$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa File: ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa (raw, json) Hash identifier: VYWEFWhQuYLioaNlgnX8ZpOjaauSv/nWJyHd9wz0POA= Subject key identifier: D5:34:B2:D5:1A:62:A9:4A:62:60:0E:00:51:CE:64:BB:37:50:3A:36 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A5DD0AB9BA325021CF0E9EC00 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa Signing time: Mon 30 Jun 2025 20:11:23 +0000 ROA not before: Mon 30 Jun 2025 20:11:23 +0000 ROA not after: Sun 28 Sep 2025 20:11:23 +0000 asID: 3477 IP address blocks: 2610:20:90e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:d0:ab:9b:a3:25:02:1c:f0:e9:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jun 30 20:11:23 2025 GMT Not After : Sep 28 20:11:23 2025 GMT Subject: CN=3b1f3f01-2512-4640-b622-1a66b7de1882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:08:05:de:e8:29:8d:b5:88:92:c8:ab:72: f3:33:c9:3c:d0:d4:99:54:73:b5:9a:0c:d1:ee:0c: 2b:61:c3:b1:fd:3e:78:23:15:f1:37:02:8d:c7:c8: 44:7f:1b:f4:6d:48:7e:9a:a1:3e:5b:b7:12:e0:1b: a1:80:32:22:57:37:a1:17:4f:7a:2f:a8:db:50:02: df:4c:e3:0d:ed:93:bc:88:5f:0c:8f:a8:a0:f6:6b: 5c:8a:7f:79:6f:aa:31:fe:37:90:7d:e7:09:77:ef: 4c:98:7f:0a:37:f0:3c:de:2e:01:f6:d4:54:7b:3a: f9:87:6e:7c:2f:10:39:c4:eb:2d:86:45:df:0d:f5: 4f:25:b4:16:c8:6c:b9:d6:4e:72:6e:45:c4:06:7c: e6:a8:01:6a:08:89:04:35:65:67:8b:19:72:0b:c0: e4:cd:6d:7d:8f:43:97:c2:3d:76:d1:86:37:05:f2: 8a:cc:0a:c2:30:c0:5a:e5:c4:c8:1e:2f:07:9b:00: b7:db:02:43:ab:a1:32:1b:d4:f3:26:0a:ff:54:4c: 12:07:8b:4d:48:fb:f9:e3:ee:c1:7b:ee:46:20:1d: fc:8c:0f:38:06:54:9c:05:37:78:81:6f:c0:73:43: e6:60:06:7c:69:53:ab:97:db:09:81:bb:b2:d5:9b: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:34:B2:D5:1A:62:A9:4A:62:60:0E:00:51:CE:64:BB:37:50:3A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:90e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c9:e8:98:95:ab:7b:4f:d6:71:b7:9e:1d:13:b0:21:c2:34: 0c:00:b6:11:88:19:71:ab:5c:8d:ea:27:bf:c0:9a:e6:a4:a3: ab:2a:1d:7f:10:78:de:7c:2a:6c:1e:0c:53:e7:3e:0c:ca:5c: 45:31:19:70:84:94:9f:d7:99:dc:84:a3:ee:f4:ef:f9:e7:4b: 2a:8d:fc:18:8e:60:9d:16:57:2d:c8:f0:c5:06:0d:48:95:ae: 49:31:f0:e9:3b:73:3c:1b:80:12:bc:ae:e9:b8:ef:04:02:74: 40:00:ec:e8:0c:1d:2d:5d:51:63:0e:d6:e2:cf:34:32:31:21: eb:eb:15:11:a8:d7:61:54:bf:f2:90:ba:22:94:0b:7c:2f:93: a7:0d:fa:60:43:a1:61:52:e8:fd:86:44:0d:ca:54:3d:b9:eb: b9:14:87:fc:cf:d2:d2:75:04:64:62:7a:e2:13:10:6b:cb:5c: c0:38:a3:e3:0c:49:de:c6:d3:57:ca:f2:5b:f8:ce:3b:10:ec: 0e:15:84:20:9d:ad:de:4a:ac:9b:68:fc:d7:3e:cd:ce:26:85: 45:ff:4e:39:fe:07:c2:31:5c:46:e8:9f:67:5f:c2:be:d1:e2: 95:1a:13:ec:15:b7:12:a8:e8:d2:8f:d0:65:84:33:a8:a9:2b: c2:0b:2a:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpd0KuboyUCHPDp7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDYzMDIwMTEyM1oXDTI1MDkyODIwMTEyM1owLzEtMCsGA1UEAxMk M2IxZjNmMDEtMjUxMi00NjQwLWI2MjItMWE2NmI3ZGUxODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYgIBd7oKY21iJLIq3LzM8k80NSZVHO1mgzR 7gwrYcOx/T54IxXxNwKNx8hEfxv0bUh+mqE+W7cS4BuhgDIiVzehF096L6jbUALf TOMN7ZO8iF8Mj6ig9mtcin95b6ox/jeQfecJd+9MmH8KN/A83i4B9tRUezr5h258 LxA5xOsthkXfDfVPJbQWyGy51k5ybkXEBnzmqAFqCIkENWVnixlyC8DkzW19j0OX wj120YY3BfKKzArCMMBa5cTIHi8HmwC32wJDq6EyG9TzJgr/VEwSB4tNSPv54+7B e+5GIB38jA84BlScBTd4gW/Ac0PmYAZ8aVOrl9sJgbuy1Zsg4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNU0stUaYqlKYmAOAFHOZLs3UDo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYmEyNWY1ZTQtMDVkZS0z ZTlhLWJjYzEtNmI4ZDRlMDcwZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIJDg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfJ6JiVq3tP1nG3nh0TsCHCNAwAthGIGXGrXI3qJ7/Amuako6sq HX8QeN58KmweDFPnPgzKXEUxGXCElJ/XmdyEo+707/nnSyqN/BiOYJ0WVy3I8MUG DUiVrkkx8Ok7czwbgBK8rum47wQCdEAA7OgMHS1dUWMO1uLPNDIxIevrFRGo12FU v/KQuiKUC3wvk6cN+mBDoWFS6P2GRA3KVD2567kUh/zP0tJ1BGRieuITEGvLXMA4 o+MMSd7G01fK8lv4zjsQ7A4VhCCdrd5KrJto/Nc+zc4mhUX/Tjn+B8IxXEbon2df wr7R4pUaE+wVtxKo6NKP0GWEM6ipK8ILKmE= -----END CERTIFICATE-----Generated at Tue Jul 1 16:16:11 2025 by rpki-client