$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa File: f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa (raw, json) Hash identifier: Mt2gaBEVnt4/Y5CI3FuyBuzhhhQ0KmyI173OZd6wWo8= Subject key identifier: AE:B0:9D:3D:78:DA:27:1E:18:AA:66:54:93:84:5D:E6:87:9A:00:FE Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584AB6CE4E218689888CE8593B40 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa Signing time: Fri 01 Aug 2025 17:13:34 +0000 ROA not before: Fri 01 Aug 2025 17:13:34 +0000 ROA not after: Thu 30 Oct 2025 17:13:34 +0000 asID: 36692 IP address blocks: 2620:119:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:ce:4e:21:86:89:88:8c:e8:59:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Aug 1 17:13:34 2025 GMT Not After : Oct 30 17:13:34 2025 GMT Subject: CN=8b2446ff-1182-4cf8-94d5-9d37d324bf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:83:f1:b0:49:38:7a:d9:6e:28:9c:d6:5e: 9a:8b:9f:8c:27:3c:43:ee:b8:55:f5:3c:a5:9f:75: 82:23:1f:4b:99:3c:3f:0c:08:67:f7:3d:07:c4:ed: 6a:18:25:19:e0:d0:5b:46:e7:b3:5f:34:4b:05:c0: 8a:ec:32:73:a0:5a:87:43:d9:ec:7a:16:99:93:1f: e0:20:d7:00:b0:d9:cb:82:a1:7c:41:c1:57:59:0a: 7e:23:a7:79:82:78:1b:0b:6b:3b:86:52:c9:a1:2b: c1:f6:e8:eb:d0:fe:86:4d:68:ea:52:d9:1d:67:44: 8f:25:e2:f6:f8:ba:f5:62:71:61:63:a1:30:9f:6f: be:40:e3:0f:ae:85:27:95:3c:bc:cd:35:18:5e:f7: 4b:19:c1:0a:4f:96:f1:5c:c2:8d:78:27:d7:43:df: 25:61:a7:5a:cb:88:15:75:25:00:45:05:34:ef:6f: b8:ae:85:53:39:64:2e:c6:77:5a:29:07:3a:6c:a4: ca:8d:15:1d:e9:f0:a6:7d:b8:86:0c:4e:c5:b5:ca: da:16:00:18:81:65:55:de:ae:06:46:77:ed:3a:2e: ec:94:fb:d5:62:00:e2:1d:c7:17:dd:e6:53:c2:b0: b2:34:bc:ca:8e:ca:86:b7:16:ca:b0:2d:86:f4:58: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B0:9D:3D:78:DA:27:1E:18:AA:66:54:93:84:5D:E6:87:9A:00:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv6: 2620:119:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b9:9b:53:cd:d0:a5:ab:64:cb:9e:56:1e:cc:9b:93:1a:1e: 66:6a:75:2b:33:0d:4f:ac:17:33:15:b6:e8:48:a3:23:30:d9: 92:89:fa:26:d7:a0:3a:28:e7:42:6f:dd:8a:34:15:14:ec:31: a1:cf:42:39:4a:8f:30:b2:47:f5:61:6b:af:25:8d:a5:9b:c6: 98:e2:5a:60:ad:0b:d8:f4:14:ee:97:6f:f3:99:ab:d5:76:19: a5:21:da:56:69:01:49:fd:1f:23:7e:85:4d:5d:f3:ef:65:18: b3:f7:38:fe:64:c9:e6:b1:fc:92:50:57:e7:c6:f2:d7:db:df: 39:8d:c1:9b:95:3e:97:15:d4:0b:9c:9f:00:80:09:e7:36:6d: d4:e7:03:2e:2c:f1:26:53:5d:a7:87:d6:e9:11:82:7e:84:d7: a1:0e:0e:bb:c3:c6:e5:7f:c2:e6:60:a4:ac:7c:d0:55:a4:1d: c6:fa:81:b2:30:ae:1b:d2:a7:1c:27:34:9d:02:0a:ca:4b:e5: 09:61:55:07:bc:6d:40:f1:a2:26:83:03:6a:11:02:a0:b3:ca: e6:56:4e:8f:bd:78:47:5e:66:14:c9:34:d1:54:93:f8:a9:64: ee:db:fd:e3:af:28:3b:c1:29:f2:16:f8:7f:dd:3b:d5:25:61: ef:45:f6:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2zk4hhomIjOhZO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDgwMTE3MTMzNFoXDTI1MTAzMDE3MTMzNFowLzEtMCsGA1UEAxMk OGIyNDQ2ZmYtMTE4Mi00Y2Y4LTk0ZDUtOWQzN2QzMjRiZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVyD8bBJOHrZbiic1l6ai5+MJzxD7rhV9Tyl n3WCIx9LmTw/DAhn9z0HxO1qGCUZ4NBbRuezXzRLBcCK7DJzoFqHQ9nsehaZkx/g INcAsNnLgqF8QcFXWQp+I6d5gngbC2s7hlLJoSvB9ujr0P6GTWjqUtkdZ0SPJeL2 +Lr1YnFhY6Ewn2++QOMProUnlTy8zTUYXvdLGcEKT5bxXMKNeCfXQ98lYaday4gV dSUARQU072+4roVTOWQuxndaKQc6bKTKjRUd6fCmfbiGDE7FtcraFgAYgWVV3q4G RnftOi7slPvVYgDiHccX3eZTwrCyNLzKjsqGtxbKsC2G9FgDQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6wnT142iceGKpmVJOEXeaHmgD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZjczOTJlNjAtMmFkYy0z OWFkLTkxYWEtYTMxZmM4YmJhOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGQAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADG5m1PN0KWrZMueVh7Mm5MaHmZqdSszDU+sFzMVtuhIoyMw2ZKJ +ibXoDoo50Jv3Yo0FRTsMaHPQjlKjzCyR/Vha68ljaWbxpjiWmCtC9j0FO6Xb/OZ q9V2GaUh2lZpAUn9HyN+hU1d8+9lGLP3OP5kyeax/JJQV+fG8tfb3zmNwZuVPpcV 1AucnwCACec2bdTnAy4s8SZTXaeH1ukRgn6E16EODrvDxuV/wuZgpKx80FWkHcb6 gbIwrhvSpxwnNJ0CCspL5QlhVQe8bUDxoiaDA2oRAqCzyuZWTo+9eEdeZhTJNNFU k/ipZO7b/eOvKDvBKfIW+H/dO9UlYe9F9tY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:22:56 2025 by rpki-client