$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa File: 29c887b8-e882-31b0-872e-a0c5f4ed9554.roa (raw, json) Hash identifier: 1LkBRSWHAYmEuxXRqRMbcNMFTbjXioUYWtbAae6clGo= Subject key identifier: 3D:D1:E6:7D:B9:4D:28:B6:A2:3C:AF:DB:75:DD:D3:91:B2:BE:59:04 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A6DBB428F60CEB1684D964C00 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 3477 IP address blocks: 2601:a007::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:42:8f:60:ce:b1:68:4d:96:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=83260b72-94ad-4d99-b48f-41a52ef81d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:d1:79:9d:14:99:c8:c2:40:93:2c:62:b2: 3d:81:69:5d:ea:6c:2b:09:2f:42:85:ee:b4:e2:e4: 3d:5d:7e:f5:0d:f8:31:01:99:53:fe:69:b6:1a:88: 10:c1:50:03:87:57:c1:8c:a8:be:3d:17:7f:64:d0: f0:38:a5:65:c8:2a:76:9a:b8:9d:7e:cb:82:f4:a5: 0a:b4:03:cb:fd:06:ed:26:27:c3:af:86:66:1a:e4: a1:44:5e:f4:2c:26:07:f6:dc:6e:c4:79:63:7f:34: 8d:8b:9c:f2:d9:af:47:ef:11:02:b7:f0:83:56:b1: 9f:9d:d7:ca:d3:08:32:9d:05:34:f6:c2:6b:2e:af: a4:57:00:a3:02:9f:2b:0f:d2:ad:02:c3:82:e3:eb: 3b:6d:b9:b7:7d:95:12:f2:26:c3:c2:b8:70:35:ed: 1a:74:fe:2b:c1:b5:9d:03:44:12:ed:c4:96:2b:03: 35:93:62:b1:01:84:9c:c1:9c:3f:f1:51:81:1b:40: c1:c2:99:de:3a:a3:11:ae:04:6e:3c:3b:79:40:cb: 26:3a:05:f2:d7:a6:86:f2:89:65:7f:47:e0:9b:ff: 3b:47:31:c2:db:67:23:1a:7c:44:44:0d:ed:ff:10: 29:46:85:17:b9:32:ea:53:b6:c6:0e:c2:9d:fc:af: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:E6:7D:B9:4D:28:B6:A2:3C:AF:DB:75:DD:D3:91:B2:BE:59:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a007::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:08:09:29:f3:fb:d4:b6:31:6a:5e:f7:8c:36:46:23:85:64: 97:5a:aa:1e:fb:fc:e4:5a:52:30:25:2d:db:d3:08:79:fb:6a: 78:26:2a:39:29:b4:c5:a5:da:a3:cd:c8:df:88:cc:ef:26:de: 63:6c:48:d0:79:f6:78:dc:d3:9d:0e:bd:c1:d0:dc:51:b5:6c: a3:b8:5f:ca:06:9c:18:a5:c6:29:27:ef:38:fe:c6:4f:32:b3: 06:83:49:53:51:36:39:99:3a:b4:4a:66:fc:b5:01:5a:b0:ae: ca:1e:5b:0b:25:a5:8d:ce:c0:f5:56:d4:8c:14:31:41:0a:91: a9:26:f1:78:02:d5:f4:0f:3c:cc:d6:3b:4b:01:7a:f6:52:7b: 34:e7:02:a7:72:f5:d3:9f:84:b9:83:54:6a:8b:ce:5e:d5:51: 8f:a4:ee:76:d6:63:cd:89:80:51:ed:79:38:51:41:7b:f5:6b: 46:f2:56:6b:07:1b:01:f7:f3:99:2c:d1:8a:73:15:ae:26:d0: ed:32:56:df:6e:b6:70:dc:a5:a2:08:0d:4c:52:df:21:2f:3a: af:0f:65:0a:4f:93:29:38:87:22:66:7a:e6:58:a9:68:57:73: 7c:ba:ec:f1:b3:56:36:af:5b:1d:3d:91:fa:ff:9d:6e:6f:10: 94:67:64:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEptu0KPYM6xaE2WTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ODMyNjBiNzItOTRhZC00ZDk5LWI0OGYtNDFhNTJlZjgxZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0TReZ0UmcjCQJMsYrI9gWld6mwrCS9Che60 4uQ9XX71DfgxAZlT/mm2GogQwVADh1fBjKi+PRd/ZNDwOKVlyCp2mridfsuC9KUK tAPL/QbtJifDr4ZmGuShRF70LCYH9txuxHljfzSNi5zy2a9H7xECt/CDVrGfndfK 0wgynQU09sJrLq+kVwCjAp8rD9KtAsOC4+s7bbm3fZUS8ibDwrhwNe0adP4rwbWd A0QS7cSWKwM1k2KxAYScwZw/8VGBG0DBwpneOqMRrgRuPDt5QMsmOgXy16aG8oll f0fgm/87RzHC22cjGnxERA3t/xApRoUXuTLqU7bGDsKd/K8WjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD3R5n25TSi2ojyv23Xd05GyvlkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMjljODg3YjgtZTg4Mi0z MWIwLTg3MmUtYTBjNWY0ZWQ5NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBICAkp8/vUtjFqXveMNkYjhWSXWqoe+/zkWlIwJS3b0wh5+2p4Jio5 KbTFpdqjzcjfiMzvJt5jbEjQefZ43NOdDr3B0NxRtWyjuF/KBpwYpcYpJ+84/sZP MrMGg0lTUTY5mTq0Smb8tQFasK7KHlsLJaWNzsD1VtSMFDFBCpGpJvF4AtX0DzzM 1jtLAXr2Uns05wKncvXTn4S5g1Rqi85e1VGPpO521mPNiYBR7Xk4UUF79WtG8lZr BxsB9/OZLNGKcxWuJtDtMlbfbrZw3KWiCA1MUt8hLzqvD2UKT5MpOIciZnrmWKlo V3N8uuzxs1Y2r1sdPZH6/51ubxCUZ2RT -----END CERTIFICATE-----Generated at Thu Jul 10 08:01:44 2025 by rpki-client