$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa File: ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa (raw, json) Hash identifier: d1jeFnMFL6VZ/a+WlVWytSRL360P8MXNXSwohhcbfjk= Subject key identifier: 18:99:BF:FF:34:73:3D:00:F1:03:EA:67:AC:D9:09:60:25:38:A3:0F Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584B3DBA2BBBA60ABBC41434B424 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 3477 IP address blocks: 2610:20:90e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:2b:bb:a6:0a:bb:c4:14:34:b4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=be200485-ac28-43db-843a-9c5b27086f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:65:88:d5:2c:39:fe:c1:f1:b5:4d:6f:16: 40:62:91:66:f0:25:5b:8b:77:29:df:dd:74:b0:23: b3:48:fc:63:5f:23:f1:00:f0:75:a8:83:de:39:a7: f6:7f:bc:ab:26:cf:f7:f1:8e:67:76:0d:b4:6a:f0: 6e:d0:40:38:12:c1:e9:c6:e9:8f:6d:c3:77:fb:b1: 24:50:c5:8c:b6:00:cd:b4:3d:a2:22:7a:7d:ed:8c: 2b:cd:88:dd:65:94:0f:6a:5d:6d:f0:c7:1e:fa:67: 0a:bd:11:40:3f:76:e8:d8:b6:f6:88:53:23:31:f0: 8a:2d:60:80:ab:dc:2d:a1:9c:20:24:fc:3d:2e:b9: 27:94:bd:be:39:b9:a5:c8:92:6a:06:2b:fe:15:a6: de:82:a4:9f:b5:61:b1:ab:be:f7:e9:ff:a8:1e:3f: ec:52:19:ef:e6:28:0d:16:cc:b2:18:7b:aa:cc:3a: 49:f4:2c:70:b2:5e:89:a1:9b:37:5f:72:8f:fc:c7: 96:96:e5:3e:31:d6:b9:1d:00:eb:8f:cd:ec:66:69: 8c:2b:0c:74:46:c3:85:49:c0:f2:42:18:ad:3b:55: 9c:99:01:84:e1:bc:7f:28:ae:56:7f:a3:1c:e3:66: 74:fc:52:cc:4c:d4:e3:69:55:a9:2a:c9:df:03:17: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:BF:FF:34:73:3D:00:F1:03:EA:67:AC:D9:09:60:25:38:A3:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:90e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:46:31:ad:ce:3f:8e:ad:5c:4c:49:a2:04:a4:f5:39:3e:82: 5b:ab:16:bf:d3:23:4c:45:25:2b:d5:17:65:23:f6:d1:e5:f3: b4:2a:7b:66:2e:11:fa:f1:0b:61:71:ac:0a:7b:00:e7:ad:d2: da:6e:35:66:8d:39:70:3f:ca:80:6d:bd:72:73:bd:b9:41:90: 12:15:59:46:ed:4f:1e:d0:8e:b2:fe:9d:f9:78:22:f7:63:1c: 00:63:0c:ab:09:74:86:47:1c:10:2b:a8:d2:91:9f:45:ae:42: 6b:be:aa:c7:c1:65:27:5e:07:1f:54:80:e4:9f:a6:e6:e6:0b: 91:59:89:88:c9:09:c6:6f:76:e9:1b:a4:ba:c9:5b:e4:83:18: 9f:ab:38:47:78:75:83:ed:95:39:fa:78:ca:24:67:88:99:39: a4:c4:55:4e:1c:88:9c:56:49:68:a9:6e:4d:61:9f:ee:02:a4: fc:fc:13:3f:12:e1:ea:8d:5a:82:91:c1:52:2c:3f:86:02:77: 54:1a:e9:01:ff:04:f6:68:3d:45:ed:9e:c5:6d:70:c4:28:27: b4:6d:c5:f7:14:fd:06:ca:63:a2:e8:94:31:7a:ef:f2:be:db: 12:25:40:7e:98:1a:01:01:5d:f1:22:7d:0e:2c:7e:78:bd:d6: ba:39:75:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uiu7pgq7xBQ0tCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmUyMDA0ODUtYWMyOC00M2RiLTg0M2EtOWM1YjI3MDg2ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA1liNUsOf7B8bVNbxZAYpFm8CVbi3cp3910 sCOzSPxjXyPxAPB1qIPeOaf2f7yrJs/38Y5ndg20avBu0EA4EsHpxumPbcN3+7Ek UMWMtgDNtD2iInp97YwrzYjdZZQPal1t8Mce+mcKvRFAP3bo2Lb2iFMjMfCKLWCA q9wtoZwgJPw9LrknlL2+ObmlyJJqBiv+FabegqSftWGxq7736f+oHj/sUhnv5igN FsyyGHuqzDpJ9Cxwsl6JoZs3X3KP/MeWluU+Mda5HQDrj83sZmmMKwx0RsOFScDy QhitO1WcmQGE4bx/KK5Wf6Mc42Z0/FLMTNTjaVWpKsnfAxd+IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBiZv/80cz0A8QPqZ6zZCWAlOKMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYmEyNWY1ZTQtMDVkZS0z ZTlhLWJjYzEtNmI4ZDRlMDcwZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIJDg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHNGMa3OP46tXExJogSk9Tk+glurFr/TI0xFJSvVF2Uj9tHl87Qq e2YuEfrxC2FxrAp7AOet0tpuNWaNOXA/yoBtvXJzvblBkBIVWUbtTx7QjrL+nfl4 IvdjHABjDKsJdIZHHBArqNKRn0WuQmu+qsfBZSdeBx9UgOSfpubmC5FZiYjJCcZv dukbpLrJW+SDGJ+rOEd4dYPtlTn6eMokZ4iZOaTEVU4ciJxWSWipbk1hn+4CpPz8 Ez8S4eqNWoKRwVIsP4YCd1Qa6QH/BPZoPUXtnsVtcMQoJ7RtxfcU/QbKY6LolDF6 7/K+2xIlQH6YGgEBXfEifQ4sfni91ro5dQw= -----END CERTIFICATE-----Generated at Sat Oct 11 05:09:30 2025 by rpki-client