$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa File: 2d10269c-abaf-3198-90a0-8c1e927fe84e.roa (raw, json) Hash identifier: 5+6Wkc4gsGKRP39n4Rz0JWUEtGOldOIm+4poGJEryhM= Subject key identifier: 85:A3:0D:64:EE:98:B0:DE:D1:42:92:2C:64:66:BC:9B:B9:75:44:80 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584AE9F669B858E4ED4732F6A0C0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 3477 IP address blocks: 2601:a012::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:69:b8:58:e4:ed:47:32:f6:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=b2ee8545-69dc-4a35-a404-32444f51c91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:66:52:c8:94:28:6a:02:13:74:41:2d:5a: 8b:aa:48:12:1d:f5:97:8e:eb:3f:50:92:24:3b:b6: 3c:dd:23:18:01:c3:e3:f9:e0:41:35:d7:2d:83:46: 69:0d:3d:bb:b1:c0:b7:95:43:90:55:d4:8a:68:94: 09:dd:d1:09:3d:23:7a:c7:ba:88:a3:ea:08:9d:30: 3e:80:2d:47:26:0a:5e:56:e2:e7:da:13:c8:24:5a: ab:c6:66:60:bb:bd:c9:ef:28:04:b3:b6:57:ff:90: ae:92:95:29:7f:ff:76:bd:79:e2:b8:a3:12:39:5e: f8:92:3b:bc:f7:01:63:9a:ba:57:0a:93:c3:fe:86: 97:e8:4f:a9:2f:c2:74:40:57:c2:64:77:0a:92:95: 55:f5:d9:02:9b:6c:cc:42:bf:8c:b0:e0:7d:8f:be: e0:81:ce:51:67:68:8e:4b:76:9c:d7:1c:98:e0:84: 4d:f4:ed:e7:65:74:71:b5:fa:05:9d:6d:db:22:e5: 48:32:cf:c4:4f:a1:96:ba:92:36:38:a2:cb:58:7a: 53:43:05:9e:40:99:a5:df:3e:cb:de:6c:3e:be:7a: 36:b0:34:f1:4c:b8:0d:f7:8b:29:29:0f:5e:bc:de: 8c:36:cc:c2:a5:f0:85:5e:38:e3:fb:96:61:8e:fd: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:0D:64:EE:98:B0:DE:D1:42:92:2C:64:66:BC:9B:B9:75:44:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a012::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5c:31:77:6d:0f:17:95:3d:97:77:36:92:02:d9:0f:06:e3: b0:cd:40:2b:9f:00:eb:80:fe:c9:c1:72:bf:56:20:2f:f1:1f: 3d:28:5f:64:06:5c:29:00:47:2b:60:c2:fc:ec:f1:26:e4:6e: 17:da:c3:94:12:fd:b1:12:5b:48:f7:53:ac:6d:28:dd:c3:71: bb:cd:7a:20:ef:4e:ff:05:25:c4:02:b1:6d:39:a0:a9:5f:17: ff:05:d2:88:99:07:bc:1b:ac:d1:c4:41:3f:a0:31:76:05:c9: b3:b0:4c:c3:2d:31:5f:69:3c:dc:1e:5b:56:ea:cf:f8:2f:de: 8e:ab:64:64:93:93:3a:86:e3:09:6c:f2:1c:4e:d7:08:f0:b3: 3b:af:6d:b7:fe:d3:fd:7e:75:c7:25:6f:c0:5d:bf:ac:53:5e: 95:dd:12:d8:85:69:55:86:3f:bb:db:8b:96:65:64:e6:09:d3: bc:2e:69:b9:2b:3f:df:1e:13:c8:5f:9f:2c:1b:fc:74:5f:a4: 29:b5:cd:cd:6b:ac:fa:3f:cd:e6:82:91:46:9f:31:19:a5:77: 5c:93:38:0d:17:79:27:9c:20:3a:48:ab:8b:ed:6b:3e:bc:21: 5e:b5:a9:ba:69:80:61:3b:22:54:08:b4:d1:8c:ca:80:2e:15: 62:b5:50:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErp9mm4WOTtRzL2oMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YjJlZTg1NDUtNjlkYy00YTM1LWE0MDQtMzI0NDRmNTFjOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxRmUsiUKGoCE3RBLVqLqkgSHfWXjus/UJIk O7Y83SMYAcPj+eBBNdctg0ZpDT27scC3lUOQVdSKaJQJ3dEJPSN6x7qIo+oInTA+ gC1HJgpeVuLn2hPIJFqrxmZgu73J7ygEs7ZX/5CukpUpf/92vXniuKMSOV74kju8 9wFjmrpXCpPD/oaX6E+pL8J0QFfCZHcKkpVV9dkCm2zMQr+MsOB9j77ggc5RZ2iO S3ac1xyY4IRN9O3nZXRxtfoFnW3bIuVIMs/ET6GWupI2OKLLWHpTQwWeQJml3z7L 3mw+vno2sDTxTLgN94spKQ9evN6MNszCpfCFXjjj+5Zhjv1IdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIWjDWTumLDe0UKSLGRmvJu5dUSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMmQxMDI2OWMtYWJhZi0z MTk4LTkwYTAtOGMxZTkyN2ZlODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgEjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMXDF3bQ8XlT2XdzaSAtkPBuOwzUArnwDrgP7JwXK/ViAv8R89KF9k BlwpAEcrYML87PEm5G4X2sOUEv2xEltI91OsbSjdw3G7zXog707/BSXEArFtOaCp Xxf/BdKImQe8G6zRxEE/oDF2BcmzsEzDLTFfaTzcHltW6s/4L96Oq2Rkk5M6huMJ bPIcTtcI8LM7r223/tP9fnXHJW/AXb+sU16V3RLYhWlVhj+724uWZWTmCdO8Lmm5 Kz/fHhPIX58sG/x0X6Qptc3Na6z6P83mgpFGnzEZpXdckzgNF3knnCA6SKuL7Ws+ vCFetam6aYBhOyJUCLTRjMqALhVitVBs -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:00 2025 by rpki-client