$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa File: a68e4148-cf1e-3897-950d-73b1670f964c.roa (raw, json) Hash identifier: Pi/b8M+YnH6eFkqI/LE3VBIlts9LGj0dKlrcHwiSd9w= Subject key identifier: 68:64:EB:3C:66:6E:AD:B2:EE:C8:F3:24:E4:AB:76:F1:65:01:80:96 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584F498C2B1110C39E9483CF15C0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3477 IP address blocks: 2610:20:8040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:2b:11:10:c3:9e:94:83:cf:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=534e4bf9-983d-4886-bc9f-a2c5af27f640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:63:fc:52:00:70:42:2f:df:53:d2:fb:c9: ba:7d:50:3c:57:5d:f7:58:f0:7b:c8:8e:b2:4c:8b: 1e:08:78:85:cf:f3:27:77:94:f0:d9:db:c0:06:2a: d9:5c:41:70:7d:a9:2c:4c:61:0a:d7:58:1f:df:f1: c4:79:da:7a:f4:60:00:7f:e8:a8:d1:53:08:7e:41: 80:8f:77:e0:3e:fe:fc:89:ad:2d:e0:bd:af:de:7f: b4:07:61:9b:bd:aa:55:4d:03:5c:d5:d1:8c:79:2a: 8c:6b:16:fc:b3:ed:ff:3c:dc:7c:a0:db:9d:cc:71: f9:d1:31:ff:ab:a0:a1:e9:85:de:13:50:86:17:c8: 16:52:da:cc:be:8a:05:7d:33:b0:e6:21:91:ea:f8: fb:e3:f5:22:09:9d:df:94:df:82:45:3c:9c:2f:20: 12:0e:df:bf:ea:dc:3b:d9:16:e9:ca:29:be:a5:d9: 07:68:d4:63:5c:4d:97:0d:1c:36:38:be:13:3a:86: f9:a3:87:a9:85:ea:e6:98:67:39:01:47:72:e5:07: df:25:1e:1d:57:3c:fe:3f:81:82:59:c3:ec:46:0f: 6f:0c:48:d8:a5:48:1d:97:35:80:1b:6b:c5:b6:99: 57:2c:ab:bb:98:e9:ec:25:2b:86:93:13:69:76:a3: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:EB:3C:66:6E:AD:B2:EE:C8:F3:24:E4:AB:76:F1:65:01:80:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:8040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:21:c1:93:5c:ef:1a:24:31:4b:f9:48:18:9e:b1:a7:1e:c6: b4:96:b0:37:dd:31:df:9c:93:13:57:a1:61:ca:b0:60:f2:1e: 11:70:68:21:be:27:32:d5:c5:7e:02:d1:db:37:3a:5c:cd:bb: ba:64:a4:5a:86:a3:f7:36:90:60:8e:a0:22:1f:b5:ea:cc:02: 0b:60:cc:76:d7:bb:54:e9:8e:ca:39:6a:66:12:d0:e1:96:22: 8b:34:de:33:9e:03:d0:e8:bc:05:5a:f4:45:62:0a:5c:66:8d: 13:88:a6:fa:25:cb:0f:68:8b:2d:73:33:40:7e:b8:7a:b0:52: b0:19:9c:ac:1e:15:60:e0:51:de:67:b3:c1:31:bb:eb:63:21: 35:d6:85:3f:bc:70:9b:82:a8:2c:ec:73:2a:ea:3c:ae:40:9f: bd:7b:dd:9f:24:5e:51:0d:b0:fa:30:71:cb:d1:9e:c7:17:a7: 55:8d:6e:a1:13:c9:8c:3a:19:5f:c3:9f:34:bd:9c:4f:8c:08: 94:54:fe:c0:07:19:33:16:b5:db:30:a2:08:13:49:9d:3b:b9: 72:0f:46:bf:a2:f3:fe:4c:7f:e8:87:07:9d:ea:49:c3:bc:37: 24:51:f3:4f:a4:73:61:88:c1:2f:b7:8d:fb:e2:97:57:56:a3: 4a:da:02:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JjCsREMOelIPPFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTM0ZTRiZjktOTgzZC00ODg2LWJjOWYtYTJjNWFmMjdmNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMtj/FIAcEIv31PS+8m6fVA8V133WPB7yI6y TIseCHiFz/Mnd5Tw2dvABirZXEFwfaksTGEK11gf3/HEedp69GAAf+io0VMIfkGA j3fgPv78ia0t4L2v3n+0B2GbvapVTQNc1dGMeSqMaxb8s+3/PNx8oNudzHH50TH/ q6Ch6YXeE1CGF8gWUtrMvooFfTOw5iGR6vj74/UiCZ3flN+CRTycLyASDt+/6tw7 2Rbpyim+pdkHaNRjXE2XDRw2OL4TOob5o4ephermmGc5AUdy5QffJR4dVzz+P4GC WcPsRg9vDEjYpUgdlzWAG2vFtplXLKu7mOnsJSuGkxNpdqM2QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGhk6zxmbq2y7sjzJOSrdvFlAYCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTY4ZTQxNDgtY2YxZS0z ODk3LTk1MGQtNzNiMTY3MGY5NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKohwZNc7xokMUv5SBiesacexrSWsDfdMd+ckxNXoWHKsGDyHhFw aCG+JzLVxX4C0ds3OlzNu7pkpFqGo/c2kGCOoCIfterMAgtgzHbXu1Tpjso5amYS 0OGWIos03jOeA9DovAVa9EViClxmjROIpvolyw9oiy1zM0B+uHqwUrAZnKweFWDg Ud5ns8Exu+tjITXWhT+8cJuCqCzscyrqPK5An7173Z8kXlENsPowccvRnscXp1WN bqETyYw6GV/DnzS9nE+MCJRU/sAHGTMWtdswoggTSZ07uXIPRr+i8/5Mf+iHB53q ScO8NyRR80+kc2GIwS+3jfvil1dWo0raArc= -----END CERTIFICATE-----Generated at Sun Sep 27 22:11:01 2026 by rpki-client