$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa File: a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa (raw, json) Hash identifier: jVIyXIBD6s4gFcgQZMH6pfCEHRTOyudRozGiXou8kSU= Subject key identifier: A1:AD:7E:D6:ED:BD:A6:C7:0A:5F:A8:75:01:EA:DE:95:97:E5:3A:93 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584929E3C7F72A8FBED7173C8200 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 3477 IP address blocks: 2601:a004::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:c7:f7:2a:8f:be:d7:17:3c:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=9f17c2a7-03d4-4b24-a449-3b2a3a553d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:79:c7:d8:b4:60:f1:42:f9:68:d2:b2:60:e9: b2:34:a8:85:fe:b6:b7:cf:0d:fd:a3:0c:5d:d3:c8: b4:c6:b3:f3:cb:ec:b2:ef:08:eb:33:d7:5d:a5:26: ef:de:43:44:3b:99:55:6c:98:b2:58:55:38:33:cc: 77:56:39:0f:44:b9:7f:da:0d:6a:2d:b9:a4:95:21: 52:24:08:7b:84:84:a1:cb:50:66:64:70:af:5d:b3: 78:ec:49:45:7e:c8:e6:15:e1:43:2a:b8:85:cf:99: 2e:e5:d0:31:10:b9:a7:3a:7a:e1:6e:c9:a8:73:4a: 90:de:70:81:83:c2:c1:ef:f5:24:1b:a4:54:2e:c1: f1:f2:f5:22:d1:4a:03:59:01:3d:23:9d:32:a1:1f: e6:0a:5e:c2:8c:96:2f:f6:93:f9:d1:fc:1c:5f:7a: d0:b6:3e:a5:a6:87:45:08:12:cb:d8:ce:01:2b:eb: 0d:34:ec:ee:c3:4e:ba:c1:e5:ec:83:6a:0a:48:e8: 0c:96:a9:a6:f2:c6:d4:8a:12:3e:98:1f:69:38:f2: 1a:dd:34:a5:81:f4:f9:0e:f3:44:ce:6c:85:d4:7b: 6a:52:70:9f:0d:a5:79:b8:bb:23:a8:5a:fd:bb:db: 92:f9:3d:c0:a4:69:03:62:a2:d8:43:08:65:c8:f1: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AD:7E:D6:ED:BD:A6:C7:0A:5F:A8:75:01:EA:DE:95:97:E5:3A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a004::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:30:a4:a5:21:07:1e:00:ae:bd:96:5d:dd:41:3d:a9:80:82: 89:57:60:77:12:66:0b:ff:17:a9:57:4d:f1:7b:7a:20:67:a9: 27:09:cd:07:83:e6:72:17:fd:2c:4e:67:97:41:1d:9a:56:86: 33:e1:ae:f4:19:3c:a0:d8:53:79:7f:02:1f:05:89:33:01:40: 81:e6:0b:2b:6e:c1:2b:89:e1:8d:83:bd:52:51:00:61:97:81: 19:3a:8f:43:8d:77:50:a9:26:86:1e:93:18:33:f9:95:d8:c0: f0:01:93:cb:1c:db:19:73:cd:5c:dc:ab:ea:30:11:4d:1b:98: 12:ca:34:65:f4:db:9e:f8:10:a2:6d:82:2c:ba:ce:51:93:de: 03:73:e2:c7:a4:fc:42:0b:3f:cf:8a:79:78:0e:24:41:01:31: 55:db:2c:80:25:18:0e:55:36:26:5c:f3:b9:ac:83:54:99:ea: 11:70:6b:ec:8d:f2:1a:aa:d7:59:59:cd:66:ba:f1:74:5a:c6: a2:88:01:40:07:5f:46:bb:20:23:e0:09:bf:51:ca:ff:de:2e: c6:81:72:ef:95:78:3a:32:de:0a:43:9e:ca:a2:ad:ed:70:71: c8:49:38:79:2b:99:f6:83:82:19:35:37:d7:e2:b9:60:ac:19: b7:4b:3c:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkp48f3Ko++1xc8ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk OWYxN2MyYTctMDNkNC00YjI0LWE0NDktM2IyYTNhNTUzZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXnH2LRg8UL5aNKyYOmyNKiF/ra3zw39owxd 08i0xrPzy+yy7wjrM9ddpSbv3kNEO5lVbJiyWFU4M8x3VjkPRLl/2g1qLbmklSFS JAh7hIShy1BmZHCvXbN47ElFfsjmFeFDKriFz5ku5dAxELmnOnrhbsmoc0qQ3nCB g8LB7/UkG6RULsHx8vUi0UoDWQE9I50yoR/mCl7CjJYv9pP50fwcX3rQtj6lpodF CBLL2M4BK+sNNOzuw066weXsg2oKSOgMlqmm8sbUihI+mB9pOPIa3TSlgfT5DvNE zmyF1HtqUnCfDaV5uLsjqFr9u9uS+T3ApGkDYqLYQwhlyPGI2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKGtftbtvabHCl+odQHq3pWX5TqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTg1NGZhNmEtOGZmMi0z OWNkLWJiOGEtYmYwNDEyNjcyY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKMKSlIQceAK69ll3dQT2pgIKJV2B3EmYL/xepV03xe3ogZ6knCc0H g+ZyF/0sTmeXQR2aVoYz4a70GTyg2FN5fwIfBYkzAUCB5gsrbsErieGNg71SUQBh l4EZOo9DjXdQqSaGHpMYM/mV2MDwAZPLHNsZc81c3KvqMBFNG5gSyjRl9Nue+BCi bYIsus5Rk94Dc+LHpPxCCz/Pinl4DiRBATFV2yyAJRgOVTYmXPO5rINUmeoRcGvs jfIaqtdZWc1muvF0WsaiiAFAB19GuyAj4Am/Ucr/3i7GgXLvlXg6Mt4KQ57Koq3t cHHISTh5K5n2g4IZNTfX4rlgrBm3SzxE -----END CERTIFICATE-----Generated at Fri May 2 08:11:41 2025 by rpki-client