$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa File: 9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa (raw, json) Hash identifier: tUxFbh8dNhHxsCV6c1vnql/zvYnjQWuJEWabO+BPHR8= Subject key identifier: D9:0E:22:02:BC:EF:F1:B9:9B:CF:AD:99:90:AF:C0:FB:3D:3D:05:B1 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A1B60020F381F9F7E7764ED00 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 0 IP address blocks: 2601:a001::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:02:0f:38:1f:9f:7e:77:64:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=43f2aaa6-a954-4070-bae8-b61a2cee4b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:97:ce:f5:fb:d7:42:b6:f4:0e:ca:40:e4:33: a0:ed:11:e0:a2:5d:fd:59:e9:da:a5:de:6c:3f:e6: 5a:e7:16:1c:d3:9c:62:a6:ce:bc:bc:2e:19:0c:b3: 2e:49:82:f4:9d:9d:26:be:f7:28:ff:40:f7:6f:eb: 2d:47:9a:22:5f:c3:9c:d4:88:97:1e:a7:c6:19:ce: 24:1f:ad:23:f8:c7:4a:50:c1:b4:00:10:c5:49:3e: 03:4c:47:0f:8a:88:8a:5e:ee:b3:0e:52:5a:24:c9: 12:96:4d:a5:d8:67:d8:16:15:dc:78:f7:eb:93:e9: 3d:27:79:9d:c5:83:25:d5:17:22:99:94:58:aa:b2: 2f:34:e9:53:a0:5b:8d:8d:00:c2:29:b5:42:01:74: e8:ca:00:81:2d:74:a2:2e:4f:71:4e:82:0d:18:92: 7d:c8:10:6d:74:26:af:61:7e:89:2f:c1:ac:9a:bf: 01:9e:54:3f:c1:9f:b6:69:cc:ba:15:36:fe:db:d3: af:9e:1a:26:11:c6:f5:5d:38:b9:4c:7c:32:1d:8b: e1:45:ff:27:6f:5b:f9:68:ea:65:bb:82:2a:3c:55: b1:31:02:68:4a:10:69:1a:67:77:55:b4:51:cb:1e: 4d:ab:e0:01:c0:c5:3b:d4:22:a5:b0:d4:bc:52:3b: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0E:22:02:BC:EF:F1:B9:9B:CF:AD:99:90:AF:C0:FB:3D:3D:05:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a001::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:10:cb:cd:52:49:23:1c:c9:d5:09:79:5e:5f:b6:28:d4:44: 7d:67:2c:70:07:34:46:86:1d:fb:f3:8d:ae:39:db:06:32:db: 7c:85:55:5b:81:09:1d:aa:e0:d2:b5:81:d2:4c:0d:78:89:b8: 54:08:6c:39:f6:d8:eb:f5:70:a8:ae:ec:cb:8e:1b:de:61:f7: c7:f7:67:ec:a1:ca:87:d9:54:da:c1:d3:5a:c7:d3:c1:bd:ca: 3d:44:21:ce:96:f2:1b:b9:f6:80:8d:3d:c6:aa:f1:de:ac:dc: 32:ce:5e:53:74:47:b3:e2:91:94:dc:a5:17:b7:a5:cc:45:dd: 6b:10:20:ca:44:23:f4:06:27:3f:8d:7f:6a:f1:ed:b8:e0:6c: 80:c0:e9:45:ac:d6:ed:05:5e:99:1b:6f:a9:28:f6:d1:39:80: 1a:a0:a5:a8:93:eb:6c:88:27:ed:08:4b:3a:10:64:e6:2e:2e: ee:5b:07:a9:92:79:e5:bb:55:bd:df:c2:7e:1c:d4:ac:d5:49: c2:7e:ec:ca:a7:60:48:7a:d4:f2:ba:64:60:10:30:d8:50:60: 5d:ec:ec:82:96:5b:09:b2:c3:1a:c7:39:25:9c:56:76:5e:df: 76:0e:34:cd:ab:8a:c7:38:c7:1f:aa:46:f3:71:5c:15:88:5e: 96:e2:b3:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEobYAIPOB+ffndk7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDNmMmFhYTYtYTk1NC00MDcwLWJhZTgtYjYxYTJjZWU0YjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJfO9fvXQrb0DspA5DOg7RHgol39Wenapd5s P+Za5xYc05xips68vC4ZDLMuSYL0nZ0mvvco/0D3b+stR5oiX8Oc1IiXHqfGGc4k H60j+MdKUMG0ABDFST4DTEcPioiKXu6zDlJaJMkSlk2l2GfYFhXcePfrk+k9J3md xYMl1RcimZRYqrIvNOlToFuNjQDCKbVCAXToygCBLXSiLk9xToINGJJ9yBBtdCav YX6JL8Gsmr8BnlQ/wZ+2acy6FTb+29OvnhomEcb1XTi5THwyHYvhRf8nb1v5aOpl u4IqPFWxMQJoShBpGmd3VbRRyx5Nq+ABwMU71CKlsNS8UjuJ4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNkOIgK87/G5m8+tmZCvwPs9PQWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvOWQxZTI5NDktNzI1ZC0z MGU0LTlmNTMtMzhiZDBlNmI3ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgATBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWEMvNUkkjHMnVCXleX7Yo1ER9ZyxwBzRGhh37842uOdsGMtt8hVVb gQkdquDStYHSTA14ibhUCGw59tjr9XCoruzLjhveYffH92fsocqH2VTawdNax9PB vco9RCHOlvIbufaAjT3GqvHerNwyzl5TdEez4pGU3KUXt6XMRd1rECDKRCP0Bic/ jX9q8e244GyAwOlFrNbtBV6ZG2+pKPbROYAaoKWok+tsiCftCEs6EGTmLi7uWwep knnlu1W938J+HNSs1UnCfuzKp2BIetTyumRgEDDYUGBd7OyCllsJssMaxzklnFZ2 Xt92DjTNq4rHOMcfqkbzcVwViF6W4rPW -----END CERTIFICATE-----Generated at Tue Jul 1 18:28:58 2025 by rpki-client