$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4217a579-1c18-32c3-8cbb-356419bb435c.roa File: 4217a579-1c18-32c3-8cbb-356419bb435c.roa (raw, json) Hash identifier: MVF8MCfYftpKDMrvAMCtfm+B3jQXlsVEodPiz6nYywk= Subject key identifier: 9E:B9:14:0D:8C:E2:04:84:19:38:F5:C9:53:C9:7C:2E:E8:5E:D1:20 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584ED9C73FCB7B3D18FD37E6DB6D Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4217a579-1c18-32c3-8cbb-356419bb435c.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 3477 IP address blocks: 2601:a002:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3f:cb:7b:3d:18:fd:37:e6:db:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=4c21868e-2bc2-41fd-a9db-6541ad1dce6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:94:7e:94:e1:64:01:48:31:d9:56:aa:a4: 46:58:89:7f:8b:5a:19:ed:ac:4d:56:95:24:be:2b: 28:fe:c0:07:cd:f1:e9:84:27:b8:56:e4:5e:8d:5d: 16:21:07:4d:b6:6c:02:71:e4:67:91:6d:47:89:bf: 07:1d:38:9d:99:d2:5e:61:6c:a9:12:28:ef:9f:30: 73:ea:c7:69:41:e4:de:aa:5d:94:da:ff:33:cd:c2: 6c:23:d5:e1:3d:5a:46:56:b7:8d:23:41:52:d9:af: b6:f6:e6:75:b8:38:23:bb:4f:c2:29:08:0e:09:50: 12:74:47:1c:67:27:87:e5:35:a9:8d:3b:b9:1b:52: 7e:87:c6:7b:bd:6c:8c:42:fb:01:f7:b8:1b:60:de: b8:f3:94:44:47:ae:9a:47:cb:ed:f4:11:23:53:75: 45:fd:cf:88:6b:6e:7f:3a:2b:44:64:cd:29:e7:a2: 33:90:39:f4:56:70:be:e2:18:a2:b4:a9:b9:97:f0: 5e:87:b4:46:d8:01:fe:05:fa:3c:c1:87:9b:7f:f5: 06:85:6f:91:bc:a2:c0:d7:52:cd:c4:87:8a:9e:99: be:c8:3e:cc:38:90:9c:40:97:7e:75:7d:34:fd:32: ed:49:0a:7c:f9:8e:a4:b9:99:35:47:57:a5:b4:f0: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B9:14:0D:8C:E2:04:84:19:38:F5:C9:53:C9:7C:2E:E8:5E:D1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4217a579-1c18-32c3-8cbb-356419bb435c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a002:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1d:56:3c:62:2e:3b:95:a4:f2:bb:f6:88:1d:61:7e:89:67: cc:09:71:b5:dc:f9:0f:27:1a:98:da:2b:02:38:88:e0:16:6b: d1:cc:23:e8:67:84:94:57:ce:ce:16:ce:b1:74:b1:69:7a:0c: 35:55:15:7e:06:3e:94:88:a3:f1:8b:48:e8:8c:e2:64:3c:a4: 21:13:4b:69:08:8a:2f:f0:41:99:c6:37:5a:b9:7d:74:bd:cf: 50:b3:de:71:65:45:f7:52:d6:d6:6a:5f:f6:90:2a:c5:33:88: 15:5a:58:2c:d7:9e:c4:db:4f:fe:e5:10:d3:4b:60:bf:bd:6b: d0:ff:31:35:22:33:1b:f3:ec:b7:a1:36:a4:82:69:ac:60:06: 80:da:68:9a:f1:b7:08:de:3c:41:e0:72:ba:65:47:55:22:f8: 27:93:84:97:65:89:d5:7a:f8:b6:46:65:09:df:46:35:71:c1: 70:a8:bc:c7:ae:ab:89:9e:ee:96:e4:a3:3d:69:bf:bf:2d:62: 95:5b:38:85:e7:bb:14:ac:91:fb:0f:4e:60:a0:e5:8b:d9:79: 5a:3b:62:4e:ab:31:56:78:04:10:91:8e:90:69:26:99:77:cc: b1:a6:f4:ec:42:01:e0:13:ac:77:a4:80:2e:34:f7:be:16:5f: 58:be:31:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Zxz/Lez0Y/Tfm220wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk NGMyMTg2OGUtMmJjMi00MWZkLWE5ZGItNjU0MWFkMWRjZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RaUfpThZAFIMdlWqqRGWIl/i1oZ7axNVpUk viso/sAHzfHphCe4VuRejV0WIQdNtmwCceRnkW1Hib8HHTidmdJeYWypEijvnzBz 6sdpQeTeql2U2v8zzcJsI9XhPVpGVreNI0FS2a+29uZ1uDgju0/CKQgOCVASdEcc ZyeH5TWpjTu5G1J+h8Z7vWyMQvsB97gbYN6485RER66aR8vt9BEjU3VF/c+Ia25/ OitEZM0p56IzkDn0VnC+4hiitKm5l/Beh7RG2AH+Bfo8wYebf/UGhW+RvKLA11LN xIeKnpm+yD7MOJCcQJd+dX00/TLtSQp8+Y6kuZk1R1eltPDwCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ65FA2M4gSEGTj1yVPJfC7oXtEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvNDIxN2E1NzktMWMxOC0z MmMzLThjYmItMzU2NDE5YmI0MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgGgAgBf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgdVjxiLjuVpPK79ogdYX6JZ8wJcbXc+Q8nGpjaKwI4iOAWa9HM I+hnhJRXzs4WzrF0sWl6DDVVFX4GPpSIo/GLSOiM4mQ8pCETS2kIii/wQZnGN1q5 fXS9z1Cz3nFlRfdS1tZqX/aQKsUziBVaWCzXnsTbT/7lENNLYL+9a9D/MTUiMxvz 7LehNqSCaaxgBoDaaJrxtwjePEHgcrplR1Ui+CeThJdlidV6+LZGZQnfRjVxwXCo vMeuq4me7pbkoz1pv78tYpVbOIXnuxSskfsPTmCg5YvZeVo7Yk6rMVZ4BBCRjpBp Jpl3zLGm9OxCAeATrHekgC40974WX1i+MbE= -----END CERTIFICATE-----Generated at Mon Sep 28 20:26:43 2026 by rpki-client