$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa File: 8578d02e-2574-3397-9850-67ab5fdce8b7.roa (raw, json) Hash identifier: tP1KG0xq3oWzeMYjuFtNAeiwtALHcKiZNWI6+eemCwU= Subject key identifier: 40:BD:51:80:F4:F3:F6:3E:9D:DC:B4:39:7B:1F:3B:04:B0:2C:64:E4 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584AE9F66954125E9A4925626000 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 3477 IP address blocks: 2601:a002::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:69:54:12:5e:9a:49:25:62:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=80b80042-6821-4034-b51b-92252172add4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:fd:99:af:66:cf:64:6b:34:9d:b1:8e:9c: 60:31:53:07:66:3e:4d:06:d8:0c:90:a6:a2:ee:3e: 53:4d:c7:70:85:80:c4:c4:57:f7:32:23:b2:0a:12: f0:3d:7b:ff:06:43:b3:a5:8e:04:42:28:5c:d3:a7: 7f:a5:8d:dc:d0:eb:ce:0f:9c:ca:62:1d:62:e3:3e: 76:fe:64:03:5b:8c:bb:9c:58:a9:01:45:1b:b3:a8: b2:55:c3:50:3e:07:3a:4f:7e:1e:10:bf:a8:6d:00: 62:95:70:c3:6a:00:92:92:15:d6:e9:4d:f3:60:d6: 6d:16:48:4b:15:76:3f:83:ce:45:02:00:02:07:c4: ce:ac:7c:b7:a3:14:96:b1:49:66:7d:e0:23:ad:de: 0e:73:72:16:8b:c1:34:2e:44:0d:4e:99:51:cd:f5: 05:fd:4b:d5:98:c6:03:7d:a1:c0:ec:61:59:05:a1: 95:4f:d0:5f:c7:4c:c8:45:97:d1:8e:82:bb:10:94: 19:16:25:fa:e5:10:11:f1:d2:e0:34:3e:d9:fa:9e: 48:1e:ea:20:71:a7:d5:7d:3c:7e:42:52:77:82:ce: 3b:e0:c7:4c:a3:43:1a:0d:39:b4:7d:11:11:78:d7: cf:d1:38:8b:82:0c:04:2d:ea:43:85:21:22:1f:3a: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BD:51:80:F4:F3:F6:3E:9D:DC:B4:39:7B:1F:3B:04:B0:2C:64:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a002::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a9:ff:24:78:44:63:e5:09:d8:9a:71:e9:fb:26:28:15:fa: 99:32:d5:56:d6:f3:d1:05:a2:57:de:06:07:9a:28:6a:6c:ab: d4:5e:79:b0:3c:37:51:2d:dc:26:38:c8:01:54:e5:33:c7:b7: b8:fa:e2:88:00:b8:38:40:a5:73:3f:f2:f0:5b:0c:06:ab:c9: ea:58:bb:3e:a5:c2:0d:6e:96:59:50:4f:45:3f:9e:49:4c:a7: e0:0e:84:bf:a7:7d:ac:94:36:84:6c:0c:1e:42:1b:9d:27:ce: d8:e2:c9:de:3e:3a:c2:d1:74:83:72:e4:e7:11:8f:6b:98:19: 94:9b:b6:55:9f:3d:6e:68:a2:d2:41:83:57:c2:63:1d:e2:a6: a2:da:99:c3:b4:35:f2:09:39:22:b2:f0:25:94:45:c9:47:8d: 6b:df:b7:0a:6a:7a:49:15:21:dd:7d:cd:35:ff:0b:b5:4d:6b: 0d:f1:77:11:d3:5e:31:8e:bf:0a:de:99:97:59:ca:59:9b:36: b1:d1:5e:ee:56:df:75:09:e1:79:5b:4d:39:65:66:3c:ba:62: ec:c6:df:37:56:37:4f:a5:6c:f6:07:c0:db:4d:4a:44:eb:84: 88:0b:6c:4e:f3:fd:1c:ee:2f:bd:a5:32:f0:cc:f1:cf:82:72: 48:94:4e:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErp9mlUEl6aSSViYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ODBiODAwNDItNjgyMS00MDM0LWI1MWItOTIyNTIxNzJhZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQL9ma9mz2RrNJ2xjpxgMVMHZj5NBtgMkKai 7j5TTcdwhYDExFf3MiOyChLwPXv/BkOzpY4EQihc06d/pY3c0OvOD5zKYh1i4z52 /mQDW4y7nFipAUUbs6iyVcNQPgc6T34eEL+obQBilXDDagCSkhXW6U3zYNZtFkhL FXY/g85FAgACB8TOrHy3oxSWsUlmfeAjrd4Oc3IWi8E0LkQNTplRzfUF/UvVmMYD faHA7GFZBaGVT9Bfx0zIRZfRjoK7EJQZFiX65RAR8dLgND7Z+p5IHuogcafVfTx+ QlJ3gs474MdMo0MaDTm0fREReNfP0TiLggwELepDhSEiHzpcDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEC9UYD08/Y+ndy0OXsfOwSwLGTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvODU3OGQwMmUtMjU3NC0z Mzk3LTk4NTAtNjdhYjVmZGNlOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgAjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMqf8keERj5QnYmnHp+yYoFfqZMtVW1vPRBaJX3gYHmihqbKvUXnmw PDdRLdwmOMgBVOUzx7e4+uKIALg4QKVzP/LwWwwGq8nqWLs+pcINbpZZUE9FP55J TKfgDoS/p32slDaEbAweQhudJ87Y4snePjrC0XSDcuTnEY9rmBmUm7ZVnz1uaKLS QYNXwmMd4qai2pnDtDXyCTkisvAllEXJR41r37cKanpJFSHdfc01/wu1TWsN8XcR 014xjr8K3pmXWcpZmzax0V7uVt91CeF5W005ZWY8umLsxt83VjdPpWz2B8DbTUpE 64SIC2xO8/0c7i+9pTLwzPHPgnJIlE6k -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:24 2025 by rpki-client