$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa File: 87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa (raw, json) Hash identifier: ondXQK6ikfq/U35KI9/fy1Vw9g7g8tZOiAFRoqKXa9o= Subject key identifier: 4B:86:01:1B:2A:90:B5:DF:DE:FB:2F:13:27:E8:EB:2C:E5:1F:A1:02 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584B25FC3D3533692D895423EC00 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 0 IP address blocks: 2620:2f:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3d:35:33:69:2d:89:54:23:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=ecdbfcb5-9a37-4287-ac4e-7911e44d00e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:67:cd:3b:79:83:db:55:2e:5a:73:1f:ca: 0b:ff:65:fc:f0:92:37:57:17:bb:2a:ab:c7:10:4f: 13:50:2b:d7:24:5b:e2:13:12:36:4b:6e:dc:af:db: de:66:0e:28:08:ba:99:78:db:40:e2:d0:55:bf:d4: 79:4c:10:37:45:24:67:40:e5:b1:72:59:04:b9:cb: 66:f9:c3:fc:8b:a5:c7:54:9b:0d:fd:fa:c1:19:c2: fb:3e:1c:9a:81:75:93:bd:69:9c:59:78:63:9e:4a: bf:86:32:cd:62:4c:fb:6d:f8:90:db:82:8a:9e:02: 28:f3:dd:60:4b:1a:2f:64:e2:a6:8f:68:fb:23:ab: 2f:c2:d2:f3:40:93:ce:a1:ea:c3:76:7b:cf:4e:6d: f7:68:26:15:37:e1:d9:55:f0:43:7a:d9:18:68:21: 63:70:7c:e0:19:b5:2a:e0:f4:0a:9d:d4:4b:e5:e0: c1:7d:62:04:0e:c8:b2:64:95:b1:ca:07:7a:53:dc: dc:b9:a5:c3:f8:9e:b9:d5:fc:9b:5b:b9:e4:0b:c8: a0:13:5d:40:38:4b:9d:31:63:c2:e1:e2:01:96:76: cb:c0:40:60:75:68:10:12:a5:2f:ec:04:31:e7:98: 58:a2:21:82:20:b5:02:d0:c1:c8:c6:11:72:61:10: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:86:01:1B:2A:90:B5:DF:DE:FB:2F:13:27:E8:EB:2C:E5:1F:A1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2620:2f:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c6:e1:72:a3:39:0b:8f:a3:ec:f8:70:66:6b:88:c0:b8:6c: d0:86:c0:25:7c:fc:8c:73:8b:e0:1c:4a:2d:59:18:37:80:95: ad:14:d0:9a:cf:83:ce:17:2b:2d:8d:81:8e:5c:91:59:84:11: 08:7d:15:75:f8:40:88:94:3c:c0:35:8f:bb:f4:ca:40:74:55: 2d:b4:21:84:6b:fc:c7:95:ae:94:b9:44:a9:86:02:21:90:4a: 13:a1:e6:15:66:ad:b1:15:42:c6:73:f9:d3:cc:8c:b0:a4:90: 27:52:7f:b5:5d:e0:fc:84:3c:36:6d:0c:6f:d4:2d:3f:e7:5e: e0:4d:63:9f:f9:23:6e:40:b9:1f:fb:f8:f0:3e:7b:cd:20:48: 25:e3:d6:49:ad:89:c7:44:e2:1c:b2:89:53:af:db:02:2d:fc: fe:0e:84:22:4a:15:d0:8d:ea:5c:1b:03:16:e5:f7:3c:b8:77: d2:0c:40:13:d6:02:d5:dc:7c:2b:7f:49:dc:f3:5d:94:56:15: 7c:a9:e6:b9:b3:c1:09:9a:68:d4:b3:96:55:f6:50:eb:c3:3e: 72:05:f8:a6:99:52:ae:52:69:63:7b:46:11:a0:b2:00:e3:41: 27:75:c0:6e:24:81:db:b3:29:c5:45:09:05:bc:10:44:5f:c8: 6b:f5:92:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/D01M2ktiVQj7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWNkYmZjYjUtOWEzNy00Mjg3LWFjNGUtNzkxMWU0NGQwMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ZnzTt5g9tVLlpzH8oL/2X88JI3Vxe7KqvH EE8TUCvXJFviExI2S27cr9veZg4oCLqZeNtA4tBVv9R5TBA3RSRnQOWxclkEuctm +cP8i6XHVJsN/frBGcL7PhyagXWTvWmcWXhjnkq/hjLNYkz7bfiQ24KKngIo891g SxovZOKmj2j7I6svwtLzQJPOoerDdnvPTm33aCYVN+HZVfBDetkYaCFjcHzgGbUq 4PQKndRL5eDBfWIEDsiyZJWxygd6U9zcuaXD+J651fybW7nkC8igE11AOEudMWPC 4eIBlnbLwEBgdWgQEqUv7AQx55hYoiGCILUC0MHIxhFyYRDHnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuGARsqkLXf3vsvEyfo6yzlH6ECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvODdmMzU3YjYtNTQ1YS0z NmEyLTk5ZjYtZjlkYWIyYTVlNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAL8AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKjG4XKjOQuPo+z4cGZriMC4bNCGwCV8/Ixzi+AcSi1ZGDeAla0U 0JrPg84XKy2NgY5ckVmEEQh9FXX4QIiUPMA1j7v0ykB0VS20IYRr/MeVrpS5RKmG AiGQShOh5hVmrbEVQsZz+dPMjLCkkCdSf7Vd4PyEPDZtDG/ULT/nXuBNY5/5I25A uR/7+PA+e80gSCXj1kmticdE4hyyiVOv2wIt/P4OhCJKFdCN6lwbAxbl9zy4d9IM QBPWAtXcfCt/SdzzXZRWFXyp5rmzwQmaaNSzllX2UOvDPnIF+KaZUq5SaWN7RhGg sgDjQSd1wG4kgduzKcVFCQW8EERfyGv1krU= -----END CERTIFICATE-----Generated at Sat Oct 11 05:13:09 2025 by rpki-client