$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/a6469a75-3af9-39ef-ae2f-0b913de50d29.roa File: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (raw, json) Hash identifier: 2HOCKx8FZe2gPhcAu/F3Kr+zdCpcsFXn0jNYmUM2BnQ= Subject key identifier: 3F:03:99:0B:03:8B:DE:00:16:74:E1:45:49:11:9E:0F:06:38:3F:08 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584B1AD17A414BFBCA9BBE551E90 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/a6469a75-3af9-39ef-ae2f-0b913de50d29.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 6453 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7a:41:4b:fb:ca:9b:be:55:1e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=d16ee92b-02c1-4a9d-adf0-8f877aa8eda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:7e:f3:c3:2f:51:10:03:a4:df:ed:68:ce: 6d:07:12:7f:57:f3:0b:f8:3c:c5:79:ec:07:3d:f5: 40:3b:44:45:dc:94:56:c4:c3:f8:9a:11:59:dd:78: 58:03:a4:9b:95:f9:65:73:df:a3:5d:9c:18:96:d1: 83:67:43:63:7d:9e:56:6c:8b:e5:b7:b1:da:fc:c2: 94:c6:ce:ec:8b:e5:da:aa:f3:63:0d:34:ea:ac:8b: 8b:68:ef:72:2d:c3:80:6f:14:5d:e7:6b:ae:8b:48: 4f:76:a6:e9:69:e1:de:1a:84:bc:3b:21:f6:ad:33: 5b:28:f6:0e:3b:65:e5:a3:0c:41:43:27:f6:fa:38: 0e:f0:2e:c7:5f:57:f8:50:6e:20:3d:0d:75:0c:71: ba:61:33:d3:17:6d:43:59:18:ce:4d:58:06:09:5a: 10:1c:ec:b1:74:87:6d:b4:79:b6:ea:b2:3a:af:e9: 35:80:72:01:fe:89:a4:ed:60:7e:21:9d:04:43:32: 07:c8:79:ed:78:91:6a:9d:2f:b4:24:96:ab:57:33: 5f:eb:e6:dd:71:9c:bb:c8:a7:1a:35:c1:8a:1e:b4: 46:83:23:d7:2f:0b:9b:4b:57:59:c0:ae:fb:ab:8c: e5:f0:78:2a:77:be:e5:c8:c4:e4:4f:2e:71:cf:ee: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:99:0B:03:8B:DE:00:16:74:E1:45:49:11:9E:0F:06:38:3F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/a6469a75-3af9-39ef-ae2f-0b913de50d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4e:f9:57:71:aa:5f:8c:d2:ef:f9:91:96:b8:70:d7:26:4a: 73:38:dc:dd:0f:b0:6b:fe:1d:09:7b:c6:11:eb:16:95:97:27: 07:f9:20:e5:9e:80:b8:2a:8c:67:8c:f7:a4:08:e6:b7:cb:e0: fd:cd:d8:d7:b0:c6:e0:4f:0e:e3:a1:b4:08:03:65:c6:0e:a7: 8f:be:fb:1b:66:b0:8e:73:01:e1:d1:ce:10:b2:9e:aa:e5:36: ae:16:a6:b2:d5:a5:e6:52:90:36:cf:f8:53:8a:01:79:db:53: aa:e5:75:9c:5e:8c:96:a1:50:45:ef:a0:66:32:de:91:5f:f4: 12:ea:b9:2d:37:c8:66:a3:23:50:e2:27:ec:d4:d5:b4:35:ea: 04:be:1e:42:07:09:7e:82:22:03:fa:8e:d2:44:d4:56:1f:4c: dd:d3:e1:8e:ba:54:f4:87:49:bf:ae:22:d4:a3:93:e6:bc:9d: 52:a9:d7:16:dc:67:e2:95:80:ee:e6:98:16:bc:e3:74:22:bc: 7b:1a:da:ee:ef:65:22:c6:b8:ec:0a:55:50:04:be:d3:75:4a: 31:0f:c6:b5:3a:dc:49:50:1d:b6:6f:39:1e:95:bc:c0:d5:20: 01:a6:be:b3:68:64:85:a6:9b:7a:67:d6:be:cc:e8:59:ef:db: a8:bf:6f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XpBS/vKm75VHpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDE2ZWU5MmItMDJjMS00YTlkLWFkZjAtOGY4NzdhYThlZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZR+88MvURADpN/taM5tBxJ/V/ML+DzFeewH PfVAO0RF3JRWxMP4mhFZ3XhYA6Sblfllc9+jXZwYltGDZ0NjfZ5WbIvlt7Ha/MKU xs7si+XaqvNjDTTqrIuLaO9yLcOAbxRd52uui0hPdqbpaeHeGoS8OyH2rTNbKPYO O2XlowxBQyf2+jgO8C7HX1f4UG4gPQ11DHG6YTPTF21DWRjOTVgGCVoQHOyxdIdt tHm26rI6r+k1gHIB/omk7WB+IZ0EQzIHyHnteJFqnS+0JJarVzNf6+bdcZy7yKca NcGKHrRGgyPXLwubS1dZwK77q4zl8Hgqd77lyMTkTy5xz+5cPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8DmQsDi94AFnThRUkRng8GOD8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvYTY0NjlhNzUtM2FmOS0z OWVmLWFlMmYtMGI5MTNkZTUwZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1O+Vdxql+M0u/5kZa4cNcmSnM43N0PsGv+HQl7xhHrFpWXJwf5IOWe gLgqjGeM96QI5rfL4P3N2NewxuBPDuOhtAgDZcYOp4+++xtmsI5zAeHRzhCynqrl Nq4WprLVpeZSkDbP+FOKAXnbU6rldZxejJahUEXvoGYy3pFf9BLquS03yGajI1Di J+zU1bQ16gS+HkIHCX6CIgP6jtJE1FYfTN3T4Y66VPSHSb+uItSjk+a8nVKp1xbc Z+KVgO7mmBa843QivHsa2u7vZSLGuOwKVVAEvtN1SjEPxrU63ElQHbZvOR6VvMDV IAGmvrNoZIWmm3pn1r7M6Fnv26i/b+g= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:41 2025 by rpki-client