$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: kMzKmAVnwwcMlhYXc2tosWW4513xduc2gZE73JsdAGk= Subject key identifier: E2:15:65:66:16:F4:40:16:CA:E6:C5:97:4D:B3:59:80:11:9A:AB:32 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584E9BE50B2AEA080ACFC3D90E00 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 4755 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:0b:2a:ea:08:0a:cf:c3:d9:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=b7cec87d-4fbd-4fb1-b20e-3f7990d0b4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:be:0e:f6:8d:4f:ea:42:fc:b4:5a:ff:57: 33:68:b9:67:f0:c0:a9:81:78:a9:41:e4:0f:0e:b7: 4a:08:6c:e1:79:01:8c:ed:9a:6c:61:aa:c9:a0:3c: e4:03:55:30:ac:e6:7a:a0:7f:ec:26:74:cd:68:2d: b0:56:2e:24:50:b6:7e:95:e7:35:03:19:e7:36:4b: 67:21:11:35:9a:ea:a5:4a:07:f5:9a:53:b9:76:fb: 66:d4:e4:cd:6c:af:d5:09:a6:b8:23:86:9d:d7:cb: fc:4f:66:7b:0e:69:6d:f3:b6:42:91:27:57:6f:12: 88:70:58:bd:dd:2d:37:e9:8a:b2:9a:52:bd:1b:77: 9f:56:55:45:95:5d:f1:5a:5c:43:fd:5a:ea:f1:54: f9:67:58:06:4a:77:d5:67:be:a1:15:85:fc:1e:3c: d5:3c:2f:5e:e2:bc:1f:3b:8d:d1:7e:90:cd:2f:c8: a3:bf:5e:6f:2f:e3:b5:6d:e6:cf:ea:74:91:d0:1f: 4d:cb:0d:da:eb:18:13:03:d6:09:f9:a1:60:21:a4: d6:15:ab:9e:c3:08:f0:39:08:62:75:c5:99:06:46: 11:2e:d9:cf:2e:fc:45:c9:b3:e7:65:20:82:83:ae: db:03:38:f0:17:e9:5f:71:06:62:9f:a4:f8:b7:16: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:15:65:66:16:F4:40:16:CA:E6:C5:97:4D:B3:59:80:11:9A:AB:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1e:63:47:83:94:7b:76:c7:8e:cf:20:96:9b:d3:c5:66:a3: 52:e7:9f:f1:e5:75:94:74:5f:f2:6e:af:b4:36:74:bb:a8:c0: 3c:71:2d:59:6f:91:6c:56:ec:6b:7d:64:fd:a4:e3:92:0b:23: 33:df:fb:d2:ba:ae:28:46:12:aa:21:2f:ab:e9:cd:45:6a:1a: ed:1d:c4:a1:98:c9:97:43:4c:f9:7b:bf:be:90:00:e8:00:45: 09:84:da:45:ce:12:3a:9d:9b:0f:9f:f1:4c:03:5f:17:27:d7: 06:21:1b:b6:89:3b:58:7b:44:75:58:cd:e7:7e:55:4b:64:05: 21:1c:91:8f:65:fc:a1:ce:11:e8:d1:f6:23:d2:52:6d:83:6c: c8:a8:2b:a1:5e:4c:cf:f2:0d:71:2d:37:9c:ac:bd:16:7e:6a: 10:fb:a8:5e:d2:d5:80:57:73:5d:9e:46:81:73:2d:de:d0:0f: bd:ab:e1:30:4f:05:75:9f:b8:af:7d:0b:d1:0f:c8:17:ea:46: 02:cd:2b:60:65:6c:49:95:1b:c6:c7:0b:3f:bf:6e:17:4c:6a: 95:c2:b5:ca:00:49:91:37:66:e1:2d:d7:e1:7f:de:1b:89:0c: a9:99:02:2f:87:ac:93:8b:fb:07:ec:84:01:89:33:97:bd:26: 33:68:49:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Qsq6ggKz8PZDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YjdjZWM4N2QtNGZiZC00ZmIxLWIyMGUtM2Y3OTkwZDBiNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKe+DvaNT+pC/LRa/1czaLln8MCpgXipQeQP DrdKCGzheQGM7ZpsYarJoDzkA1UwrOZ6oH/sJnTNaC2wVi4kULZ+lec1AxnnNktn IRE1muqlSgf1mlO5dvtm1OTNbK/VCaa4I4ad18v8T2Z7Dmlt87ZCkSdXbxKIcFi9 3S036YqymlK9G3efVlVFlV3xWlxD/Vrq8VT5Z1gGSnfVZ76hFYX8HjzVPC9e4rwf O43RfpDNL8ijv15vL+O1bebP6nSR0B9Nyw3a6xgTA9YJ+aFgIaTWFauewwjwOQhi dcWZBkYRLtnPLvxFybPnZSCCg67bAzjwF+lfcQZin6T4txa+FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIVZWYW9EAWyubFl02zWYARmqsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoeY0eDlHt2x47PIJab08Vmo1Lnn/HldZR0X/Jur7Q2dLuowDxxLVlv kWxW7Gt9ZP2k45ILIzPf+9K6rihGEqohL6vpzUVqGu0dxKGYyZdDTPl7v76QAOgA RQmE2kXOEjqdmw+f8UwDXxcn1wYhG7aJO1h7RHVYzed+VUtkBSEckY9l/KHOEejR 9iPSUm2DbMioK6FeTM/yDXEtN5ysvRZ+ahD7qF7S1YBXc12eRoFzLd7QD72r4TBP BXWfuK99C9EPyBfqRgLNK2BlbEmVG8bHCz+/bhdMapXCtcoASZE3ZuEt1+F/3huJ DKmZAi+HrJOL+wfshAGJM5e9JjNoSbI= -----END CERTIFICATE-----Generated at Wed Jul 29 07:59:01 2026 by rpki-client