$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa File: 29c887b8-e882-31b0-872e-a0c5f4ed9554.roa (raw, json) Hash identifier: XGr7WhqCRMinSqiPB2YNeRAY1ycL7fbsfbTW7P2ZmsA= Subject key identifier: DB:EB:4A:A3:37:73:48:46:DA:46:14:C2:0E:D9:24:86:BD:A9:B7:A1 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584D0EA7BACD4F56CB2780D10A80 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 3477 IP address blocks: 2601:a007::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ba:cd:4f:56:cb:27:80:d1:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=6b19a472-9c9b-4e72-bd39-3b8259519b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:21:6d:53:a1:7e:c3:1b:55:ad:94:5f:b3: 81:2c:95:fa:d7:b6:d7:37:fc:89:2f:29:6f:8e:87: d5:f4:6b:7b:9d:32:98:34:4d:e0:13:2f:b4:23:54: 83:b4:dd:4d:fc:5e:68:03:a1:85:11:7d:d5:03:cd: 5f:a0:15:54:85:cf:17:2e:95:aa:9c:70:d4:bc:5d: 6b:40:b2:cd:4f:ad:61:64:80:85:0e:89:c3:fe:dc: b6:70:8d:a1:3a:a3:31:08:74:8c:4c:8b:87:b8:b5: 8b:15:4d:40:a2:4d:c9:eb:13:d6:71:33:06:5d:6d: 94:64:5b:12:43:ad:be:80:ce:7f:02:57:47:e2:7d: 43:de:1f:75:24:55:69:63:af:c2:ea:27:25:b0:79: 71:8d:22:53:d2:71:5b:44:ba:6a:e3:5e:da:a1:f4: c7:77:ec:70:10:43:3c:1a:23:6e:e3:b8:d0:5e:43: 84:02:65:ed:a8:f4:e8:53:f6:42:a5:fe:c4:a0:6e: 62:b4:95:af:a9:55:db:3c:f6:d5:51:d2:4f:63:b5: 09:a6:6a:6a:4a:9c:53:09:d7:22:6d:65:0f:2f:e0: d4:08:ea:3e:17:ac:0b:f0:55:96:2e:e1:21:b7:bf: 5f:f1:1e:41:6e:64:75:cc:f7:7f:d9:e4:bd:66:de: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:4A:A3:37:73:48:46:DA:46:14:C2:0E:D9:24:86:BD:A9:B7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a007::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c4:29:ca:27:33:00:8b:04:c0:94:88:8b:56:01:93:b9:5b: 08:7b:27:57:aa:32:8b:7f:01:67:86:c0:69:97:5e:98:73:19: f4:66:aa:b5:e5:49:b7:25:86:30:92:59:0d:ad:a0:2f:a5:29: fd:c1:13:c2:2c:f4:a8:99:50:db:13:54:37:5d:93:b1:1d:7b: a3:28:18:ac:3e:d4:63:bf:19:3f:3b:fc:d2:2e:79:82:8e:6e: 83:14:c7:6e:4a:25:28:e0:db:c9:2d:23:a9:fb:e0:cc:6d:c6: af:cb:f2:df:8b:bf:2f:bc:ac:7d:df:a9:1b:52:a4:ba:e9:f3: d8:fd:59:cb:a6:42:51:2c:24:dd:d6:13:0b:63:bc:9d:87:05: f1:2c:f5:b1:eb:b9:87:e7:c0:74:6d:4b:57:92:ba:48:1c:9c: 43:4e:44:cd:03:10:94:4f:df:b6:5b:ae:de:44:32:b6:5c:93: 89:9f:31:60:35:a4:04:b9:87:c9:d5:34:07:e8:50:6c:b1:6e: 6d:a9:3d:d6:30:ce:0c:91:64:3f:a7:ae:43:dc:ba:3e:a9:f9: b8:33:3d:95:c1:6d:5a:ec:b1:fe:99:c8:6a:8b:1f:b3:22:bb: 3c:2d:53:16:fc:75:d0:af:b9:83:54:e1:06:b5:4a:0f:08:47: 3b:35:8b:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0Op7rNT1bLJ4DRCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NmIxOWE0NzItOWM5Yi00ZTcyLWJkMzktM2I4MjU5NTE5YjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsghbVOhfsMbVa2UX7OBLJX617bXN/yJLylv jofV9Gt7nTKYNE3gEy+0I1SDtN1N/F5oA6GFEX3VA81foBVUhc8XLpWqnHDUvF1r QLLNT61hZICFDonD/ty2cI2hOqMxCHSMTIuHuLWLFU1Aok3J6xPWcTMGXW2UZFsS Q62+gM5/AldH4n1D3h91JFVpY6/C6iclsHlxjSJT0nFbRLpq417aofTHd+xwEEM8 GiNu47jQXkOEAmXtqPToU/ZCpf7EoG5itJWvqVXbPPbVUdJPY7UJpmpqSpxTCdci bWUPL+DUCOo+F6wL8FWWLuEht79f8R5BbmR1zPd/2eS9Zt4rCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNvrSqM3c0hG2kYUwg7ZJIa9qbehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMjljODg3YjgtZTg4Mi0z MWIwLTg3MmUtYTBjNWY0ZWQ5NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4xCnKJzMAiwTAlIiLVgGTuVsIeydXqjKLfwFnhsBpl16Ycxn0Zqq1 5Um3JYYwklkNraAvpSn9wRPCLPSomVDbE1Q3XZOxHXujKBisPtRjvxk/O/zSLnmC jm6DFMduSiUo4NvJLSOp++DMbcavy/Lfi78vvKx936kbUqS66fPY/VnLpkJRLCTd 1hMLY7ydhwXxLPWx67mH58B0bUtXkrpIHJxDTkTNAxCUT9+2W67eRDK2XJOJnzFg NaQEuYfJ1TQH6FBssW5tqT3WMM4MkWQ/p65D3Lo+qfm4Mz2VwW1a7LH+mchqix+z Irs8LVMW/HXQr7mDVOEGtUoPCEc7NYvr -----END CERTIFICATE-----Generated at Sun Mar 22 14:18:25 2026 by rpki-client