$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa File: b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa (raw, json) Hash identifier: hRXhDQkkbRSuQ+4uSkXbU94kjmOmBqikdY6r2NcwQO0= Subject key identifier: 40:10:A4:87:74:29:FE:FB:3C:7C:F6:F5:A2:FB:4E:28:C7:BF:6E:F8 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A5DCF85815CA17CA6914A4058 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa Signing time: Mon 30 Jun 2025 20:09:04 +0000 ROA not before: Mon 30 Jun 2025 20:09:04 +0000 ROA not after: Sun 28 Sep 2025 20:09:04 +0000 asID: 3477 IP address blocks: 2610:20:8c00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:cf:85:81:5c:a1:7c:a6:91:4a:40:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jun 30 20:09:04 2025 GMT Not After : Sep 28 20:09:04 2025 GMT Subject: CN=e56dba39-906c-42bc-bf96-853e16160195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:ac:30:f5:8e:dc:a5:20:c0:f0:ba:5c:aa: 43:81:9c:a4:af:74:17:75:c1:00:7d:b3:78:af:8b: e5:b7:ea:55:ec:4f:7c:cf:04:74:29:83:7d:e8:e4: 0b:7d:29:6d:46:39:0a:e8:62:c7:0a:31:2b:09:29: 0b:d3:45:59:5b:d8:a8:d6:6f:90:82:9a:4a:e3:a8: c4:b9:8d:c2:6a:06:33:41:77:6a:62:8e:85:1c:4d: 0f:02:bb:ad:b0:67:b9:c0:c7:20:a8:f0:72:c6:ea: fe:90:d3:db:46:01:4a:0d:b3:38:8e:d9:84:5c:26: 8a:e8:3b:95:81:9c:1e:6a:ff:e4:3a:26:64:48:68: 1f:3d:35:4e:88:4c:c5:b0:1a:4d:be:9c:2b:19:52: 8c:61:8e:ac:0d:28:41:b6:7b:af:ff:4a:d8:fa:7f: a5:f8:a6:e0:a3:6c:0a:19:e4:40:a3:0a:06:b9:a6: 60:b9:f0:d1:32:e0:62:ac:a1:f8:0f:22:7d:c5:9c: 9d:e1:a8:11:8b:ec:d6:1c:2e:f2:65:e6:01:57:29: 55:69:e8:ba:d0:d4:32:84:d5:2a:f4:f7:58:e7:15: 73:14:0e:5d:b4:d0:6b:28:89:90:14:41:e5:35:79: e1:c2:a8:03:80:63:69:43:7c:32:e0:1a:0a:a8:e0: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:10:A4:87:74:29:FE:FB:3C:7C:F6:F5:A2:FB:4E:28:C7:BF:6E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:8c00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:32:b6:b0:d8:91:64:42:59:15:ee:d0:e2:ca:2b:ec:c4:a2: d9:d8:64:23:17:08:74:26:dc:ea:3d:c3:6b:50:23:a2:e6:96: 65:06:e4:df:23:63:0a:36:05:01:9a:49:ea:1d:bd:18:01:e9: 53:48:e1:4c:eb:aa:b1:3b:a0:ff:32:c1:96:7d:2f:09:5f:3e: 72:ad:82:45:8a:b4:02:00:ff:ca:41:43:16:5d:44:59:4f:2c: b6:4c:af:ae:74:dd:87:39:23:cd:ad:91:aa:2f:9b:3d:cf:39: 22:7b:c5:75:a2:97:1d:c8:40:12:6e:0d:df:4c:9b:a9:e7:79: 7b:05:a4:91:11:6d:30:98:b8:25:18:cb:ed:26:e4:29:6e:13: c5:3a:d3:fe:6a:8c:23:67:43:31:55:d6:47:65:71:9c:d7:14: bd:6e:7e:08:c7:9d:bf:7c:f5:f4:2f:16:5c:cd:7b:9a:c0:ad: 3d:c1:83:3b:4c:2d:0f:f7:c2:d1:d0:11:bf:11:e6:7b:a8:66: 14:44:d1:85:7a:d9:1b:6d:5f:bd:0d:76:de:66:d5:55:0c:68: 9c:42:ca:e8:c2:bc:ea:7c:0e:3b:31:2e:2b:8b:56:41:5e:f1: df:bc:af:2c:48:04:c8:fa:17:39:59:0b:d1:6d:14:d8:e1:39: 4a:97:42:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpdz4WBXKF8ppFKQFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDYzMDIwMDkwNFoXDTI1MDkyODIwMDkwNFowLzEtMCsGA1UEAxMk ZTU2ZGJhMzktOTA2Yy00MmJjLWJmOTYtODUzZTE2MTYwMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU+sMPWO3KUgwPC6XKpDgZykr3QXdcEAfbN4 r4vlt+pV7E98zwR0KYN96OQLfSltRjkK6GLHCjErCSkL00VZW9io1m+QgppK46jE uY3CagYzQXdqYo6FHE0PArutsGe5wMcgqPByxur+kNPbRgFKDbM4jtmEXCaK6DuV gZweav/kOiZkSGgfPTVOiEzFsBpNvpwrGVKMYY6sDShBtnuv/0rY+n+l+Kbgo2wK GeRAowoGuaZgufDRMuBirKH4DyJ9xZyd4agRi+zWHC7yZeYBVylVaei60NQyhNUq 9PdY5xVzFA5dtNBrKImQFEHlNXnhwqgDgGNpQ3wy4BoKqOBAQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEAQpId0Kf77PHz29aL7TijHv274MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYjJkMmYyYWItYTc1OC0z N2Q1LWExZjAtNmFmZTRhOWMwNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4ytrDYkWRCWRXu0OLKK+zEotnYZCMXCHQm3Oo9w2tQI6LmlmUG 5N8jYwo2BQGaSeodvRgB6VNI4UzrqrE7oP8ywZZ9LwlfPnKtgkWKtAIA/8pBQxZd RFlPLLZMr6503Yc5I82tkaovmz3POSJ7xXWilx3IQBJuDd9Mm6nneXsFpJERbTCY uCUYy+0m5CluE8U60/5qjCNnQzFV1kdlcZzXFL1ufgjHnb989fQvFlzNe5rArT3B gztMLQ/3wtHQEb8R5nuoZhRE0YV62RttX70Ndt5m1VUMaJxCyujCvOp8DjsxLiuL VkFe8d+8ryxIBMj6FzlZC9FtFNjhOUqXQmQ= -----END CERTIFICATE-----Generated at Tue Jul 1 10:31:28 2025 by rpki-client