$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa File: 5e197e82-6568-36db-8744-a92186db0276.roa (raw, json) Hash identifier: VFKayDsu5rn7JZgm0mwCUVloDMq+byhxIOFqdkAxX/Q= Subject key identifier: 4E:B5:28:DC:42:98:31:BA:29:68:9C:65:E9:AE:9A:A2:EF:0C:3F:A0 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584D100CFAACD8B7F82EE2EE8780 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 40623 IP address blocks: 2610:20:8020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:fa:ac:d8:b7:f8:2e:e2:ee:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=9b3ea751-d20c-4249-b7c4-228f89d0a169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:63:3e:2c:6a:2c:34:5e:03:d1:52:ea:64:24: ad:ae:9c:62:19:3c:cf:af:7b:16:4f:3d:ce:8e:36: 88:24:d7:fc:4c:16:37:a4:e6:66:7a:b6:6c:6d:7c: 2e:ef:ae:86:71:68:b3:19:11:5d:ce:bc:47:45:c3: 97:19:83:77:74:64:e4:f7:cb:96:15:5c:e5:6e:c8: 36:48:99:3a:2b:0c:bc:c4:f5:31:75:8c:33:b6:be: 51:9e:95:18:b6:84:24:ba:51:7c:8b:e7:5e:3a:ba: f4:36:14:18:31:aa:88:e2:7a:2b:b8:61:43:42:db: e5:5d:1d:7c:cd:0b:05:7b:1e:1b:00:77:38:ac:82: 35:f7:93:5e:0d:3f:ef:28:fa:02:1b:2a:e5:8a:cd: 74:e9:65:a0:57:72:28:ea:e6:a1:33:55:ef:d0:3e: 44:0d:76:f0:e8:9f:17:91:c2:9c:03:0b:4c:c1:e9: de:ff:03:fa:63:e8:3e:aa:7b:b0:09:72:e7:d2:63: 6a:f3:8c:37:79:ff:8c:2f:0d:e9:40:9e:98:c3:84: e3:28:90:8f:bc:6d:e9:6e:64:06:14:eb:7f:da:16: c2:6b:13:33:f8:a3:c0:4f:f7:9d:08:c9:f0:60:51: 31:15:e3:e2:32:32:48:c6:5b:8a:cc:47:03:cf:86: 07:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B5:28:DC:42:98:31:BA:29:68:9C:65:E9:AE:9A:A2:EF:0C:3F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:8020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0a:23:99:22:86:01:4e:5f:dd:7c:48:f9:1e:8d:d0:cf:64: c0:0e:0d:d1:40:10:59:b3:90:61:d9:e2:a4:15:7d:cc:20:2d: 78:7c:7e:1f:92:c3:8e:f9:12:a1:cd:85:47:c0:cc:60:92:bd: 22:05:22:6a:c4:df:ef:02:b4:67:25:fe:da:9f:06:04:95:4d: 97:37:09:22:65:7f:f7:43:75:7e:24:4e:d4:a5:13:eb:e1:2b: f0:ef:aa:fc:5c:a6:96:5f:2f:a5:48:d7:4f:cc:7a:7e:d5:c1: a6:b7:72:d2:c5:a4:7a:16:1f:f8:d7:4d:e9:76:b1:c6:a3:0c: 37:ec:9c:7e:22:98:51:d2:aa:87:13:72:9c:6b:2e:b7:a5:1c: d5:4a:0f:ba:fe:45:7c:2e:fb:31:78:9a:8d:28:41:0b:96:5a: d0:a0:77:4b:82:41:45:be:d7:ac:df:22:f7:0d:36:ac:78:e1: 8f:73:6e:96:d2:8b:26:97:9f:e3:b5:dc:f9:02:41:c7:8e:11: 6c:0b:f6:b6:61:d6:61:b6:14:33:21:ac:ec:84:ff:dd:5f:98: 55:1b:35:ce:00:74:6e:b4:22:e2:45:d5:b1:d1:f0:e8:7f:cb: d4:b1:37:3e:1d:52:52:cd:81:ed:48:1e:e4:ab:bc:03:70:06: 3a:07:8b:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0QDPqs2Lf4LuLuh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk OWIzZWE3NTEtZDIwYy00MjQ5LWI3YzQtMjI4Zjg5ZDBhMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGM+LGosNF4D0VLqZCStrpxiGTzPr3sWTz3O jjaIJNf8TBY3pOZmerZsbXwu766GcWizGRFdzrxHRcOXGYN3dGTk98uWFVzlbsg2 SJk6Kwy8xPUxdYwztr5RnpUYtoQkulF8i+deOrr0NhQYMaqI4noruGFDQtvlXR18 zQsFex4bAHc4rII195NeDT/vKPoCGyrlis106WWgV3Io6uahM1Xv0D5EDXbw6J8X kcKcAwtMwene/wP6Y+g+qnuwCXLn0mNq84w3ef+MLw3pQJ6Yw4TjKJCPvG3pbmQG FOt/2hbCaxMz+KPAT/edCMnwYFExFePiMjJIxluKzEcDz4YHMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE61KNxCmDG6KWicZemumqLvDD+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvNWUxOTdlODItNjU2OC0z NmRiLTg3NDQtYTkyMTg2ZGIwMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgKI5kihgFOX918SPkejdDPZMAODdFAEFmzkGHZ4qQVfcwgLXh8 fh+Sw475EqHNhUfAzGCSvSIFImrE3+8CtGcl/tqfBgSVTZc3CSJlf/dDdX4kTtSl E+vhK/DvqvxcppZfL6VI10/Men7Vwaa3ctLFpHoWH/jXTel2scajDDfsnH4imFHS qocTcpxrLrelHNVKD7r+RXwu+zF4mo0oQQuWWtCgd0uCQUW+16zfIvcNNqx44Y9z bpbSiyaXn+O13PkCQceOEWwL9rZh1mG2FDMhrOyE/91fmFUbNc4AdG60IuJF1bHR 8Oh/y9SxNz4dUlLNge1IHuSrvANwBjoHi9g= -----END CERTIFICATE-----Generated at Sun Mar 22 12:35:46 2026 by rpki-client