$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa File: 29c887b8-e882-31b0-872e-a0c5f4ed9554.roa (raw, json) Hash identifier: L5eznSbbYrcgbWPg6j0XCrnuSqkImH30O+p+JII9BcI= Subject key identifier: F0:F3:64:11:B1:98:F3:2C:8C:F7:78:5D:51:2F:42:B4:77:1D:AE:B3 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584F4975785FBF1FBAE9545F9CC0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3477 IP address blocks: 2601:a007::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:78:5f:bf:1f:ba:e9:54:5f:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee4fd0bd-ca3e-43c1-943f-609bf169c11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:86:2c:1f:15:7f:d4:df:51:00:bb:48:d8: 4b:b7:24:93:b0:f2:e9:c9:1d:c7:be:b3:e3:f5:56: c6:7e:f7:da:f2:ba:0a:11:c1:ad:e2:f2:8a:67:41: e8:c4:8e:76:64:63:79:b1:b5:56:be:97:75:cb:d6: 56:07:62:67:36:56:31:1d:70:54:27:6a:5d:c9:7b: c3:a7:e4:70:db:70:23:6c:3d:e6:ab:df:c7:83:3d: f5:f5:99:75:45:80:5b:92:ae:1b:78:02:3c:9f:2b: 3a:c4:09:67:86:08:79:10:95:9d:55:23:94:bd:76: fd:8b:0a:d7:f4:bd:c3:a9:dd:92:2a:d9:bc:60:48: df:f1:bf:7d:81:9c:5a:ef:55:4a:1e:34:43:fd:ae: 02:b5:68:5a:58:80:c2:85:b1:71:ac:aa:49:7e:91: f6:c9:c2:8e:0f:d2:0d:b6:90:3f:d8:9a:a7:1a:53: d7:db:d7:ea:0c:2f:bd:1f:d3:a3:14:05:7f:7f:71: 7b:68:71:83:a2:fd:07:e6:80:00:d5:a4:40:ee:58: 97:73:0d:36:9e:b4:ed:56:42:f9:f8:9c:04:f8:89: d3:8d:6b:f0:05:67:f9:8e:76:a5:f8:7c:12:7b:7e: d4:79:b7:28:fc:e7:6a:97:f9:ad:b0:17:11:a8:05: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F3:64:11:B1:98:F3:2C:8C:F7:78:5D:51:2F:42:B4:77:1D:AE:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a007::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:30:d3:43:e4:c1:45:36:77:a1:e7:fb:2c:fd:11:aa:02:c9: 26:2c:b9:d4:7c:51:98:ba:21:70:26:5c:4c:81:09:d3:27:d4: a8:45:de:74:98:44:37:02:10:5f:a9:c7:07:31:ae:61:a7:86: 42:2a:94:cd:25:77:72:52:43:f4:8b:23:25:29:a0:89:da:a7: 29:c1:52:70:c0:c3:d6:94:bd:3b:47:df:40:af:99:ce:e5:79: 44:17:78:27:13:ff:34:cc:50:90:45:cc:ae:21:10:5e:fb:58: 17:9b:b1:a5:49:b3:5c:b0:a4:af:b0:9f:83:80:d7:71:46:5d: c7:4b:15:24:61:bc:f7:66:ef:52:38:46:c7:ab:ea:88:9a:a9: 4e:32:ca:7f:ed:34:b6:1d:5b:fc:21:9c:40:43:b9:89:e7:7c: 00:65:4d:96:50:88:14:28:64:c6:4c:4d:eb:57:fe:85:85:cc: b7:1d:7f:ff:63:cd:a3:a0:b8:cd:5b:ce:43:ef:8c:0b:31:fb: 4e:2c:52:64:26:23:8f:76:eb:fb:f9:a3:cb:e6:ed:1d:08:f0: cd:51:cf:26:b0:18:4a:e6:7d:24:e7:d7:14:40:1a:a6:2e:1f: 99:d5:56:98:80:8d:70:d0:0a:9d:8f:bb:17:76:7b:5b:d8:cf: 7c:d5:22:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdXhfvx+66VRfnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWU0ZmQwYmQtY2EzZS00M2MxLTk0M2YtNjA5YmYxNjljMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwSGLB8Vf9TfUQC7SNhLtySTsPLpyR3HvrPj 9VbGfvfa8roKEcGt4vKKZ0HoxI52ZGN5sbVWvpd1y9ZWB2JnNlYxHXBUJ2pdyXvD p+Rw23AjbD3mq9/Hgz319Zl1RYBbkq4beAI8nys6xAlnhgh5EJWdVSOUvXb9iwrX 9L3Dqd2SKtm8YEjf8b99gZxa71VKHjRD/a4CtWhaWIDChbFxrKpJfpH2ycKOD9IN tpA/2JqnGlPX29fqDC+9H9OjFAV/f3F7aHGDov0H5oAA1aRA7liXcw02nrTtVkL5 +JwE+InTjWvwBWf5jnal+HwSe37Uebco/Odql/mtsBcRqAUhlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPDzZBGxmPMsjPd4XVEvQrR3Ha6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMjljODg3YjgtZTg4Mi0z MWIwLTg3MmUtYTBjNWY0ZWQ5NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1MNND5MFFNneh5/ss/RGqAskmLLnUfFGYuiFwJlxMgQnTJ9SoRd50 mEQ3AhBfqccHMa5hp4ZCKpTNJXdyUkP0iyMlKaCJ2qcpwVJwwMPWlL07R99Ar5nO 5XlEF3gnE/80zFCQRcyuIRBe+1gXm7GlSbNcsKSvsJ+DgNdxRl3HSxUkYbz3Zu9S OEbHq+qImqlOMsp/7TS2HVv8IZxAQ7mJ53wAZU2WUIgUKGTGTE3rV/6Fhcy3HX// Y82joLjNW85D74wLMftOLFJkJiOPduv7+aPL5u0dCPDNUc8msBhK5n0k59cUQBqm Lh+Z1VaYgI1w0Aqdj7sXdntb2M981SJu -----END CERTIFICATE-----Generated at Mon Sep 28 10:57:07 2026 by rpki-client