$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa File: 5e197e82-6568-36db-8744-a92186db0276.roa (raw, json) Hash identifier: Zwj8JDoO1v6rAcL2vLR1AW8pPuOhFhxmxsOxhX2mAjc= Subject key identifier: F5:BD:5F:FA:B5:DA:F2:6F:15:F8:4D:44:0D:A6:91:24:23:93:15:98 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584B4FDC76A4C6AF8A0C3B1081A0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 40623 IP address blocks: 2610:20:8020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:76:a4:c6:af:8a:0c:3b:10:81:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=a65a5383-8025-4f28-9693-0455d901ccb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:6b:4e:c1:01:da:07:b5:40:75:8d:30:b5: 7c:6c:e2:a5:a0:03:e4:77:da:f3:c1:ae:8a:09:57: e6:75:ab:24:d2:6f:68:e0:f8:0f:dd:3b:25:7d:06: ac:38:42:a2:7d:5d:fe:98:10:03:6f:3c:4d:ca:74: 6e:cd:b3:95:92:f6:d2:dc:f9:52:f3:d3:a5:0b:6f: 9e:d7:61:64:c7:91:a0:5a:43:76:df:9c:87:7e:54: 63:94:83:f8:cb:2d:8d:1c:02:57:1b:09:90:8f:30: 71:57:2a:4d:27:c7:79:0f:5e:b4:08:1e:97:ee:9f: 60:06:b8:db:c7:95:7b:f4:ff:3c:76:bf:d5:4d:49: 99:ac:7f:e6:19:77:7a:ba:0e:e0:0a:dc:d4:a1:c3: fc:0b:b2:f6:69:65:25:36:99:e4:8c:7b:01:e6:51: 89:4f:32:30:ea:94:45:bd:d6:19:da:fb:d2:2c:f5: 06:51:70:45:cf:ab:b9:94:56:17:bd:ce:e4:21:54: 34:94:2c:1f:e1:26:96:5f:21:5c:57:60:b9:7b:2a: 77:d4:3b:bb:a8:8c:d2:1b:a0:94:24:fc:61:e3:30: ff:64:46:ad:06:f1:d7:8a:07:3d:96:2a:d3:a2:71: 35:a7:32:14:dd:46:6d:90:6c:3a:dd:93:80:1f:b6: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BD:5F:FA:B5:DA:F2:6F:15:F8:4D:44:0D:A6:91:24:23:93:15:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:8020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1a:33:2c:b4:26:a7:a5:df:92:f3:e0:8d:d9:aa:ee:4e:4e: fe:bf:81:7c:56:79:6e:1b:bf:bc:75:87:95:d4:c8:08:a6:73: 66:7b:72:4b:ea:0f:7d:2c:fc:d5:83:09:d9:48:b8:fc:c7:bc: db:7a:d2:20:8c:fb:8a:58:bd:52:a9:87:78:f8:d3:1c:98:00: d5:24:61:ce:bd:af:18:78:03:23:fd:5c:71:5a:c9:dd:ce:a0: 53:ca:97:50:ba:59:a0:92:b2:87:79:59:0b:36:5b:0e:7b:94: ba:b8:17:04:52:cb:62:61:cb:c5:14:4a:a1:43:54:f1:68:0c: 96:04:bf:cc:cb:fa:26:6a:ec:bc:d9:77:ae:4c:84:d3:d4:86: ca:79:46:d9:62:27:c8:53:7a:24:38:52:61:d6:bd:23:c6:8b: 23:78:eb:d1:17:46:e9:8d:28:b3:6b:0b:c2:86:43:8b:6b:35: c6:6d:e5:53:fb:6c:a4:87:dd:d7:90:7a:af:07:5c:dd:34:82: 6b:49:fd:90:f4:ec:bf:e7:91:f2:f2:1d:31:99:4c:e7:92:59: bc:69:d3:b8:d8:7b:10:79:08:dd:df:de:70:50:98:4d:aa:7a: a6:5e:82:04:b1:49:1a:3e:86:83:5c:7b:28:6e:26:e9:3e:82: b4:b5:9e:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtP3Hakxq+KDDsQgaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTY1YTUzODMtODAyNS00ZjI4LTk2OTMtMDQ1NWQ5MDFjY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqRrTsEB2ge1QHWNMLV8bOKloAPkd9rzwa6K CVfmdask0m9o4PgP3TslfQasOEKifV3+mBADbzxNynRuzbOVkvbS3PlS89OlC2+e 12Fkx5GgWkN235yHflRjlIP4yy2NHAJXGwmQjzBxVypNJ8d5D160CB6X7p9gBrjb x5V79P88dr/VTUmZrH/mGXd6ug7gCtzUocP8C7L2aWUlNpnkjHsB5lGJTzIw6pRF vdYZ2vvSLPUGUXBFz6u5lFYXvc7kIVQ0lCwf4SaWXyFcV2C5eyp31Du7qIzSG6CU JPxh4zD/ZEatBvHXigc9lirTonE1pzIU3UZtkGw63ZOAH7aGdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPW9X/q12vJvFfhNRA2mkSQjkxWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvNWUxOTdlODItNjU2OC0z NmRiLTg3NDQtYTkyMTg2ZGIwMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQaMyy0Jqel35Lz4I3Zqu5OTv6/gXxWeW4bv7x1h5XUyAimc2Z7 ckvqD30s/NWDCdlIuPzHvNt60iCM+4pYvVKph3j40xyYANUkYc69rxh4AyP9XHFa yd3OoFPKl1C6WaCSsod5WQs2Ww57lLq4FwRSy2Jhy8UUSqFDVPFoDJYEv8zL+iZq 7LzZd65MhNPUhsp5RtliJ8hTeiQ4UmHWvSPGiyN469EXRumNKLNrC8KGQ4trNcZt 5VP7bKSH3deQeq8HXN00gmtJ/ZD07L/nkfLyHTGZTOeSWbxp07jYexB5CN3f3nBQ mE2qeqZeggSxSRo+hoNceyhuJuk+grS1nqM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:27 2025 by rpki-client