$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa File: e2ece0bd-96db-3f31-969b-d90af59c4720.roa (raw, json) Hash identifier: SeVhxPxbFbFnOdfepihY1g8RyK3mwCWIUrkGtk0x4BA= Subject key identifier: F8:49:C0:DD:F2:59:B4:19:03:BD:C3:E4:27:3E:C4:4E:0B:46:B2:70 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584AE9F66936D00CFE707EF9FF40 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 3477 IP address blocks: 2601:a000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:69:36:d0:0c:fe:70:7e:f9:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=5f55657a-b4fc-4b86-b3db-e2cc02d14630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:65:22:14:ca:f4:bb:cc:7a:2c:fa:9d:67: b3:cb:88:12:f4:25:7c:69:53:18:3d:6f:8e:e9:1f: 43:97:d3:0c:7f:a8:93:e7:b1:49:40:13:e8:e7:24: 34:65:3d:f8:e2:42:5f:cd:66:51:37:90:72:fd:5d: 5a:8a:cf:3d:4e:53:46:69:f2:c1:9c:76:77:57:d4: c7:92:5f:af:10:2b:21:d6:dd:0e:c8:0f:6a:6f:1c: 25:ba:c7:4c:5c:e6:4c:1f:04:30:84:0b:5f:59:2f: e4:c7:f2:d5:1c:82:f9:19:34:d9:77:29:ca:aa:d5: 79:c6:ac:c9:d2:f0:c7:0f:e8:06:79:0e:e4:b2:8a: 81:bf:d3:a5:c5:80:20:07:79:86:40:b7:13:09:cd: 01:de:24:69:e8:37:9e:35:34:56:e1:fc:83:23:39: 8f:3c:a2:5c:36:14:e3:9f:fc:b2:ad:7b:99:a5:7b: 8e:81:74:2c:c6:f9:08:2d:b7:1f:89:8a:8b:74:2c: 8f:34:76:3c:22:19:a4:37:47:99:bc:ba:93:1b:58: 13:90:54:0c:17:ee:1a:4d:8a:07:5c:73:65:97:a1: ab:85:ac:0a:2a:03:3c:db:d2:10:aa:18:92:61:3e: 11:13:7b:cb:ae:5e:b8:d4:78:1b:87:58:d2:ef:8c: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:49:C0:DD:F2:59:B4:19:03:BD:C3:E4:27:3E:C4:4E:0B:46:B2:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:31:ff:ba:c2:9a:c9:5b:2a:7c:6e:fd:b4:b2:61:5a:34:5c: e7:86:dd:f7:90:47:9f:71:31:8f:49:18:32:b1:a2:10:a3:cd: b3:a8:d1:03:14:98:91:32:5f:e9:1e:c8:ef:86:30:14:f1:93: 4e:9c:ec:93:e1:ca:68:13:a7:27:82:34:48:2f:51:82:7d:8d: b5:ed:46:0b:45:29:fe:d7:31:b3:7f:4f:51:3a:58:3e:ca:9f: 23:6d:8f:96:68:43:cb:01:4f:7b:76:cb:08:68:09:a4:f3:a5: 84:fb:af:7b:f6:e9:28:01:44:5d:b9:e9:67:72:a7:1e:93:17: d1:f9:5a:fa:59:f7:6a:3e:40:9d:b5:14:d5:42:15:2a:52:2d: 35:41:24:20:8d:c3:f5:1f:db:65:0d:52:7a:9e:f2:16:5e:31: dd:9c:da:c5:d4:69:fe:a1:c9:4d:bb:88:8e:81:19:a7:41:7e: c2:1c:db:d5:38:57:03:57:4a:6a:ab:10:fb:3e:27:cb:8f:42: 0c:89:75:c4:aa:ff:4f:f8:04:46:a8:de:37:5c:63:30:56:eb: 69:e8:49:da:f8:7c:71:38:a0:8f:2a:02:c8:a6:da:fc:2b:71: 04:34:da:7d:15:48:66:d9:15:61:c5:a0:b2:3c:96:43:32:91: 83:44:8c:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErp9mk20Az+cH75/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NWY1NTY1N2EtYjRmYy00Yjg2LWIzZGItZTJjYzAyZDE0NjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ZlIhTK9LvMeiz6nWezy4gS9CV8aVMYPW+O 6R9Dl9MMf6iT57FJQBPo5yQ0ZT344kJfzWZRN5By/V1ais89TlNGafLBnHZ3V9TH kl+vECsh1t0OyA9qbxwlusdMXOZMHwQwhAtfWS/kx/LVHIL5GTTZdynKqtV5xqzJ 0vDHD+gGeQ7ksoqBv9OlxYAgB3mGQLcTCc0B3iRp6DeeNTRW4fyDIzmPPKJcNhTj n/yyrXuZpXuOgXQsxvkILbcfiYqLdCyPNHY8IhmkN0eZvLqTG1gTkFQMF+4aTYoH XHNll6GrhawKKgM829IQqhiSYT4RE3vLrl641Hgbh1jS74z84wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPhJwN3yWbQZA73D5Cc+xE4LRrJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvZTJlY2UwYmQtOTZkYi0z ZjMxLTk2OWItZDkwYWY1OWM0NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC0Mf+6wprJWyp8bv20smFaNFznht33kEefcTGPSRgysaIQo82zqNED FJiRMl/pHsjvhjAU8ZNOnOyT4cpoE6cngjRIL1GCfY217UYLRSn+1zGzf09ROlg+ yp8jbY+WaEPLAU97dssIaAmk86WE+6979ukoAURduelncqcekxfR+Vr6WfdqPkCd tRTVQhUqUi01QSQgjcP1H9tlDVJ6nvIWXjHdnNrF1Gn+oclNu4iOgRmnQX7CHNvV OFcDV0pqqxD7PifLj0IMiXXEqv9P+ARGqN43XGMwVutp6Ena+HxxOKCPKgLIptr8 K3EENNp9FUhm2RVhxaCyPJZDMpGDRIxP -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:16 2025 by rpki-client