$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c5fafa55-4ef1-30c1-acf8-b93105203694.roa File: c5fafa55-4ef1-30c1-acf8-b93105203694.roa (raw, json) Hash identifier: tDFNfHLUMCsuXq54ZvLiAU/QdeRLKoIU1jkhODAgdBA= Subject key identifier: 3A:50:69:63:C4:09:7B:65:7F:5B:74:9A:EA:6C:A3:7D:73:ED:02:06 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584F49739183A9D44BF48FBD9100 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c5fafa55-4ef1-30c1-acf8-b93105203694.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3477 IP address blocks: 2610:20:9124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:91:83:a9:d4:4b:f4:8f:bd:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b5355a20-e118-4015-99f2-cd5fd2b209c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:0d:af:34:0d:1c:2b:93:1c:f4:08:7c:76: dc:87:b8:d2:e6:d8:ca:dd:22:aa:cd:a5:a2:b1:52: 62:db:85:bd:a7:94:aa:c7:53:31:f1:e1:54:8c:10: 67:a2:76:8d:ff:d2:9c:d0:5e:9e:5d:f4:5f:dd:ab: 2a:d3:8f:fd:1d:58:1e:62:9c:86:53:71:6f:fc:c6: d8:ba:75:fb:98:40:86:89:1a:8d:ec:e6:aa:be:b1: 07:67:ab:8d:bc:2f:86:67:4c:bb:20:b6:4e:eb:4a: 47:f3:1b:1c:4c:26:81:22:69:13:a1:62:25:b4:c2: 13:f8:f8:5f:cf:c1:53:28:f0:bc:09:b9:73:88:b9: ea:2a:e6:01:9a:be:ca:ca:b3:ea:22:97:8e:bc:4d: bb:15:bb:1f:ce:a9:fe:88:10:c5:68:35:0c:3c:ea: 71:1b:06:13:2a:1a:a8:9c:aa:c4:e0:62:d5:53:f5: f4:98:e7:ca:36:8f:fa:07:12:8d:91:96:78:ab:32: e7:f0:2c:35:dc:72:0c:fe:d8:e2:97:cc:50:ab:26: 1e:27:bd:a2:ac:0d:34:67:eb:01:b5:2a:db:0b:76: 38:b9:ba:26:5f:45:e0:00:ef:63:48:75:bb:a9:29: a0:53:d1:f4:63:70:e1:c8:94:ff:e7:3c:78:93:ec: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:50:69:63:C4:09:7B:65:7F:5B:74:9A:EA:6C:A3:7D:73:ED:02:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c5fafa55-4ef1-30c1-acf8-b93105203694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:9124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a0:10:b8:d3:ac:1c:68:5d:9d:81:92:d2:c4:e2:fd:62:6e: 1b:ac:0f:da:70:6b:d3:8f:19:83:59:9b:ec:81:ce:eb:18:f4: 2c:3d:42:0f:23:02:8f:2a:8f:07:fa:40:a6:d8:8a:bd:c1:29: 34:7f:c8:54:93:fb:2d:ea:ec:ac:34:ff:2f:0e:83:5b:62:51: 4a:73:00:cb:1f:2c:a4:7b:fe:5d:d3:aa:fd:4f:e0:0b:dc:e9: c0:37:1c:45:a9:6e:06:5d:cc:9b:20:24:12:25:4d:66:b7:38: 88:e7:1e:ed:03:03:49:60:78:7c:26:fa:26:17:78:21:dc:59: 47:c4:8d:e0:72:fd:83:bc:7f:26:ee:37:47:18:a9:5f:3d:03: 48:f5:68:87:3c:39:d5:f0:bf:0d:a9:73:74:33:92:a2:dd:5a: db:49:09:5f:56:3a:3f:7b:03:18:93:0f:e8:ee:1b:30:73:c7: 9b:2a:37:4d:b9:6b:ff:64:eb:36:a4:e6:57:95:57:24:3b:aa: 05:2c:c5:82:0f:4a:6f:d5:d1:c1:59:3c:68:e2:86:26:af:4a: 4c:c8:2f:f3:43:29:a6:39:e1:16:6f:33:bd:0a:36:46:ce:19: 2e:12:01:c4:3c:48:d7:ce:f7:91:07:09:29:12:a4:a3:13:60: 74:1f:83:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc5GDqdRL9I+9kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjUzNTVhMjAtZTExOC00MDE1LTk5ZjItY2Q1ZmQyYjIwOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoawNrzQNHCuTHPQIfHbch7jS5tjK3SKqzaWi sVJi24W9p5Sqx1Mx8eFUjBBnonaN/9Kc0F6eXfRf3asq04/9HVgeYpyGU3Fv/MbY unX7mECGiRqN7OaqvrEHZ6uNvC+GZ0y7ILZO60pH8xscTCaBImkToWIltMIT+Phf z8FTKPC8CblziLnqKuYBmr7KyrPqIpeOvE27Fbsfzqn+iBDFaDUMPOpxGwYTKhqo nKrE4GLVU/X0mOfKNo/6BxKNkZZ4qzLn8Cw13HIM/tjil8xQqyYeJ72irA00Z+sB tSrbC3Y4ubomX0XgAO9jSHW7qSmgU9H0Y3DhyJT/5zx4k+yhkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDpQaWPECXtlf1t0mupso31z7QIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYzVmYWZhNTUtNGVmMS0z MGMxLWFjZjgtYjkzMTA1MjAzNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIJEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKqgELjTrBxoXZ2BktLE4v1ibhusD9pwa9OPGYNZm+yBzusY9Cw9 Qg8jAo8qjwf6QKbYir3BKTR/yFST+y3q7Kw0/y8Og1tiUUpzAMsfLKR7/l3Tqv1P 4Avc6cA3HEWpbgZdzJsgJBIlTWa3OIjnHu0DA0lgeHwm+iYXeCHcWUfEjeBy/YO8 fybuN0cYqV89A0j1aIc8OdXwvw2pc3QzkqLdWttJCV9WOj97AxiTD+juGzBzx5sq N025a/9k6zak5leVVyQ7qgUsxYIPSm/V0cFZPGjihiavSkzIL/NDKaY54RZvM70K NkbOGS4SAcQ8SNfO95EHCSkSpKMTYHQfgwY= -----END CERTIFICATE-----Generated at Mon Sep 28 07:31:37 2026 by rpki-client