:17:5c:f6:66:ef:10:53:48:49:39:6b:a6:7e: 22:b0:5e:07:43:6a:05:58:ce:5e:d4:70:6c:5b:e2: e3:d2:12:6d:dd:ce:f2:1a:94:d2:33:33:7d:16:2e: 10:1e:8e:64:a0:3b:a6:45:48:df:e9:ad:4b:d8:36: 5a:aa:cd:99:f1:c5:af:92:b0:5a:de:ac:8f:36:00: fd:d6:94:7a:47:c1:21:11:00:19:dd:33:f8:17:ea: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:87:E4:03:7E:29:88:BD:32:C8:D0:45:03:B7:08:9B:FC:28:3B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:3333::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:58:fa:39:44:c7:b4:08:16:9e:54:22:86:3f:9c:41:26:2c: 2b:c6:f5:3b:f9:bb:1e:0d:e5:00:0b:c0:a1:fd:af:ba:66:6b: 9b:49:0a:20:83:c9:7f:9a:61:f2:d5:fe:f1:b8:4d:b2:ca:f1: fb:d4:28:db:13:20:41:87:7e:a3:ff:e2:98:48:90:97:3a:57: d9:aa:9f:fa:a3:38:f1:66:e8:80:55:fc:78:c2:db:79:cd:71: aa:56:95:a1:97:9a:26:53:e5:5b:8d:25:49:d6:b6:d5:2b:70: 8f:41:cb:29:f7:0a:7e:a1:a5:58:b5:50:73:2c:e3:3d:57:40: db:62:b9:f1:6b:30:d5:8d:7e:e7:b9:71:2a:a3:5e:25:ab:7b: 11:dc:ee:f9:31:4c:7e:d4:5c:54:62:86:b4:1b:a0:47:ce:ea: 5d:a1:d8:a2:5b:8f:3c:22:c1:c1:d0:41:f0:cc:6d:a2:da:0b: 62:10:39:bc:5a:b5:fc:39:a7:ef:6a:84:1c:45:53:a0:b2:9c: 0c:ff:67:59:fd:35:54:ad:68:e2:f1:6d:54:48:1a:eb:b3:8e: ea:6f:90:42:cb:ec:8e:81:19:87:a2:ee:da:b3:0b:46:21:55: 78:b4:48:26:2b:6d:0f:15:b1:5f:4c:88:11:42:ac:73:2c:60: 21:45:d8:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpBEFjLREJxF//RKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MDNjYWU0NzktNDgzNS00YmFmLWI1OWYtNDhlMDFkNWVlMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb1f3mmhvDBn0H9ajw9eOn+Ht+1gYkU6/7VD ogGU6CXQP12O2cyMqTEeXAAqsAQ+vpLWRrBjtztvNzLmD3h/+paKKLxcXSyR1+zQ k4FuQxlTBshzp3IrwpkeDQHFzWNjnTM7zTch0Ftcvh8Ve2dKXUucG5URftVm5lZ4 4N2Jjw38ObvDJwNqEp3WzbO+pPvudsKDMuDgP49m4VdO8D2GOc0OJ+pjAxdc9mbv EFNISTlrpn4isF4HQ2oFWM5e1HBsW+Lj0hJt3c7yGpTSMzN9Fi4QHo5koDumRUjf 6a1L2DZaqs2Z8cWvkrBa3qyPNgD91pR6R8EhEQAZ3TP4F+oaqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuH5AN+KYi9MsjQRQO3CJv8KDuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYWY1YzM3NjUtMTQ3Zi0z ZGIxLWI1NmUtMWYyMGZhNzI1OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wDMz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVY+jlEx7QIFp5UIoY/nEEmLCvG9Tv5ux4N5QALwKH9r7pma5tJ CiCDyX+aYfLV/vG4TbLK8fvUKNsTIEGHfqP/4phIkJc6V9mqn/qjOPFm6IBV/HjC 23nNcapWlaGXmiZT5VuNJUnWttUrcI9Byyn3Cn6hpVi1UHMs4z1XQNtiufFrMNWN fue5cSqjXiWrexHc7vkxTH7UXFRihrQboEfO6l2h2KJbjzwiwcHQQfDMbaLaC2IQ Obxatfw5p+9qhBxFU6CynAz/Z1n9NVStaOLxbVRIGuuzjupvkELL7I6BGYei7tqz C0YhVXi0SCYrbQ8VsV9MiBFCrHMsYCFF2Io= -----END CERTIFICATE-----Generated at Mon Jun 30 03:29:26 2025 by rpki-client