$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa File: 8578d02e-2574-3397-9850-67ab5fdce8b7.roa (raw, json) Hash identifier: YVKz/gCQa62Gamwht3E9EBnCjFo4w02G3i3wdDCI/ps= Subject key identifier: A9:D8:F8:BD:CC:56:3C:DE:E3:86:64:E6:69:D7:95:0F:24:C9:23:85 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584CAB8C4CA6C9089D2CB099A340 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 3477 IP address blocks: 2601:a002::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:4c:a6:c9:08:9d:2c:b0:99:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=35ea3ea5-d795-4ed4-8e50-d4a908fb62c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:2a:17:ed:95:bf:4f:6d:b8:9f:ce:0e:3b: f1:3f:25:de:e7:74:1d:1d:51:81:77:41:cf:38:ab: 7e:cb:9f:8d:01:64:8a:5c:4f:93:70:6d:23:f7:26: a7:09:4f:0c:35:88:e5:db:c2:a8:a8:c7:b0:bf:9a: d6:c7:39:00:b0:3d:c9:53:ec:cb:22:4a:97:6e:f1: dd:79:02:c9:47:d8:53:33:e9:5d:8a:20:60:62:eb: a9:5a:b9:cf:07:c1:7f:d5:21:97:62:4b:cd:8a:46: cc:25:ec:79:d4:bf:da:c6:b6:9f:67:75:c2:81:49: 07:5a:8a:3d:18:f9:c9:40:ce:b8:b3:a1:93:05:03: 93:4b:eb:26:4c:49:2f:c2:3c:29:94:ea:12:5c:a0: 54:89:2e:38:36:0e:c0:fb:18:0d:5e:90:17:af:d1: bc:b1:14:48:18:47:46:37:1d:b8:58:b4:e5:fc:4c: 50:81:98:29:6d:e9:b0:0c:fa:0e:16:fd:e3:6b:d9: 14:6b:06:44:b3:a0:1f:2a:aa:9a:de:f5:70:82:83: 4c:74:9f:43:f0:15:17:fd:2e:60:05:4d:9d:5e:18: bd:4a:0f:48:4c:f8:4a:20:12:61:fa:a9:de:a9:a7: 45:be:0e:c9:72:37:b3:ef:10:ca:be:8f:2c:9b:8c: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D8:F8:BD:CC:56:3C:DE:E3:86:64:E6:69:D7:95:0F:24:C9:23:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a002::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:68:4f:69:d9:95:75:c3:62:19:68:8d:bc:c4:4c:05:01:7f: 87:20:a1:36:eb:f3:cf:4c:a1:06:51:93:8e:5e:62:56:a6:76: 20:5c:a2:3d:17:cb:e9:74:de:7c:b5:b0:73:fa:e2:de:ec:1b: 7b:57:e2:fa:67:e0:b1:98:c8:2d:12:0d:0f:90:bc:c5:ef:88: f5:5a:f3:85:46:af:f5:fd:9e:86:ef:61:1d:4d:e3:3f:08:79: d7:6c:25:8d:6a:be:fd:31:1a:5a:6c:97:ab:fd:3f:93:e0:4b: ff:4b:00:ba:be:59:97:38:73:a5:c4:d7:83:6b:af:3f:7e:59: ae:47:c8:d4:79:34:0f:4a:67:c8:2b:d1:dd:94:28:3c:9b:a0: 4f:07:d7:14:87:84:55:9a:48:b2:d0:e2:72:56:7e:02:66:35: 20:4a:d4:04:84:93:2b:ca:0c:ce:80:b8:b1:20:1d:83:2a:95: d5:de:cc:23:ac:9b:77:85:7f:35:0d:63:7a:ff:65:45:12:d0: 26:f4:f8:e4:8b:c2:42:e1:32:3e:5e:7b:f4:c7:59:03:37:7f: 35:75:40:48:96:d0:ad:e8:eb:f9:2d:f9:02:ab:c8:4d:24:8a: 3d:5b:d8:cd:6f:04:71:dc:1d:af:07:d4:53:71:e8:b9:c0:ca: 8b:9a:ae:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyrjEymyQidLLCZo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk MzVlYTNlYTUtZDc5NS00ZWQ0LThlNTAtZDRhOTA4ZmI2MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17QqF+2Vv09tuJ/ODjvxPyXe53QdHVGBd0HP OKt+y5+NAWSKXE+TcG0j9yanCU8MNYjl28KoqMewv5rWxzkAsD3JU+zLIkqXbvHd eQLJR9hTM+ldiiBgYuupWrnPB8F/1SGXYkvNikbMJex51L/axrafZ3XCgUkHWoo9 GPnJQM64s6GTBQOTS+smTEkvwjwplOoSXKBUiS44Ng7A+xgNXpAXr9G8sRRIGEdG Nx24WLTl/ExQgZgpbemwDPoOFv3ja9kUawZEs6AfKqqa3vVwgoNMdJ9D8BUX/S5g BU2dXhi9Sg9ITPhKIBJh+qneqadFvg7Jcjez7xDKvo8sm4zTCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKnY+L3MVjze44Zk5mnXlQ8kySOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvODU3OGQwMmUtMjU3NC0z Mzk3LTk4NTAtNjdhYjVmZGNlOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgAjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC8aE9p2ZV1w2IZaI28xEwFAX+HIKE26/PPTKEGUZOOXmJWpnYgXKI9 F8vpdN58tbBz+uLe7Bt7V+L6Z+CxmMgtEg0PkLzF74j1WvOFRq/1/Z6G72EdTeM/ CHnXbCWNar79MRpabJer/T+T4Ev/SwC6vlmXOHOlxNeDa68/flmuR8jUeTQPSmfI K9HdlCg8m6BPB9cUh4RVmkiy0OJyVn4CZjUgStQEhJMrygzOgLixIB2DKpXV3swj rJt3hX81DWN6/2VFEtAm9Pjki8JC4TI+Xnv0x1kDN381dUBIltCt6Ov5LfkCq8hN JIo9W9jNbwRx3B2vB9RTcei5wMqLmq53 -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:21 2026 by rpki-client