$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: j20E4xVJgKHWwzxBnHjr7Y8/llGqJ+OBFW8uKPmBidQ= Subject key identifier: 7B:50:64:2A:C7:0C:1B:15:2F:7E:60:34:B5:68:5B:64:B9:71:DA:9B Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584B1AD17A297504DB6ADA86BFC0 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 4755 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7a:29:75:04:db:6a:da:86:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=9415e63d-4ebe-43de-93e9-8cdaad0702f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:ae:5d:cf:2c:2b:2a:ee:52:b8:cf:a7:da: e5:05:10:d0:15:93:97:f3:ac:b7:5e:e3:58:aa:b6: 3d:8a:92:86:ab:a6:3d:ed:d2:74:cc:e8:4b:1e:8c: 39:eb:65:cc:2e:3c:14:ef:5c:4f:bd:1d:02:8d:21: c7:3c:0a:35:55:0b:6a:68:b6:98:27:be:a5:2b:cb: d4:79:00:45:ec:14:4d:05:07:37:da:0f:87:c8:f3: 6e:b1:f2:6d:9a:ac:71:72:e3:04:55:94:20:29:fd: 78:73:7a:3b:8e:6e:2a:bb:6a:9a:99:b9:bd:17:fc: 25:4e:f4:cb:c1:c3:44:5e:27:f9:51:5d:84:ca:19: 36:96:6e:8b:5e:e7:b8:e1:36:c8:41:00:86:4d:79: d0:2d:7e:5d:fb:55:ee:b7:07:70:f6:18:71:fe:67: f6:a6:08:0c:1a:ec:3a:fe:24:cf:f7:27:cc:60:ba: 88:c6:2e:56:e4:d7:c1:cc:f4:06:7d:53:10:c8:80: 0a:26:40:c7:a2:f0:6c:53:e9:28:23:57:b2:23:b7: d1:4b:04:ac:c4:3e:2e:10:92:87:8b:7d:5a:7c:bf: b4:bb:d7:82:30:dc:9f:cd:78:b8:d8:ab:8e:5e:5b: c8:da:c0:48:59:38:7d:5c:08:c2:f9:93:38:ba:0c: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:50:64:2A:C7:0C:1B:15:2F:7E:60:34:B5:68:5B:64:B9:71:DA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:15:1e:6f:a7:81:f5:6a:3e:35:9b:0e:10:3d:19:02:ab:ef: 00:73:07:e6:81:70:1c:9e:88:30:ad:50:53:0b:35:f7:3c:0c: a9:24:69:98:29:39:1c:a0:d0:b8:8c:bd:b9:40:ae:8d:81:e4: dc:87:b8:15:72:b0:09:36:07:d5:9d:15:1c:5a:b0:e5:e8:c0: b3:6f:2f:27:c4:4d:65:2d:6f:0d:ad:f1:88:a6:c1:f5:54:e3: 52:e5:fe:bd:24:29:66:d0:1d:03:63:91:77:ba:2f:d0:0e:94: 6c:83:6c:79:6d:74:84:2c:1d:b4:ef:46:03:de:5e:8c:8a:6c: c6:6c:05:29:89:da:59:49:99:9b:6e:68:f1:d4:7e:8f:ec:df: f3:15:60:85:1a:a1:64:2f:ea:0d:0d:f5:a9:68:24:99:49:46: df:7a:bf:07:9a:40:ab:2d:aa:66:0a:8b:09:cf:28:66:d4:a9: 7e:ad:54:4b:f0:66:86:9a:b1:3e:a0:5a:7d:5c:e5:0f:10:34: 98:3a:d6:a7:af:3f:8d:81:21:97:31:18:b0:8e:57:34:14:76: 60:52:14:4e:da:e4:58:99:51:1d:24:91:6f:eb:36:b5:d0:6f: bd:57:39:0c:2d:0f:58:0a:e8:96:e1:07:ea:a2:6e:79:83:72: 2b:af:f3:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XopdQTbatqGv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OTQxNWU2M2QtNGViZS00M2RlLTkzZTktOGNkYWFkMDcwMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFauXc8sKyruUrjPp9rlBRDQFZOX86y3XuNY qrY9ipKGq6Y97dJ0zOhLHow562XMLjwU71xPvR0CjSHHPAo1VQtqaLaYJ76lK8vU eQBF7BRNBQc32g+HyPNusfJtmqxxcuMEVZQgKf14c3o7jm4qu2qambm9F/wlTvTL wcNEXif5UV2Eyhk2lm6LXue44TbIQQCGTXnQLX5d+1Xutwdw9hhx/mf2pggMGuw6 /iTP9yfMYLqIxi5W5NfBzPQGfVMQyIAKJkDHovBsU+koI1eyI7fRSwSsxD4uEJKH i31afL+0u9eCMNyfzXi42KuOXlvI2sBIWTh9XAjC+ZM4ugzZewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtQZCrHDBsVL35gNLVoW2S5cdqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkVHm+ngfVqPjWbDhA9GQKr7wBzB+aBcByeiDCtUFMLNfc8DKkkaZgp ORyg0LiMvblAro2B5NyHuBVysAk2B9WdFRxasOXowLNvLyfETWUtbw2t8YimwfVU 41Ll/r0kKWbQHQNjkXe6L9AOlGyDbHltdIQsHbTvRgPeXoyKbMZsBSmJ2llJmZtu aPHUfo/s3/MVYIUaoWQv6g0N9aloJJlJRt96vweaQKstqmYKiwnPKGbUqX6tVEvw ZoaasT6gWn1c5Q8QNJg61qevP42BIZcxGLCOVzQUdmBSFE7a5FiZUR0kkW/rNrXQ b71XOQwtD1gK6JbhB+qibnmDciuv840= -----END CERTIFICATE-----Generated at Sat Oct 11 01:30:06 2025 by rpki-client