$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa File: a68e4148-cf1e-3897-950d-73b1670f964c.roa (raw, json) Hash identifier: FDn2dVy+WfltKWdf4gWtj4PB55sJDgfM0JtaN7NQMVg= Subject key identifier: 05:6C:85:7D:B2:0C:48:64:30:F8:B7:47:4C:12:B3:75:9A:8F:28:07 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A5DCF6C8CB6DF317DCBEE9900 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa Signing time: Mon 30 Jun 2025 20:08:52 +0000 ROA not before: Mon 30 Jun 2025 20:08:52 +0000 ROA not after: Sun 28 Sep 2025 20:08:52 +0000 asID: 3477 IP address blocks: 2610:20:8040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:cf:6c:8c:b6:df:31:7d:cb:ee:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jun 30 20:08:52 2025 GMT Not After : Sep 28 20:08:52 2025 GMT Subject: CN=08aaea69-8bf5-486f-bd49-a2d614290fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:8c:24:b2:c8:a8:53:99:6a:6f:7d:99:00: 94:61:9c:08:f2:fa:88:4e:6c:99:77:68:4e:96:8f: e8:47:45:c6:fa:67:ac:08:c8:d1:c8:65:d3:2b:26: 02:30:9d:a6:33:89:04:7a:d3:49:6c:a4:19:5f:7d: c0:fa:40:25:cd:55:7a:21:4f:14:4d:62:da:d4:3f: 15:f5:ab:3d:94:2c:6b:ea:79:c8:16:18:1d:99:1c: 0a:0d:bf:2c:40:07:94:26:cf:ad:1d:49:4f:7b:63: 13:ad:2d:e0:3c:fb:48:d8:30:20:88:db:ec:09:df: eb:4e:3d:dd:31:1c:44:78:25:c5:c8:e4:06:15:b3: 75:9e:26:e9:ee:1e:e7:82:d5:17:a1:1b:97:58:5d: 8c:22:04:a9:11:9e:26:c8:ba:76:ed:6f:8b:84:10: 55:54:b7:80:38:07:78:d2:35:71:64:8f:25:a1:76: 03:ec:35:c9:05:f0:1b:b2:e1:80:4d:16:6d:3d:aa: 54:8e:ed:26:98:00:8d:2e:92:9c:49:9e:b2:2c:4c: 7e:90:cf:56:eb:f5:ea:32:ad:e9:6f:e1:cc:db:49: e0:78:bc:93:f8:71:03:07:3e:f8:13:47:20:b2:77: 16:4a:59:ea:c8:0a:58:a5:e6:bc:3a:c6:d5:be:29: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6C:85:7D:B2:0C:48:64:30:F8:B7:47:4C:12:B3:75:9A:8F:28:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:8040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c7:f3:17:4d:ec:ac:1f:9f:f1:3b:27:c7:19:f5:1c:a8:a3: 7b:ba:eb:c1:3a:f9:d3:57:a6:c2:f3:5c:53:a5:01:32:cf:7a: 83:d2:54:7f:3e:e0:7e:aa:2c:78:f3:41:e1:94:aa:f5:5d:4c: 8c:e2:74:cf:47:5a:f8:5d:cf:d7:1c:59:3f:7e:18:71:ed:22: 69:b5:30:71:66:4e:d6:b5:13:46:d9:4a:e4:6c:05:0c:9a:e6: 46:53:69:99:fe:d6:81:92:10:35:cc:8d:01:3d:d2:a4:89:7c: d2:0e:0d:80:44:b3:7c:f0:46:d2:1a:3a:bb:90:21:ce:a1:30: 4b:1d:3f:76:38:ad:45:ab:16:fe:f4:1e:4f:88:6c:df:e0:2f: 3d:4d:ef:cf:13:d2:80:d4:8a:8e:55:7a:68:48:9a:2f:d7:e7: 1f:58:70:b7:e5:49:bb:a0:9c:34:bf:bd:3a:61:51:07:32:c2: 7f:f6:ad:82:c1:f8:fe:62:8c:5f:01:2b:7a:e4:e7:a4:5f:94: c8:71:2c:3b:52:8d:1c:28:19:4e:14:f0:63:66:23:01:f0:76: d5:ed:c8:a4:8c:8f:22:39:de:2a:cf:6a:d5:ab:0d:c4:ef:ff: 85:d2:4b:2b:70:d2:bc:b2:93:5b:96:12:a7:c9:30:d7:a1:f4: b8:ce:bf:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpdz2yMtt8xfcvumQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDYzMDIwMDg1MloXDTI1MDkyODIwMDg1MlowLzEtMCsGA1UEAxMk MDhhYWVhNjktOGJmNS00ODZmLWJkNDktYTJkNjE0MjkwZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlASMJLLIqFOZam99mQCUYZwI8vqITmyZd2hO lo/oR0XG+mesCMjRyGXTKyYCMJ2mM4kEetNJbKQZX33A+kAlzVV6IU8UTWLa1D8V 9as9lCxr6nnIFhgdmRwKDb8sQAeUJs+tHUlPe2MTrS3gPPtI2DAgiNvsCd/rTj3d MRxEeCXFyOQGFbN1nibp7h7ngtUXoRuXWF2MIgSpEZ4myLp27W+LhBBVVLeAOAd4 0jVxZI8loXYD7DXJBfAbsuGATRZtPapUju0mmACNLpKcSZ6yLEx+kM9W6/XqMq3p b+HM20ngeLyT+HEDBz74E0cgsncWSlnqyApYpea8OsbVvilYGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAVshX2yDEhkMPi3R0wSs3WajygHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTY4ZTQxNDgtY2YxZS0z ODk3LTk1MGQtNzNiMTY3MGY5NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTH8xdN7Kwfn/E7J8cZ9Ryoo3u668E6+dNXpsLzXFOlATLPeoPS VH8+4H6qLHjzQeGUqvVdTIzidM9HWvhdz9ccWT9+GHHtImm1MHFmTta1E0bZSuRs BQya5kZTaZn+1oGSEDXMjQE90qSJfNIODYBEs3zwRtIaOruQIc6hMEsdP3Y4rUWr Fv70Hk+IbN/gLz1N788T0oDUio5VemhImi/X5x9YcLflSbugnDS/vTphUQcywn/2 rYLB+P5ijF8BK3rk56RflMhxLDtSjRwoGU4U8GNmIwHwdtXtyKSMjyI53irPatWr DcTv/4XSSytw0ryyk1uWEqfJMNeh9LjOvxI= -----END CERTIFICATE-----Generated at Tue Jul 1 21:31:13 2025 by rpki-client