$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa File: e2ece0bd-96db-3f31-969b-d90af59c4720.roa (raw, json) Hash identifier: inrFr9jhr9MV8GeSnItpOVq7tbmnd/YsqHI5T7F5E7E= Subject key identifier: 07:B3:A9:F1:7C:97:85:56:29:74:71:A9:8E:75:40:25:9A:BA:D6:20 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A093A9D28BE5E1C52132F459F Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 3477 IP address blocks: 2601:a000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9d:28:be:5e:1c:52:13:2f:45:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=3ec26628-cafe-4e83-a338-46a1c4688283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:30:fc:5f:5c:a1:ac:75:ce:5d:49:d9:29: ef:b3:8b:80:ec:41:94:b8:dc:24:c9:54:61:e6:16: 64:06:81:9a:37:1e:1a:79:bd:32:37:fb:21:a0:f1: db:a8:f1:53:e2:e5:2b:16:0e:7b:36:15:1f:a1:80: 0d:24:8a:62:ea:4e:82:72:01:9d:57:b8:b3:7d:38: ce:a5:88:8c:96:2e:5c:b1:be:8f:b4:ff:3f:35:7d: 49:9a:77:bb:47:05:1b:d1:3d:3c:ca:37:93:b1:55: bf:8e:a1:15:ab:1e:c9:6b:df:b4:ea:fc:83:64:c4: f3:34:cf:fe:39:f6:02:46:ac:25:b4:77:bb:6b:88: f0:05:2b:6b:9f:e3:1e:31:7e:e7:b7:4f:86:6b:88: e3:d4:f2:f1:62:18:5e:49:f4:66:66:22:ba:55:31: 07:e1:db:39:70:6c:bf:53:f6:f1:3d:f3:d8:a4:0b: 67:45:29:3a:1f:c5:49:fc:eb:b1:4e:f4:2f:3d:b3: 12:29:3b:e2:00:5f:69:72:88:cf:2b:4a:b4:5f:60: a0:0b:26:e8:c5:2d:d8:91:f6:57:d2:46:12:aa:7d: 35:ef:4b:1d:0a:f2:79:38:a2:4f:94:3d:77:3c:9e: 13:96:6d:79:fa:ea:b0:68:3b:9c:03:35:f4:ab:8a: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:A9:F1:7C:97:85:56:29:74:71:A9:8E:75:40:25:9A:BA:D6:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:74:4f:7e:c3:78:02:fb:05:e3:71:97:05:91:a2:c9:3a:4e: 89:55:1f:eb:8a:2c:b4:47:ea:28:0d:8d:b9:db:ae:fe:1b:45: 7b:7b:3c:bb:1b:49:2f:6f:30:82:34:49:03:ba:4c:13:bc:46: c7:6b:85:8e:eb:d9:99:7b:31:fe:4a:00:24:ea:5a:cc:51:88: d0:84:38:4e:5e:65:e9:40:cc:38:07:8c:d4:2f:fa:f4:02:6f: 56:59:59:24:ed:5a:02:d5:42:84:f2:08:02:ad:94:da:a7:4e: a5:72:0b:5d:92:b9:d9:63:93:da:67:47:3e:47:51:75:be:09: a9:dd:43:2d:30:dc:1e:bf:9c:78:a0:a7:0b:5b:01:68:57:ee: f9:1e:9e:2d:9f:e6:8b:47:d7:f7:9f:ae:9a:88:fe:eb:05:2c: 3f:f7:d0:69:36:39:bd:0a:de:46:7c:c4:79:d4:bc:13:1a:e0: 7b:92:b7:d4:2c:50:3c:76:aa:94:f0:75:b0:8d:55:69:94:12: 77:6e:58:ee:86:35:d8:d8:15:f1:ac:69:6b:ee:b3:5d:ab:2c: 1e:ee:ad:e3:ac:c1:f4:f7:5f:bf:b5:16:e4:8e:48:c8:5e:be: 1f:0e:bd:d0:91:12:4e:09:d3:e4:30:23:02:77:78:89:e9:c2: 80:89:59:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoJOp0ovl4cUhMvRZ8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk M2VjMjY2MjgtY2FmZS00ZTgzLWEzMzgtNDZhMWM0Njg4MjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUow/F9coax1zl1J2Snvs4uA7EGUuNwkyVRh 5hZkBoGaNx4aeb0yN/shoPHbqPFT4uUrFg57NhUfoYANJIpi6k6CcgGdV7izfTjO pYiMli5csb6PtP8/NX1Jmne7RwUb0T08yjeTsVW/jqEVqx7Ja9+06vyDZMTzNM/+ OfYCRqwltHe7a4jwBStrn+MeMX7nt0+Ga4jj1PLxYhheSfRmZiK6VTEH4ds5cGy/ U/bxPfPYpAtnRSk6H8VJ/OuxTvQvPbMSKTviAF9pcojPK0q0X2CgCyboxS3YkfZX 0kYSqn0170sdCvJ5OKJPlD13PJ4Tlm15+uqwaDucAzX0q4q2owIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAezqfF8l4VWKXRxqY51QCWautYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvZTJlY2UwYmQtOTZkYi0z ZjMxLTk2OWItZDkwYWY1OWM0NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBadE9+w3gC+wXjcZcFkaLJOk6JVR/riiy0R+ooDY25267+G0V7ezy7 G0kvbzCCNEkDukwTvEbHa4WO69mZezH+SgAk6lrMUYjQhDhOXmXpQMw4B4zUL/r0 Am9WWVkk7VoC1UKE8ggCrZTap06lcgtdkrnZY5PaZ0c+R1F1vgmp3UMtMNwev5x4 oKcLWwFoV+75Hp4tn+aLR9f3n66aiP7rBSw/99BpNjm9Ct5GfMR51LwTGuB7krfU LFA8dqqU8HWwjVVplBJ3bljuhjXY2BXxrGlr7rNdqywe7q3jrMH091+/tRbkjkjI Xr4fDr3QkRJOCdPkMCMCd3iJ6cKAiVnm -----END CERTIFICATE-----Generated at Mon Jun 16 21:40:33 2025 by rpki-client