$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c5fafa55-4ef1-30c1-acf8-b93105203694.roa File: c5fafa55-4ef1-30c1-acf8-b93105203694.roa (raw, json) Hash identifier: M3c19xZnH4c2EdBEVKkfU7f50z8TdadwXdv/giGz6l8= Subject key identifier: 05:64:94:F8:54:F7:74:05:F6:BC:07:53:0F:EE:14:C7:DA:1D:96:CF Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584A5DCF709EA59C9D24DBC8F3C0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c5fafa55-4ef1-30c1-acf8-b93105203694.roa Signing time: Mon 30 Jun 2025 20:08:54 +0000 ROA not before: Mon 30 Jun 2025 20:08:54 +0000 ROA not after: Sun 28 Sep 2025 20:08:54 +0000 asID: 3477 IP address blocks: 2610:20:9124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:cf:70:9e:a5:9c:9d:24:db:c8:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jun 30 20:08:54 2025 GMT Not After : Sep 28 20:08:54 2025 GMT Subject: CN=20cd9a6a-fc0c-4e1f-816c-9a3564d78e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:e6:f5:cd:f6:da:8a:41:b2:96:4e:4a:0f: a3:e0:33:bc:eb:5b:e4:3d:0b:00:95:47:c6:ac:a7: 8d:bc:44:c0:b4:48:bb:04:15:32:e9:1a:77:f9:7c: 28:38:f6:8f:df:de:63:ce:9b:aa:e6:c3:00:86:87: b6:b1:16:57:76:a8:2e:7f:80:67:e5:a0:81:49:d5: 93:b8:70:09:40:73:1c:d4:68:68:19:31:2a:55:65: a5:dc:91:64:95:a9:c3:25:d7:3d:84:0d:8a:62:50: cd:b9:97:fe:43:69:66:cb:0e:3f:ba:7b:69:8a:63: fb:86:54:6c:be:b3:b9:8b:f5:47:52:80:31:6b:86: 3c:63:24:0a:5c:a4:6a:5d:93:6a:d0:1e:56:4a:49: 70:b1:df:a5:1a:bb:a3:3f:fb:da:5a:16:a2:d8:55: 34:84:cf:cf:76:06:2d:ab:b2:98:79:89:d0:23:7f: 65:86:0b:44:b9:9c:3e:f2:ac:be:02:4f:76:4b:32: c7:37:94:80:9a:8b:13:89:6f:a1:cf:09:e2:c9:e9: 52:58:82:00:b7:ef:79:fc:09:57:55:f5:f1:27:10: 51:c9:fc:8a:f6:90:ee:a4:3b:36:e1:47:7e:91:d7: fb:60:88:25:2d:fb:f4:ce:17:b5:3c:3e:00:0a:1f: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:94:F8:54:F7:74:05:F6:BC:07:53:0F:EE:14:C7:DA:1D:96:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c5fafa55-4ef1-30c1-acf8-b93105203694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:9124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e3:78:c8:8b:35:ab:20:93:72:41:14:ce:22:49:75:29:e2: 95:54:b8:34:06:cb:de:bc:de:db:11:22:35:2a:ce:18:c6:98: 78:f8:48:55:88:e4:cb:cd:f9:9e:19:15:69:e7:27:7a:b5:0a: 90:8c:e3:54:c5:09:cb:39:d0:f4:42:f2:31:69:c2:4a:5a:bd: 28:0d:91:49:2e:0b:0c:42:0a:00:95:46:18:4b:be:00:eb:7c: 4a:19:b0:63:5a:64:85:f5:cf:81:cc:e8:48:fd:49:d4:c3:20: 31:4a:b8:2a:8d:6c:51:4f:66:84:04:6e:dd:0c:20:c3:fa:e7: c6:1b:5c:d6:b6:dc:74:08:3e:51:52:81:ee:d1:6f:9a:7d:a3: ef:91:99:f2:29:9e:52:84:db:55:49:c7:5a:e0:dd:33:5d:63: 41:1e:51:c4:69:29:6e:c5:2d:4b:6a:76:56:b5:a2:ba:98:22: 05:89:37:49:93:76:5b:f0:c6:88:5a:88:d0:04:e1:f9:0d:67: af:ed:60:f1:c8:49:36:6d:be:ef:52:5c:d1:05:c1:b6:c9:13: 47:55:45:f8:7c:af:35:0f:b2:ed:66:3d:3f:eb:f1:41:67:88: 9c:4f:58:52:81:ac:6a:df:ee:aa:db:75:64:87:93:96:04:6c: 4b:04:66:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpdz3CepZydJNvI88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDYzMDIwMDg1NFoXDTI1MDkyODIwMDg1NFowLzEtMCsGA1UEAxMk MjBjZDlhNmEtZmMwYy00ZTFmLTgxNmMtOWEzNTY0ZDc4ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfm9c322opBspZOSg+j4DO861vkPQsAlUfG rKeNvETAtEi7BBUy6Rp3+XwoOPaP395jzpuq5sMAhoe2sRZXdqguf4Bn5aCBSdWT uHAJQHMc1GhoGTEqVWWl3JFklanDJdc9hA2KYlDNuZf+Q2lmyw4/untpimP7hlRs vrO5i/VHUoAxa4Y8YyQKXKRqXZNq0B5WSklwsd+lGrujP/vaWhai2FU0hM/PdgYt q7KYeYnQI39lhgtEuZw+8qy+Ak92SzLHN5SAmosTiW+hzwniyelSWIIAt+95/AlX VfXxJxBRyfyK9pDupDs24Ud+kdf7YIglLfv0zhe1PD4ACh8iEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAVklPhU93QF9rwHUw/uFMfaHZbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYzVmYWZhNTUtNGVmMS0z MGMxLWFjZjgtYjkzMTA1MjAzNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIJEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDjeMiLNasgk3JBFM4iSXUp4pVUuDQGy9683tsRIjUqzhjGmHj4 SFWI5MvN+Z4ZFWnnJ3q1CpCM41TFCcs50PRC8jFpwkpavSgNkUkuCwxCCgCVRhhL vgDrfEoZsGNaZIX1z4HM6Ej9SdTDIDFKuCqNbFFPZoQEbt0MIMP658YbXNa23HQI PlFSge7Rb5p9o++RmfIpnlKE21VJx1rg3TNdY0EeUcRpKW7FLUtqdla1orqYIgWJ N0mTdlvwxohaiNAE4fkNZ6/tYPHISTZtvu9SXNEFwbbJE0dVRfh8rzUPsu1mPT/r 8UFniJxPWFKBrGrf7qrbdWSHk5YEbEsEZk8= -----END CERTIFICATE-----Generated at Tue Jul 1 10:39:55 2025 by rpki-client