$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa File: dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa (raw, json) Hash identifier: YZ+RDCvPRfGvacrrrhdW8O7YuLEQD7rqM72it80L3BU= Subject key identifier: EF:94:3D:AC:97:AD:CB:FB:08:37:37:37:F7:45:B9:7C:1B:E8:27:7F Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584AE9F669C92DDF5A04F6B60040 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 3477 IP address blocks: 2601:a013::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:69:c9:2d:df:5a:04:f6:b6:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=d94b22fa-c964-48fb-8343-5f7a7955abdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:33:8e:a4:6b:90:a4:f2:66:4c:df:2b:50: 79:78:78:e9:fc:31:e3:ee:ea:f1:96:0d:e1:cf:af: 6d:f2:f3:f2:e7:fb:f7:f6:5c:55:8f:0d:fd:92:4a: ce:d6:57:33:ba:81:b5:8d:6f:c0:27:f4:af:09:c3: 8d:96:91:f6:2d:57:92:17:c2:1d:67:20:94:82:6b: b1:ed:7f:bf:f7:bf:fb:07:a6:b5:22:93:38:07:78: 4f:c3:c2:3c:b1:d8:7b:d2:8d:59:cf:c0:b6:f1:f5: f6:bb:33:a2:e1:e4:04:17:de:e3:4b:c4:f2:9f:52: 23:50:59:b6:f4:09:e5:dd:fb:f1:e9:be:31:1d:6a: e1:9c:3f:6c:93:9e:ae:cf:3a:f1:6d:be:fe:bd:3e: 4a:79:cb:f0:94:54:8c:9b:bd:56:3b:c6:9e:40:d2: aa:1c:fa:26:d2:68:97:2b:9c:0e:8c:5d:3d:57:9f: 1d:7f:09:cd:f4:91:e1:e8:7b:a5:2e:32:ed:b9:52: 6f:a8:fb:d7:cb:25:f1:4f:e2:2f:b2:6c:25:7d:74: a6:9b:9a:92:20:70:0c:59:55:65:ab:91:ae:fc:18: 8e:ce:a7:26:fc:53:33:c6:77:74:63:4a:96:46:7e: 01:46:f0:ba:98:14:54:57:7d:20:b1:86:f8:1e:76: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:94:3D:AC:97:AD:CB:FB:08:37:37:37:F7:45:B9:7C:1B:E8:27:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a013::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f0:00:d9:be:09:31:52:a0:76:01:d2:d1:45:93:52:5e:ed: d8:81:2b:cf:a1:fc:01:75:8f:10:d6:a7:e7:75:2b:45:3f:84: 28:f3:a3:5c:36:2a:5f:66:47:30:53:70:d8:18:26:5f:79:67: 2b:08:87:c0:f8:7d:38:1b:34:f7:9e:69:3d:86:e7:a6:6c:34: 4e:e3:a8:f8:40:cd:72:c2:21:6c:67:ac:ab:92:8d:4c:12:7e: e9:36:1c:bb:c2:be:16:a8:58:28:b1:9e:80:7d:8d:bf:5f:8c: 3a:69:fa:eb:63:02:52:3f:ba:c7:51:58:e9:a5:cf:ce:af:06: 96:a6:f6:d2:ae:38:a5:27:41:5f:0a:10:0d:81:3d:9b:50:a0: fe:14:e5:53:8b:ce:20:e6:0a:bb:63:43:8f:ae:c2:7f:92:3b: f2:9b:7d:5a:59:2f:5f:54:44:b9:3e:0a:0e:12:3e:c9:3f:1a: d7:55:b7:5a:83:9c:8d:09:dd:60:02:f3:04:12:c3:1a:26:e6: 38:60:c1:68:8d:ee:fd:a4:15:54:a0:c9:20:92:28:18:3a:1e: ba:26:f8:78:d2:22:1c:1d:7b:4f:20:e9:24:e1:65:9c:b3:a2: 8f:3c:d8:9e:3d:84:42:54:3e:ed:5c:57:cc:50:a4:e8:91:c4: a7:7f:c9:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErp9mnJLd9aBPa2AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ZDk0YjIyZmEtYzk2NC00OGZiLTgzNDMtNWY3YTc5NTVhYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRMzjqRrkKTyZkzfK1B5eHjp/DHj7urxlg3h z69t8vPy5/v39lxVjw39kkrO1lczuoG1jW/AJ/SvCcONlpH2LVeSF8IdZyCUgmux 7X+/97/7B6a1IpM4B3hPw8I8sdh70o1Zz8C28fX2uzOi4eQEF97jS8Tyn1IjUFm2 9Anl3fvx6b4xHWrhnD9sk56uzzrxbb7+vT5KecvwlFSMm71WO8aeQNKqHPom0miX K5wOjF09V58dfwnN9JHh6HulLjLtuVJvqPvXyyXxT+IvsmwlfXSmm5qSIHAMWVVl q5Gu/BiOzqcm/FMzxnd0Y0qWRn4BRvC6mBRUV30gsYb4HnbqhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO+UPayXrcv7CDc3N/dFuXwb6Cd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvZGMzYzVkY2QtZmFhZC0z YjA3LWEzNzUtZTdlMmRiN2Y4Mzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgEzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBr8ADZvgkxUqB2AdLRRZNSXu3YgSvPofwBdY8Q1qfndStFP4Qo86Nc NipfZkcwU3DYGCZfeWcrCIfA+H04GzT3nmk9huembDRO46j4QM1ywiFsZ6yrko1M En7pNhy7wr4WqFgosZ6AfY2/X4w6afrrYwJSP7rHUVjppc/OrwaWpvbSrjilJ0Ff ChANgT2bUKD+FOVTi84g5gq7Y0OPrsJ/kjvym31aWS9fVES5PgoOEj7JPxrXVbda g5yNCd1gAvMEEsMaJuY4YMFoje79pBVUoMkgkigYOh66Jvh40iIcHXtPIOkk4WWc s6KPPNiePYRCVD7tXFfMUKTokcSnf8k6 -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:32 2025 by rpki-client