$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa File: a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa (raw, json) Hash identifier: NOqJSNv7/vsBZ6sTTAhCQArqwuTM45ltd/afgcdzSwI= Subject key identifier: D3:C4:FF:FA:5A:41:A8:3C:49:2E:C5:FC:A4:1F:CE:EB:1F:2D:92:FA Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A093A9D516E170A08560FD3C0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 3477 IP address blocks: 2601:a004::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9d:51:6e:17:0a:08:56:0f:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=a01daee5-9e21-42b5-a319-d21a45f07c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:43:62:88:95:6d:0c:d0:d2:fe:79:b8:1b: 2b:1e:06:e3:27:2e:7a:f7:cc:b2:3d:34:9e:3e:f7: 21:69:6d:4a:8f:05:2d:d3:6a:8d:b9:8a:27:b5:4d: 9f:b9:e2:81:77:5c:6d:72:d2:f2:3d:1c:44:70:7b: 86:40:84:53:9e:d4:d4:39:b9:c1:a8:59:c2:ff:00: f7:8d:ee:2a:76:2e:57:0f:62:5a:fa:f7:28:7d:e0: c2:0e:80:a6:7d:7f:f6:de:ba:9f:97:8c:bf:2b:95: 24:fb:ce:48:6b:06:16:59:84:72:a0:39:b5:f5:eb: ef:f2:9e:d1:ea:96:10:17:be:24:70:11:8b:d2:39: fd:02:90:a7:62:53:04:79:e5:cc:d5:79:0d:e2:ae: 9e:f9:b4:ab:aa:0c:f9:1a:9b:3a:17:2d:2f:84:17: 6f:2f:a2:af:6e:7c:5a:3f:94:56:60:37:97:92:14: 1b:16:c0:22:48:f9:8b:c0:33:3a:76:ae:4d:77:35: 20:be:c1:2d:ab:02:e9:1b:3c:61:1a:6b:02:06:26: 6f:e8:f0:09:75:48:ad:57:1a:39:b5:45:f3:d2:93: 01:b6:69:76:7a:81:98:4d:68:ef:80:f9:10:4f:bc: 3d:83:19:a8:ce:0a:f1:52:4b:68:62:b7:b8:25:63: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C4:FF:FA:5A:41:A8:3C:49:2E:C5:FC:A4:1F:CE:EB:1F:2D:92:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a004::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3d:ae:40:49:df:c0:08:d4:6c:54:d3:51:ff:1c:54:07:f7: 57:56:21:0d:f9:dd:96:d1:5b:5e:06:bb:61:ab:23:c9:8e:68: 0a:fc:86:da:01:13:3d:fe:af:19:a8:80:8c:d3:cb:df:dc:bd: ab:41:26:8d:e8:be:db:a1:63:27:92:d5:00:44:15:e6:33:f3: fc:fd:fb:ce:7f:53:99:9a:f1:1d:75:87:98:4a:47:24:4c:5f: 87:d6:25:0c:63:de:01:70:f4:e1:c3:74:c8:08:1f:2c:93:24: a3:5d:70:36:d2:ac:a7:65:29:67:84:88:d6:59:5f:6e:d5:e1: ad:7e:9f:ce:81:fc:8c:0e:59:ee:55:4a:ad:13:fc:40:10:97: fb:12:31:71:61:5c:20:1a:8b:49:e4:f8:5f:3e:7d:30:8a:e7: 05:1e:7c:25:b7:15:ac:d7:3a:7c:51:43:64:54:75:50:9f:1d: 6b:ab:c4:bc:5c:6c:96:5c:fb:cc:7e:e2:b4:7f:10:aa:88:9e: f0:8b:64:94:5c:dd:fc:c7:70:c5:f6:f8:d9:26:47:23:db:08: 51:ad:c0:13:39:dd:d7:3c:0e:2d:d1:5a:f0:d8:b5:fb:3c:d1: 0d:04:cd:e4:2b:f5:ac:8a:99:50:cf:f7:fa:74:35:d6:4c:ad: 33:ce:d7:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoJOp1RbhcKCFYP08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk YTAxZGFlZTUtOWUyMS00MmI1LWEzMTktZDIxYTQ1ZjA3Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G1DYoiVbQzQ0v55uBsrHgbjJy5698yyPTSe PvchaW1KjwUt02qNuYontU2fueKBd1xtctLyPRxEcHuGQIRTntTUObnBqFnC/wD3 je4qdi5XD2Ja+vcofeDCDoCmfX/23rqfl4y/K5Uk+85IawYWWYRyoDm19evv8p7R 6pYQF74kcBGL0jn9ApCnYlMEeeXM1XkN4q6e+bSrqgz5Gps6Fy0vhBdvL6Kvbnxa P5RWYDeXkhQbFsAiSPmLwDM6dq5NdzUgvsEtqwLpGzxhGmsCBiZv6PAJdUitVxo5 tUXz0pMBtml2eoGYTWjvgPkQT7w9gxmozgrxUktoYre4JWPIcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNPE//paQag8SS7F/KQfzusfLZL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTg1NGZhNmEtOGZmMi0z OWNkLWJiOGEtYmYwNDEyNjcyY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwPa5ASd/ACNRsVNNR/xxUB/dXViEN+d2W0VteBrthqyPJjmgK/Iba ARM9/q8ZqICM08vf3L2rQSaN6L7boWMnktUARBXmM/P8/fvOf1OZmvEddYeYSkck TF+H1iUMY94BcPThw3TICB8skySjXXA20qynZSlnhIjWWV9u1eGtfp/OgfyMDlnu VUqtE/xAEJf7EjFxYVwgGotJ5PhfPn0wiucFHnwltxWs1zp8UUNkVHVQnx1rq8S8 XGyWXPvMfuK0fxCqiJ7wi2SUXN38x3DF9vjZJkcj2whRrcATOd3XPA4t0Vrw2LX7 PNENBM3kK/WsiplQz/f6dDXWTK0zztfu -----END CERTIFICATE-----Generated at Wed Jun 18 10:18:52 2025 by rpki-client