$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa File: ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa (raw, json) Hash identifier: kid9m39yf0zqiXQEgcY+XcIzPcmcwUh2h2enfjXMfq4= Subject key identifier: 54:4C:AC:85:60:84:E2:CF:A5:5A:C2:A5:11:5B:86:05:75:42:62:06 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584F4989D5A8920AA9AB617D4180 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3477 IP address blocks: 2610:20:90e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:d5:a8:92:0a:a9:ab:61:7d:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=374b725d-06ba-477a-bf88-0ca2c82180c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:24:75:95:82:f0:82:88:15:e5:8f:30:d4: c5:9c:0f:ea:4d:ea:8c:48:b1:4d:b4:37:b9:3e:9e: c4:8f:43:0e:b2:d4:da:77:0e:d3:d7:e7:7b:fb:f0: 9a:d1:49:6d:ec:8b:41:99:e5:a6:fd:03:ed:fe:7f: 85:28:c9:87:67:92:42:49:d0:26:52:9b:77:25:32: 4a:b0:90:a2:75:8b:dd:91:a1:34:de:c6:42:3f:77: 05:81:dc:46:87:08:00:79:cb:cf:1d:30:f8:ad:c2: 66:e3:b8:1b:a8:87:4c:c5:10:c4:c4:a5:6d:35:2e: 3e:d1:e2:be:25:82:46:0e:5b:e8:20:75:79:59:9d: 99:f0:60:a0:f2:f5:ed:e4:0e:47:a4:70:a7:83:ab: 3c:c6:92:01:0a:5d:28:bc:ae:72:37:91:09:51:95: d4:bf:ca:4a:96:a3:4f:80:01:60:fb:68:d9:b1:2f: 2c:51:d3:8f:75:b0:96:92:f4:69:04:a2:21:76:18: f4:a9:5d:c5:8b:57:9e:ef:f4:03:e1:60:d6:63:ca: a9:27:03:cc:ae:a5:fb:bb:3b:99:16:a8:f6:c1:e8: 51:a5:04:0b:7d:e1:4b:96:3d:3b:58:66:0c:47:1e: 7d:fc:ab:ce:95:92:be:6b:99:bd:c1:be:89:e9:71: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4C:AC:85:60:84:E2:CF:A5:5A:C2:A5:11:5B:86:05:75:42:62:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:90e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:97:8f:9d:b9:8c:2c:ca:3c:4c:ce:88:bb:f8:a2:1e:01:18: 75:86:b2:67:0d:9f:8b:86:38:6c:f3:d1:59:2b:75:dc:f2:87: 22:b6:d1:84:ff:06:30:49:e1:58:5b:8d:5f:10:b4:8b:6b:c4: 1a:14:5f:1a:52:e5:44:f1:0c:16:75:4c:90:3e:79:54:30:76: 25:aa:8e:41:17:71:2b:f6:dd:36:31:fe:5c:59:ae:e3:ce:c2: 08:f5:bc:76:59:a9:25:11:b6:b2:1a:64:92:71:15:c8:cc:9e: 83:15:b1:5a:07:51:ad:4c:2c:1d:21:bc:01:0c:9e:a6:b1:22: d8:aa:ed:b2:f2:4c:66:7c:46:20:88:92:2e:f8:2e:6d:fe:a1: ed:ae:e4:52:7f:7c:b9:ae:c5:1f:be:c4:bf:38:c6:d8:ba:38: 41:88:c7:45:05:c9:4f:6c:1f:6e:89:4b:73:a7:f2:82:9c:06: 08:f3:5c:12:9b:9b:93:17:66:f5:65:ad:56:7a:23:08:71:7b: 81:5d:86:04:3a:77:dc:ff:95:1d:dc:d8:01:0d:01:11:41:07: a9:b4:24:f2:99:60:3d:f3:34:56:07:f1:14:9a:78:b4:9d:c4: e8:e9:ce:a6:dc:9a:5c:cb:96:13:be:46:da:af:d1:f8:40:9d: 91:b4:b2:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JidWokgqpq2F9QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzc0YjcyNWQtMDZiYS00NzdhLWJmODgtMGNhMmM4MjE4MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcEkdZWC8IKIFeWPMNTFnA/qTeqMSLFNtDe5 Pp7Ej0MOstTadw7T1+d7+/Ca0Ult7ItBmeWm/QPt/n+FKMmHZ5JCSdAmUpt3JTJK sJCidYvdkaE03sZCP3cFgdxGhwgAecvPHTD4rcJm47gbqIdMxRDExKVtNS4+0eK+ JYJGDlvoIHV5WZ2Z8GCg8vXt5A5HpHCng6s8xpIBCl0ovK5yN5EJUZXUv8pKlqNP gAFg+2jZsS8sUdOPdbCWkvRpBKIhdhj0qV3Fi1ee7/QD4WDWY8qpJwPMrqX7uzuZ Fqj2wehRpQQLfeFLlj07WGYMRx59/KvOlZK+a5m9wb6J6XFa2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFRMrIVghOLPpVrCpRFbhgV1QmIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYmEyNWY1ZTQtMDVkZS0z ZTlhLWJjYzEtNmI4ZDRlMDcwZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIJDg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJOXj525jCzKPEzOiLv4oh4BGHWGsmcNn4uGOGzz0VkrddzyhyK2 0YT/BjBJ4VhbjV8QtItrxBoUXxpS5UTxDBZ1TJA+eVQwdiWqjkEXcSv23TYx/lxZ ruPOwgj1vHZZqSURtrIaZJJxFcjMnoMVsVoHUa1MLB0hvAEMnqaxItiq7bLyTGZ8 RiCIki74Lm3+oe2u5FJ/fLmuxR++xL84xti6OEGIx0UFyU9sH26JS3On8oKcBgjz XBKbm5MXZvVlrVZ6Iwhxe4FdhgQ6d9z/lR3c2AENARFBB6m0JPKZYD3zNFYH8RSa eLSdxOjpzqbcmlzLlhO+Rtqv0fhAnZG0sp0= -----END CERTIFICATE-----Generated at Sat Sep 26 08:51:47 2026 by rpki-client