$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c68f4f7d-04c1-3c5e-9859-a794a4fce8db.roa File: c68f4f7d-04c1-3c5e-9859-a794a4fce8db.roa (raw, json) Hash identifier: pwXS8tCggVThsyfXdhy4FDEhpaIOyRpcY7Chy9ZY6tg= Subject key identifier: 10:7A:42:7F:D3:87:12:E9:14:2D:D3:BB:FF:9C:D7:EC:9E:72:54:F7 Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584AD9364D505A7B3DBA0EC44900 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c68f4f7d-04c1-3c5e-9859-a794a4fce8db.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 38622 IP address blocks: 2607:f4e8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:4d:50:5a:7b:3d:ba:0e:c4:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=1afc6077-ed3b-459b-8ac8-fc9f735ddc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:a3:c4:0d:88:d6:fa:0a:ea:e0:af:c8:c5: bb:52:ef:09:26:40:49:7b:3e:a7:d2:3c:42:21:38: e8:00:59:ac:cf:e1:db:f9:b5:71:86:96:03:99:40: c8:72:9a:2f:16:d0:05:78:b0:05:86:8a:d2:88:77: 01:4e:ba:17:d5:0c:9e:bf:9c:60:56:26:b5:2d:4e: 68:c7:66:8d:8a:9b:7a:c4:2e:7b:31:d0:34:9c:a7: a9:86:04:bd:37:20:3a:c6:d0:1f:d8:f3:8d:62:da: c5:73:a7:2a:d3:d4:1d:f5:40:f5:84:90:1f:d2:38: bb:ac:82:24:9e:cf:f4:62:ab:db:3a:c8:f8:98:df: fa:fa:37:d2:1d:52:35:6c:d4:4f:f8:55:bf:74:79: 82:0c:16:00:8b:f2:69:11:5c:de:4a:5b:48:ec:e3: fc:dd:d6:e4:32:2e:f6:33:59:8a:3b:df:96:6b:e7: 00:46:d7:e2:be:48:60:33:9f:bc:3b:88:97:92:27: 11:e5:78:2b:a4:b7:10:23:11:80:36:73:72:15:16: 4d:a1:f6:a8:5c:72:aa:f6:0a:ce:f3:4b:5e:1b:50: 73:f5:de:d5:af:42:58:23:55:9f:08:d3:4d:7e:d6: 85:2a:c4:03:52:e5:dc:ea:05:38:08:b4:60:c1:0d: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7A:42:7F:D3:87:12:E9:14:2D:D3:BB:FF:9C:D7:EC:9E:72:54:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c68f4f7d-04c1-3c5e-9859-a794a4fce8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv6: 2607:f4e8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:88:e5:65:c7:c4:e6:f6:c1:e5:db:ce:bf:2b:2d:46:e4:af: 45:32:29:b3:64:df:02:6f:6d:cc:ec:5c:6f:65:32:d2:14:db: 8b:4b:a2:a9:d6:5d:a5:7e:d4:92:d3:77:3c:af:2c:87:36:19: 9a:76:0e:42:84:55:22:58:1c:ec:a2:b7:e5:a7:34:37:34:0d: 07:36:b8:49:d8:d6:5c:00:06:68:9b:2b:51:94:9c:65:3a:00: 96:8c:6b:d1:fa:d6:6d:b5:e1:23:22:85:69:73:d5:79:07:2b: 54:7e:65:6d:d7:8e:c7:9e:29:bc:a5:0d:cb:47:97:83:29:f3: 92:e7:66:8b:93:62:b3:3a:74:a6:5b:8e:31:3f:93:43:e9:d7: 1a:e5:b2:ac:ec:ad:22:a4:c6:49:15:62:d0:7b:fe:31:f2:d9: 4c:e6:93:2c:17:ac:3c:5f:b4:53:cb:02:d1:87:ff:d0:dc:98: 09:d4:7d:36:2c:0e:39:e5:7a:21:79:3c:91:a0:47:5a:cc:42: e3:e5:90:a2:ac:d2:6b:88:f9:b6:6e:e2:66:dc:5b:cd:1e:16: 48:42:3d:13:b1:53:6b:49:91:74:ff:88:98:9f:45:99:77:d4: 92:9a:b7:81:22:ae:45:16:75:e1:fc:3a:d5:13:fc:40:d2:d6: fe:28:46:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErZNk1QWns9ug7ESQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MWFmYzYwNzctZWQzYi00NTliLThhYzgtZmM5ZjczNWRkYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM2jxA2I1voK6uCvyMW7Uu8JJkBJez6n0jxC ITjoAFmsz+Hb+bVxhpYDmUDIcpovFtAFeLAFhorSiHcBTroX1Qyev5xgVia1LU5o x2aNipt6xC57MdA0nKephgS9NyA6xtAf2PONYtrFc6cq09Qd9UD1hJAf0ji7rIIk ns/0YqvbOsj4mN/6+jfSHVI1bNRP+FW/dHmCDBYAi/JpEVzeSltI7OP83dbkMi72 M1mKO9+Wa+cARtfivkhgM5+8O4iXkicR5XgrpLcQIxGANnNyFRZNofaoXHKq9grO 80teG1Bz9d7Vr0JYI1WfCNNNftaFKsQDUuXc6gU4CLRgwQ3IgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBB6Qn/ThxLpFC3Tu/+c1+yeclT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvYzY4ZjRmN2QtMDRjMS0z YzVlLTk4NTktYTc5NGE0ZmNlOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf06DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZiOVlx8Tm9sHl286/Ky1G5K9FMimzZN8Cb23M7FxvZTLSFNuLS6Kp 1l2lftSS03c8ryyHNhmadg5ChFUiWBzsorflpzQ3NA0HNrhJ2NZcAAZomytRlJxl OgCWjGvR+tZtteEjIoVpc9V5BytUfmVt147Hnim8pQ3LR5eDKfOS52aLk2KzOnSm W44xP5ND6dca5bKs7K0ipMZJFWLQe/4x8tlM5pMsF6w8X7RTywLRh//Q3JgJ1H02 LA455XoheTyRoEdazELj5ZCirNJriPm2buJm3FvNHhZIQj0TsVNrSZF0/4iYn0WZ d9SSmreBIq5FFnXh/DrVE/xA0tb+KEZG -----END CERTIFICATE-----Generated at Sun Aug 24 02:53:48 2025 by rpki-client