$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa File: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (raw, json) Hash identifier: 0YSBgruHnXi/SlJrdCeJrZlsjX8EvCylN0rVqYV5zcY= Subject key identifier: 99:9A:EF:C4:CE:C0:7F:0A:BC:3A:1E:EE:F1:14:23:0D:32:16:B0:32 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584B23318A12F12CBA7C75D2B490 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 912 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8a:12:f1:2c:ba:7c:75:d2:b4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=e70d02fa-f0f9-4794-ab17-6468a8c6228d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:74:dc:e5:f4:ef:62:87:a2:62:c8:cb:ee: 62:d1:fa:15:c0:a3:1f:db:06:9f:01:0e:df:46:aa: 5d:03:06:c3:47:9a:ef:78:48:08:61:ba:a8:d0:67: db:de:15:60:09:21:2c:f5:43:d0:f6:11:6d:44:34: 9c:cd:5e:f8:59:3f:09:1e:72:91:35:19:40:60:22: 94:d1:19:7d:51:65:a2:cd:bd:58:12:46:75:58:4a: 88:62:e8:ce:6a:7d:04:49:0c:a2:ad:31:8d:b3:38: 52:6d:10:20:56:e0:1c:18:a7:96:e4:4e:48:68:a3: 3b:4e:57:70:bc:5a:59:82:ed:bd:f4:82:0b:6a:cd: b1:01:36:e1:e7:e9:a1:06:e4:88:4c:f9:16:24:63: 60:8d:18:cf:a2:b9:92:c2:ad:9e:78:a3:cc:7f:e5: f3:ee:78:04:8e:dd:ed:13:43:9b:dc:f6:7a:16:34: 4e:13:29:0c:c9:55:34:5c:b3:f7:8d:fd:72:8d:43: f4:d0:95:39:77:cf:f2:8d:fe:df:c0:99:a1:63:a1: 82:b6:2d:2d:c0:64:b1:e5:53:c6:89:0d:b7:42:c3: 51:bb:dd:29:ce:8c:33:44:1c:74:54:55:58:e8:0c: 48:92:bb:e8:4e:a8:39:9a:81:65:82:c3:0b:85:2e: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:EF:C4:CE:C0:7F:0A:BC:3A:1E:EE:F1:14:23:0D:32:16:B0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:23:c0:d1:39:28:21:57:48:5a:26:08:68:1b:9f:e2:4d:1f: 7b:61:3f:49:09:86:19:90:60:14:d1:02:2e:79:c1:00:d7:4b: a7:1e:6c:70:cc:0d:ef:25:9e:da:64:06:a5:db:62:c5:32:0e: 58:8c:f5:d5:dc:75:93:ab:f4:10:a1:cf:80:a8:97:b6:8d:5e: 53:0d:9d:35:84:c6:f8:7e:55:05:1a:3f:7b:61:f6:67:5b:24: 75:95:2a:78:23:74:4b:64:5a:3a:58:34:e2:01:5a:9e:f2:0f: dc:94:b2:b0:05:6e:93:39:59:fb:97:d4:b0:7b:b2:45:c8:40: 4c:1b:64:40:dd:0e:c3:c2:f1:d3:e3:61:2c:6b:2e:b3:cb:1f: 12:6e:96:b2:54:31:d6:5a:21:e6:ee:ae:ee:78:94:0d:e1:38: 19:70:a4:08:b2:e3:6b:92:49:4f:b8:99:10:77:a4:fa:f4:34: b7:3f:c2:9a:a8:7b:28:46:45:bf:0c:7a:06:8d:46:d3:04:41: cb:1e:d2:35:45:9d:e7:53:8f:05:2a:37:5a:8d:42:bc:fc:cc: 46:ef:ec:d6:82:8d:c7:15:85:b6:77:5c:45:fb:79:58:86:82: b8:f7:7c:1e:43:77:a5:56:33:ae:58:04:1e:de:74:4f:b2:66: 1e:6d:9a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYoS8Sy6fHXStJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZTcwZDAyZmEtZjBmOS00Nzk0LWFiMTctNjQ2OGE4YzYyMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aR03OX072KHomLIy+5i0foVwKMf2wafAQ7f RqpdAwbDR5rveEgIYbqo0Gfb3hVgCSEs9UPQ9hFtRDSczV74WT8JHnKRNRlAYCKU 0Rl9UWWizb1YEkZ1WEqIYujOan0ESQyirTGNszhSbRAgVuAcGKeW5E5IaKM7Tldw vFpZgu299IILas2xATbh5+mhBuSITPkWJGNgjRjPormSwq2eeKPMf+Xz7ngEjt3t E0Ob3PZ6FjROEykMyVU0XLP3jf1yjUP00JU5d8/yjf7fwJmhY6GCti0twGSx5VPG iQ23QsNRu90pzowzRBx0VFVY6AxIkrvoTqg5moFlgsMLhS6amQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJma78TOwH8KvDoe7vEUIw0yFrAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvNDg2Y2Y1OTYtNmFjNS0z MjBjLWI0MzctZTljMWZkYjg5ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEjwNE5KCFXSFomCGgbn+JNH3thP0kJhhmQYBTRAi55wQDXS6cebHDM De8lntpkBqXbYsUyDliM9dXcdZOr9BChz4Col7aNXlMNnTWExvh+VQUaP3th9mdb JHWVKngjdEtkWjpYNOIBWp7yD9yUsrAFbpM5WfuX1LB7skXIQEwbZEDdDsPC8dPj YSxrLrPLHxJulrJUMdZaIeburu54lA3hOBlwpAiy42uSSU+4mRB3pPr0NLc/wpqo eyhGRb8MegaNRtMEQcse0jVFnedTjwUqN1qNQrz8zEbv7NaCjccVhbZ3XEX7eViG grj3fB5Dd6VWM65YBB7edE+yZh5tmio= -----END CERTIFICATE-----Generated at Sat Oct 11 01:31:48 2025 by rpki-client