$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4217a579-1c18-32c3-8cbb-356419bb435c.roa File: 4217a579-1c18-32c3-8cbb-356419bb435c.roa (raw, json) Hash identifier: XpZHFUHZi8hG+YFIU9ZHAmmID7PzEGX8ZPX5xJTUxFw= Subject key identifier: 60:06:7D:89:27:13:6E:B4:3E:01:C7:61:50:49:0C:0D:6C:DE:49:8B Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584B970D03759D73BF5DFCCFEB00 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4217a579-1c18-32c3-8cbb-356419bb435c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 3477 IP address blocks: 2601:a002:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:03:75:9d:73:bf:5d:fc:cf:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=2d64cb90-69a5-42eb-9af7-df11fe7ff94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:07:90:4b:98:30:f2:3c:cb:a0:fb:33:81: 9b:52:75:f4:01:a1:8c:4c:df:83:8e:c6:61:77:ac: 4b:92:13:b3:12:a8:02:50:24:0e:85:1c:58:dd:d8: e0:8e:ec:44:38:ec:72:94:43:9a:62:67:79:6d:b9: 70:05:c8:01:3a:5e:b2:78:32:3e:fe:9f:c6:44:72: ec:e3:34:ea:51:79:71:a2:a9:07:be:75:38:35:e3: 28:cc:8e:ef:f3:86:8c:c3:f3:2f:f2:fd:ab:8e:c6: 96:f7:e9:30:87:c7:c4:09:07:aa:90:d3:c1:24:9f: 9d:5d:3c:49:1e:d4:b4:7d:b4:10:9d:16:bc:ea:a0: 06:cb:f9:91:cf:73:59:91:86:1d:8b:20:7f:0f:8c: f0:f0:db:c6:32:06:e9:6b:45:c1:e3:28:fa:9c:af: 2a:80:d9:03:2e:1f:d0:05:2c:63:8f:77:34:0d:76: dc:ee:d7:a8:06:d9:90:83:76:a2:51:3a:97:23:c0: 4c:06:21:07:0c:9e:1c:4f:dc:70:02:11:1c:6d:46: 86:33:4f:e0:3e:46:94:e8:06:d0:01:10:c6:c8:08: af:e1:ab:46:b5:c3:0b:22:dc:dc:91:38:51:b1:ec: 3c:f0:2f:45:71:97:5c:f5:97:3b:44:f4:31:76:1f: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:06:7D:89:27:13:6E:B4:3E:01:C7:61:50:49:0C:0D:6C:DE:49:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4217a579-1c18-32c3-8cbb-356419bb435c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a002:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0e:37:9b:d7:10:5e:9b:67:9a:2a:68:c4:37:9b:d4:79:41: 0b:ff:21:05:fe:54:b5:25:cd:2a:8a:8c:0d:c8:1b:7f:0a:54: 4e:59:03:19:5c:42:3c:95:fe:d6:5f:12:eb:9d:a7:4f:f2:f7: e3:2d:ba:53:94:0f:26:32:d7:88:94:50:40:97:01:eb:c2:fc: 4a:1c:46:c3:a0:01:20:17:8c:b5:f1:22:50:9f:cc:8f:00:a8: 63:e1:96:52:97:68:00:5b:24:78:e7:b0:57:a8:9b:e0:8e:1f: 6e:0b:c4:3e:78:00:8d:35:ca:f5:2f:54:c0:f7:04:cc:c2:1d: 76:0c:ac:a5:db:b6:77:30:60:79:e4:8d:03:ab:58:a7:ad:6c: 50:c5:2f:f7:d8:3b:18:6e:40:7b:42:a2:5e:20:49:a7:29:3a: b9:38:1c:6f:c0:87:23:e2:c1:32:38:d2:b0:f1:3b:11:72:02: 19:d6:4a:4a:12:a9:c6:b6:64:d6:60:c8:79:40:32:21:5b:56: 3f:65:ca:16:20:92:b4:c2:35:9e:b7:19:a4:fc:de:f3:e5:16: 8b:e3:02:38:32:4c:87:34:bb:e1:12:de:c5:da:cd:01:3d:7b: 85:f1:f1:d6:24:b1:e6:a7:2c:df:49:4f:42:c6:39:1e:dc:08: 37:60:48:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDQN1nXO/XfzP6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MmQ2NGNiOTAtNjlhNS00MmViLTlhZjctZGYxMWZlN2ZmOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiagHkEuYMPI8y6D7M4GbUnX0AaGMTN+DjsZh d6xLkhOzEqgCUCQOhRxY3djgjuxEOOxylEOaYmd5bblwBcgBOl6yeDI+/p/GRHLs 4zTqUXlxoqkHvnU4NeMozI7v84aMw/Mv8v2rjsaW9+kwh8fECQeqkNPBJJ+dXTxJ HtS0fbQQnRa86qAGy/mRz3NZkYYdiyB/D4zw8NvGMgbpa0XB4yj6nK8qgNkDLh/Q BSxjj3c0DXbc7teoBtmQg3aiUTqXI8BMBiEHDJ4cT9xwAhEcbUaGM0/gPkaU6AbQ ARDGyAiv4atGtcMLItzckThRsew88C9FcZdc9Zc7RPQxdh/s+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAGfYknE260PgHHYVBJDA1s3kmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvNDIxN2E1NzktMWMxOC0z MmMzLThjYmItMzU2NDE5YmI0MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgGgAgBf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEON5vXEF6bZ5oqaMQ3m9R5QQv/IQX+VLUlzSqKjA3IG38KVE5Z AxlcQjyV/tZfEuudp0/y9+MtulOUDyYy14iUUECXAevC/EocRsOgASAXjLXxIlCf zI8AqGPhllKXaABbJHjnsFeom+COH24LxD54AI01yvUvVMD3BMzCHXYMrKXbtncw YHnkjQOrWKetbFDFL/fYOxhuQHtCol4gSacpOrk4HG/AhyPiwTI40rDxOxFyAhnW SkoSqca2ZNZgyHlAMiFbVj9lyhYgkrTCNZ63GaT83vPlFovjAjgyTIc0u+ES3sXa zQE9e4Xx8dYkseanLN9JT0LGOR7cCDdgSHk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:27:49 2025 by rpki-client