$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa File: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (raw, json) Hash identifier: OGWQn8hrZ3fllB7ZuJ/stYAMgGTlxbzLlrpBpnv0gj0= Subject key identifier: 2D:1B:B8:C7:5F:E7:38:BF:8F:A7:6D:32:2E:60:50:43:1D:B5:0E:1F Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584B6BC74BC541468D34B0CCE280 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 19875 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4b:c5:41:46:8d:34:b0:cc:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b90fcc62-8800-4d20-82b3-c3eb872e2e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:ff:01:a2:2b:48:48:d7:f1:58:e0:6b:e2: ce:f9:ca:b4:74:d5:48:c4:c0:f6:e6:0e:ac:a2:ce: 09:3a:2f:e7:4b:8c:e6:5e:22:f2:42:fb:81:6a:08: 08:7c:2e:7f:51:c8:27:1f:1f:64:e5:12:d5:7d:96: c9:2d:b2:38:db:a8:a3:3d:05:38:3a:e6:3c:6c:e8: a4:40:1c:62:71:ef:2a:f1:20:a8:4a:20:e7:f1:b5: 9e:6b:68:f8:42:ed:06:da:7c:04:a3:5d:f2:51:8a: 77:5a:0c:3b:6b:d9:91:0d:db:39:0f:20:81:b6:25: a0:00:6a:42:8f:82:b0:82:d7:2a:ab:7c:26:96:4c: d0:15:08:42:61:2e:e4:25:db:f8:0d:8c:6e:f3:1d: a8:c6:fa:bb:cc:45:bc:5f:71:55:f9:0e:81:ac:b6: 66:b2:b2:bd:5f:8e:75:3d:66:ea:01:1c:e2:03:5e: 0e:00:6c:47:59:fb:c8:c8:e5:8c:66:b6:88:10:37: 16:db:0c:07:50:ed:59:22:80:ba:10:d7:8b:1f:20: 90:7f:33:bd:b0:f4:ec:c6:5c:00:6d:2a:56:45:a7: 5b:28:7b:85:f1:fe:6c:c3:62:88:94:28:83:e4:78: c4:d4:1a:8a:2d:d3:7a:49:3b:36:50:2d:c3:47:55: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:B8:C7:5F:E7:38:BF:8F:A7:6D:32:2E:60:50:43:1D:B5:0E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:45:f9:99:ef:94:d5:c0:b0:6e:10:ed:b6:3e:63:40:59:0e: 54:68:b2:65:3d:cd:63:77:ec:08:2f:c2:05:b4:69:fb:f7:74: 22:bb:27:08:ec:02:a6:4e:78:3c:a4:9e:3b:ee:06:de:4c:ee: e5:47:20:68:c8:c8:1b:48:cb:30:2d:c0:ef:50:b6:86:e3:df: d0:05:d6:a4:b6:ab:17:0c:6c:93:cc:0a:e9:ba:01:a5:02:51: 46:d4:32:ca:a9:14:af:b7:3e:fc:2b:ae:0b:1e:c7:47:62:1f: fa:42:1c:6a:7a:ad:cd:77:15:b1:e3:cc:61:50:23:24:42:af: 17:38:13:4b:99:b6:b0:be:99:e7:f2:1d:8f:5a:89:34:e2:56: e1:82:bf:d5:d7:62:c3:ff:b8:bb:af:71:23:c8:ed:7f:59:fa: 04:52:2a:7a:f8:99:6d:f9:9c:96:e6:e9:e3:9a:02:5b:14:86: 8c:43:ca:9c:69:bd:1d:0f:d0:28:67:97:5c:dd:a7:19:1f:67: e3:c4:c2:cf:cd:3f:e6:52:f6:4b:d1:c2:eb:f6:5a:e5:76:11: 64:14:e8:75:97:1f:ba:96:2d:ef:ad:23:2b:a2:52:92:eb:35: 65:29:39:65:82:35:bf:d3:5d:4d:ed:c2:28:64:4c:69:7f:43: f5:07:d6:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0vFQUaNNLDM4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjkwZmNjNjItODgwMC00ZDIwLTgyYjMtYzNlYjg3MmUyZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY//AaIrSEjX8Vjga+LO+cq0dNVIxMD25g6s os4JOi/nS4zmXiLyQvuBaggIfC5/UcgnHx9k5RLVfZbJLbI426ijPQU4OuY8bOik QBxice8q8SCoSiDn8bWea2j4Qu0G2nwEo13yUYp3Wgw7a9mRDds5DyCBtiWgAGpC j4Kwgtcqq3wmlkzQFQhCYS7kJdv4DYxu8x2oxvq7zEW8X3FV+Q6BrLZmsrK9X451 PWbqARziA14OAGxHWfvIyOWMZraIEDcW2wwHUO1ZIoC6ENeLHyCQfzO9sPTsxlwA bSpWRadbKHuF8f5sw2KIlCiD5HjE1BqKLdN6STs2UC3DR1Vy+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0buMdf5zi/j6dtMi5gUEMdtQ4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMTM5NjUyZjctYWYyMy0z MzRlLWE3ZjktOWUwOGQ3MjRkNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxF+ZnvlNXAsG4Q7bY+Y0BZDlRosmU9zWN37AgvwgW0afv3dCK7Jwjs AqZOeDyknjvuBt5M7uVHIGjIyBtIyzAtwO9Qtobj39AF1qS2qxcMbJPMCum6AaUC UUbUMsqpFK+3Pvwrrgsex0diH/pCHGp6rc13FbHjzGFQIyRCrxc4E0uZtrC+mefy HY9aiTTiVuGCv9XXYsP/uLuvcSPI7X9Z+gRSKnr4mW35nJbm6eOaAlsUhoxDypxp vR0P0Chnl1zdpxkfZ+PEws/NP+ZS9kvRwuv2WuV2EWQU6HWXH7qWLe+tIyuiUpLr NWUpOWWCNb/TXU3twihkTGl/Q/UH1iI= -----END CERTIFICATE-----Generated at Sat Oct 11 01:31:47 2025 by rpki-client