$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa File: 9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa (raw, json) Hash identifier: iyQopxD/YdtyKvHnCr3xDFlSpNiIlnZ2jfjxnuVcfBk= Subject key identifier: CD:E8:86:51:18:4C:EE:79:D9:03:5F:9C:67:D3:A8:9A:B5:09:FC:CC Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584AFC1C013DC550298AA464E400 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 0 IP address blocks: 2601:a001::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:01:3d:c5:50:29:8a:a4:64:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=7dbf9af1-012a-4e59-b7ff-1d1210ea0531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:bf:70:48:a0:d5:ad:17:54:4d:2a:d2:5d: 65:68:90:0c:b3:b0:1b:ff:a0:8a:34:86:44:9a:ae: ad:a8:98:b4:88:5c:b0:47:36:54:7a:41:e7:5a:5c: c4:ba:7f:ed:e1:4a:f9:5f:c7:f8:ba:1f:0a:a0:0b: 7d:6e:5c:15:8e:ad:2c:26:80:49:b8:d0:89:df:b6: e8:0d:cc:63:0b:1a:8d:77:d3:ba:1b:65:10:0d:c7: 1a:84:72:6d:0b:61:48:dc:18:db:af:75:d3:ad:07: 51:59:5f:52:0a:ac:c9:88:0d:76:9e:c3:4e:1c:14: 52:ca:64:b0:60:bd:a3:dc:25:75:23:eb:a4:f9:a0: 58:a1:22:2f:bc:d9:b9:3c:41:d4:50:59:a5:2f:52: 24:ef:51:90:0d:6f:3d:2d:e6:6c:47:25:44:59:a0: 7f:32:c2:6b:8a:28:1d:8d:3a:a0:38:62:22:69:9f: ac:ff:10:d3:95:4c:0b:53:ba:a1:26:60:92:5c:a0: 68:b4:37:eb:4a:2b:81:bc:b7:99:fa:3c:72:95:74: da:0d:b4:48:04:f7:cc:c7:9e:2c:91:8b:4a:4a:0a: 67:9a:3a:17:4b:56:b0:af:f3:a4:03:4b:41:42:00: 14:2b:ec:d1:be:ba:e3:4a:7b:56:79:df:b1:2c:d3: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E8:86:51:18:4C:EE:79:D9:03:5F:9C:67:D3:A8:9A:B5:09:FC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a001::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4f:0e:06:ef:c5:b4:f6:ba:0b:fd:81:fe:51:6c:3e:3a:d4: 79:ef:74:90:25:8b:97:06:02:d8:22:f9:ab:0e:13:86:61:2f: 4c:fc:49:b1:5f:0d:f1:b6:5e:46:d5:c2:5b:20:5d:ec:f9:2d: 18:c8:26:af:a3:42:d6:24:a9:fc:e7:2a:ba:7c:27:c4:a4:f9: b7:e8:9c:f0:5e:a3:06:62:b5:c5:3e:68:a4:b8:1c:c0:29:33: 73:55:b0:2b:99:bd:96:c1:a6:df:ef:85:a8:d2:d6:86:19:06: 4f:97:54:23:13:2a:0a:af:ae:90:4c:6d:3c:42:90:13:ce:9a: 7d:45:29:9d:b9:68:2f:20:91:de:d2:92:d5:c5:58:a8:c1:81: e5:39:a5:9e:40:e2:01:23:9e:c1:2c:c7:60:f6:ff:d0:d0:e8: 06:c5:c9:cc:69:68:25:50:87:3d:2f:b7:60:f3:5a:23:ca:64: ad:b7:b0:04:35:99:b1:aa:2c:58:1f:14:66:06:d6:e0:80:56: 77:84:1a:bc:a4:c8:de:d0:62:72:ff:bb:cc:d3:75:64:b9:e4: 32:d8:66:0e:cf:72:03:64:35:74:62:20:8e:87:53:51:8e:21: dc:ec:f6:52:76:2a:92:c5:b8:92:0b:7f:09:f9:c5:4f:bf:a5: 0c:dd:7f:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr8HAE9xVApiqRk5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk N2RiZjlhZjEtMDEyYS00ZTU5LWI3ZmYtMWQxMjEwZWEwNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPC/cEig1a0XVE0q0l1laJAMs7Ab/6CKNIZE mq6tqJi0iFywRzZUekHnWlzEun/t4Ur5X8f4uh8KoAt9blwVjq0sJoBJuNCJ37bo DcxjCxqNd9O6G2UQDccahHJtC2FI3Bjbr3XTrQdRWV9SCqzJiA12nsNOHBRSymSw YL2j3CV1I+uk+aBYoSIvvNm5PEHUUFmlL1Ik71GQDW89LeZsRyVEWaB/MsJriigd jTqgOGIiaZ+s/xDTlUwLU7qhJmCSXKBotDfrSiuBvLeZ+jxylXTaDbRIBPfMx54s kYtKSgpnmjoXS1awr/OkA0tBQgAUK+zRvrrjSntWed+xLNOyAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM3ohlEYTO552QNfnGfTqJq1CfzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvOWQxZTI5NDktNzI1ZC0z MGU0LTlmNTMtMzhiZDBlNmI3ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgATBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4Tw4G78W09roL/YH+UWw+OtR573SQJYuXBgLYIvmrDhOGYS9M/Emx Xw3xtl5G1cJbIF3s+S0YyCavo0LWJKn85yq6fCfEpPm36JzwXqMGYrXFPmikuBzA KTNzVbArmb2Wwabf74Wo0taGGQZPl1QjEyoKr66QTG08QpATzpp9RSmduWgvIJHe 0pLVxViowYHlOaWeQOIBI57BLMdg9v/Q0OgGxcnMaWglUIc9L7dg81ojymStt7AE NZmxqixYHxRmBtbggFZ3hBq8pMje0GJy/7vM03VkueQy2GYOz3IDZDV0YiCOh1NR jiHc7PZSdiqSxbiSC38J+cVPv6UM3X8A -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:25 2025 by rpki-client