$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa File: a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa (raw, json) Hash identifier: 5R2l7Ryam51ccdLgHLZO2oFhXOS7Oenu/eheYZFcsn4= Subject key identifier: EA:10:A6:C8:B6:4C:0B:C3:FF:B5:4A:28:FF:5C:87:47:11:3B:E5:36 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584AE9F6696CFEA51E2F6AA3FEE0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 3477 IP address blocks: 2601:a004::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:69:6c:fe:a5:1e:2f:6a:a3:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=91630ddc-58d9-4247-b838-1d2a65c223fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:5c:66:d2:0f:6c:55:2f:cf:fa:a8:5a:af: a8:f2:18:c0:03:c5:79:1a:3f:20:70:4a:18:d5:8b: 03:b2:15:77:8b:87:ca:5e:bf:42:15:af:89:aa:f7: 62:3a:e0:02:74:70:bd:52:e8:e8:a6:82:5c:2e:00: 9e:97:81:9c:7b:08:8c:85:e5:a2:2f:76:22:53:bc: 94:42:ac:0c:77:8e:d4:a5:f0:75:02:8b:f3:3c:d3: f3:99:e0:c3:ed:8f:91:3a:33:18:1b:b1:e1:64:8b: 5d:18:2f:64:9b:be:f2:42:92:a2:d2:53:84:dd:7f: dd:44:4f:9c:0f:9d:84:d8:29:e6:ff:7e:3e:5b:d4: 2a:93:bd:03:e1:2d:c3:43:93:28:e3:dd:ce:c5:1b: 3c:fa:66:b2:2a:41:cb:2f:54:db:13:59:b4:59:c0: 95:9b:0b:d2:94:fa:10:7d:7a:ba:b3:59:ef:b4:5c: 9d:c1:49:0f:a0:3b:64:af:e5:f4:8b:2b:d4:2d:37: 51:bd:e9:2b:84:b5:8f:dc:b8:d5:1b:cf:51:ba:e2: f6:8a:d5:a7:6e:6c:17:cf:18:18:bc:73:2a:bd:d8: b4:d2:0f:49:a2:77:cc:cf:36:51:b2:c0:ed:1e:b5: dd:4b:69:8a:6f:50:04:c4:d7:20:c7:6f:06:c6:29: 24:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:10:A6:C8:B6:4C:0B:C3:FF:B5:4A:28:FF:5C:87:47:11:3B:E5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a004::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:48:ff:25:79:d6:3a:4e:66:86:6f:e5:dc:c0:5e:32:fb:38: 5e:c2:14:c9:07:c7:dd:e9:9a:94:d0:c2:2f:01:27:a6:79:80: fb:f0:b5:70:40:c2:a7:6c:7c:01:5b:a5:50:f5:9d:99:26:57: f7:ba:c7:fd:44:bf:ca:65:10:b6:82:e9:3c:f1:a3:c4:d1:bf: 87:9a:e1:29:62:3c:35:c3:fe:4e:76:96:0a:cc:ed:39:ea:d2: 90:5e:64:4f:e9:78:03:93:16:0a:bc:1d:81:77:db:d6:0f:72: 47:18:77:f8:a5:a7:13:ea:5a:0d:94:fc:b1:59:0c:84:d3:e2: 13:6b:c7:b6:f0:23:ea:cc:4a:c3:33:eb:55:0b:71:62:74:2a: 28:13:07:34:38:a2:1a:bb:8f:12:d4:5e:dc:67:46:fc:84:88: e2:63:71:0a:1b:9c:ee:28:92:e9:e6:ba:fa:65:61:02:ed:fc: 0e:84:fd:b3:13:57:de:c9:5e:94:23:92:b6:20:55:27:ee:fc: 99:39:51:dc:56:d0:2e:a0:d0:bc:3d:4c:b4:d6:d4:6c:67:de: 5c:54:aa:cd:1a:23:03:68:99:d6:a1:a7:34:66:05:a7:1e:3e: 89:86:70:1a:60:64:58:ec:12:37:de:8d:66:58:49:8e:5f:7d: cd:3c:a2:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErp9mls/qUeL2qj/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk OTE2MzBkZGMtNThkOS00MjQ3LWI4MzgtMWQyYTY1YzIyM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3FcZtIPbFUvz/qoWq+o8hjAA8V5Gj8gcEoY 1YsDshV3i4fKXr9CFa+JqvdiOuACdHC9UujopoJcLgCel4GcewiMheWiL3YiU7yU QqwMd47UpfB1AovzPNPzmeDD7Y+ROjMYG7HhZItdGC9km77yQpKi0lOE3X/dRE+c D52E2Cnm/34+W9Qqk70D4S3DQ5Mo493OxRs8+mayKkHLL1TbE1m0WcCVmwvSlPoQ fXq6s1nvtFydwUkPoDtkr+X0iyvULTdRvekrhLWP3LjVG89RuuL2itWnbmwXzxgY vHMqvdi00g9JonfMzzZRssDtHrXdS2mKb1AExNcgx28GxikkmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOoQpsi2TAvD/7VKKP9ch0cRO+U2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTg1NGZhNmEtOGZmMi0z OWNkLWJiOGEtYmYwNDEyNjcyY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUSP8ledY6TmaGb+XcwF4y+zhewhTJB8fd6ZqU0MIvASemeYD78LVw QMKnbHwBW6VQ9Z2ZJlf3usf9RL/KZRC2guk88aPE0b+HmuEpYjw1w/5OdpYKzO05 6tKQXmRP6XgDkxYKvB2Bd9vWD3JHGHf4pacT6loNlPyxWQyE0+ITa8e28CPqzErD M+tVC3FidCooEwc0OKIau48S1F7cZ0b8hIjiY3EKG5zuKJLp5rr6ZWEC7fwOhP2z E1feyV6UI5K2IFUn7vyZOVHcVtAuoNC8PUy01tRsZ95cVKrNGiMDaJnWoac0ZgWn Hj6JhnAaYGRY7BI33o1mWEmOX33NPKKD -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:04 2025 by rpki-client