$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: xD7rWjf84+aZk6zf/llql+XmyZXFND3bh6FN8lSYjQA= Subject key identifier: BE:4C:8E:25:CE:36:04:FB:1A:97:19:EF:3E:56:0C:A6:47:C4:5F:80 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F432858495ABEBE918B7FB3FF1FE8EF80 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 4755 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:be:91:8b:7f:b3:ff:1f:e8:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=7d59e926-fc2f-4ad8-8272-c913b13904fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:a5:48:8c:cb:68:fc:0a:46:88:36:8c:2e: ed:06:fc:a9:b9:72:cd:8e:ae:b4:b6:e8:25:a2:88: 61:bc:fa:17:8d:83:c2:bf:75:3b:9e:a4:a4:dc:f0: 0f:53:71:1d:b8:f0:97:a9:ba:32:af:1a:6b:99:9e: b6:f6:91:5c:13:e4:d8:cf:b6:6a:92:dd:b1:e9:bb: a7:70:1e:b9:fd:17:7a:03:50:0f:8c:5c:5e:f0:31: 63:56:3f:bc:e9:21:9f:6d:e3:e7:c1:e9:e4:72:04: ea:0f:4b:cb:9b:1b:f2:6f:9f:5c:d5:29:cf:bc:8e: 30:fc:3d:1a:aa:66:24:69:ca:c1:0e:a4:1d:18:c2: fd:e0:e4:74:6e:b6:68:09:c1:f9:e4:77:34:88:05: 66:4c:ce:36:82:fd:23:28:c1:11:3e:5f:34:5b:4b: 98:b3:95:58:13:db:10:ef:c1:a1:0e:e0:a7:da:70: ad:55:de:75:6f:b5:c0:23:72:48:10:4f:fc:ab:4d: 05:48:f7:b1:a2:ab:e6:0c:c6:21:f7:5d:d3:cf:ae: 33:c6:ed:08:fa:34:57:9b:13:fa:6a:f5:b8:f3:6a: 7e:22:d3:a9:50:a4:45:22:a3:96:61:23:1a:1c:bf: f9:a7:cb:ba:77:ad:16:bf:e5:ec:c9:6f:8f:cb:d6: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4C:8E:25:CE:36:04:FB:1A:97:19:EF:3E:56:0C:A6:47:C4:5F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:12:9c:90:d3:17:db:b2:0b:83:a8:1e:f4:8e:c5:1c:06:83: f9:8a:5b:f2:ad:d5:1f:d4:a9:4e:a7:a3:96:a3:23:55:e7:c4: d4:2c:07:f1:16:eb:93:49:ce:1b:dc:19:2d:b3:79:ff:5f:44: ac:6d:23:d2:0c:b1:fd:73:c9:c7:2e:d8:b2:4c:6f:82:5d:09: e3:ba:55:49:8c:cf:2f:04:e2:1e:01:f0:be:72:e8:d4:78:a7: e7:f3:3e:ae:c5:a3:84:ea:b9:49:5a:f0:2c:7d:37:51:e3:b6: 6d:a8:d8:b6:3b:78:fe:53:d8:b3:f8:fb:64:5a:e2:82:c2:2a: d8:ef:9b:d0:f3:42:60:98:48:17:3b:50:ce:f4:42:b7:12:dc: af:d1:7a:e8:d3:49:f9:2e:e7:05:40:0c:ed:67:36:f2:bf:06: 43:6e:07:73:39:71:67:36:b3:61:9a:13:cc:a6:7a:fd:bf:a9: 4f:a5:63:ad:c8:af:2c:06:80:65:77:4c:69:53:46:52:84:69: ec:3d:00:7c:e2:20:80:3a:09:18:8b:ad:b0:c6:07:d5:a1:16: a4:58:73:85:e3:21:3a:26:05:c3:10:49:37:d6:53:6b:ea:07: 45:7a:83:ea:53:a3:15:84:af:b5:f4:96:63:6a:4f:55:5b:09: 87:6d:c8:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavr6Ri3+z/x/o74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk N2Q1OWU5MjYtZmMyZi00YWQ4LTgyNzItYzkxM2IxMzkwNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS+lSIzLaPwKRog2jC7tBvypuXLNjq60tugl oohhvPoXjYPCv3U7nqSk3PAPU3EduPCXqboyrxprmZ629pFcE+TYz7Zqkt2x6bun cB65/Rd6A1APjFxe8DFjVj+86SGfbePnwenkcgTqD0vLmxvyb59c1SnPvI4w/D0a qmYkacrBDqQdGML94OR0brZoCcH55Hc0iAVmTM42gv0jKMERPl80W0uYs5VYE9sQ 78GhDuCn2nCtVd51b7XAI3JIEE/8q00FSPexoqvmDMYh913Tz64zxu0I+jRXmxP6 avW482p+ItOpUKRFIqOWYSMaHL/5p8u6d60Wv+XsyW+Py9at/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5MjiXONgT7GpcZ7z5WDKZHxF+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8SnJDTF9uyC4OoHvSOxRwGg/mKW/Kt1R/UqU6no5ajI1XnxNQsB/EW 65NJzhvcGS2zef9fRKxtI9IMsf1zyccu2LJMb4JdCeO6VUmMzy8E4h4B8L5y6NR4 p+fzPq7Fo4TquUla8Cx9N1Hjtm2o2LY7eP5T2LP4+2Ra4oLCKtjvm9DzQmCYSBc7 UM70QrcS3K/ReujTSfku5wVADO1nNvK/BkNuB3M5cWc2s2GaE8ymev2/qU+lY63I rywGgGV3TGlTRlKEaew9AHziIIA6CRiLrbDGB9WhFqRYc4XjITomBcMQSTfWU2vq B0V6g+pToxWEr7X0lmNqT1VbCYdtyDk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:57 2025 by rpki-client