$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa File: f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa (raw, json) Hash identifier: l3WIunsmPu1XlKgWicfoYzjm3S1k7QD+0pv0aqOwt5A= Subject key identifier: E6:B1:93:61:26:86:DA:1C:18:D3:04:CB:A1:3E:51:ED:14:BC:C6:5E Certificate issuer: /CN=2e78bb85-c387-4ef5-a2b3-647636da166a Certificate serial: 010D0C9F4328584B4E77071A006F1946D07FF6D4 Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 57624 IP address blocks: 208.78.36.0/24 maxlen: 24 208.78.37.0/24 maxlen: 24 208.78.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:07:1a:00:6f:19:46:d0:7f:f6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=b667d4b8-f67e-4e27-b97f-23ad64782036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:82:59:95:6f:e8:7b:17:fc:b8:5e:f3:f8: 76:c3:31:02:5b:07:de:83:6a:ab:0f:a6:3a:7d:13: 1c:8e:06:1f:43:b2:52:24:6c:8e:fd:c8:0b:24:74: b6:9d:94:d8:15:47:83:52:b5:2e:f8:c7:e8:4f:6f: 0a:cb:50:94:40:19:c7:66:ec:42:24:8c:6d:26:29: be:ca:0b:27:3a:8f:41:93:cf:0d:dd:53:e0:7a:33: 5a:81:4c:a0:c3:21:11:65:6b:9b:85:4c:00:23:84: 48:bd:e0:78:b5:ff:b5:01:ee:58:d6:8d:d8:f2:c1: 25:90:89:64:23:c6:24:dd:b7:86:af:2a:1e:d9:01: f7:5f:03:fe:e4:38:eb:24:b1:55:99:61:5e:8b:ee: 64:bf:31:3a:65:c1:c0:60:74:26:c4:03:0c:d1:11: 23:f1:1e:f1:95:6c:b2:a8:d9:ea:bd:bd:d5:2c:30: 63:85:24:d5:6a:08:65:4c:f8:c3:4e:c4:cc:dc:1c: 79:d3:5f:12:2f:d5:f0:55:07:71:26:f8:0d:04:ab: e9:79:f2:c5:f5:f9:ef:1c:6f:44:c7:81:e5:d7:aa: 41:31:70:22:af:59:d7:82:47:c5:cb:d1:c0:89:21: 35:47:cf:12:b0:97:6c:ec:9d:ab:de:61:fa:ca:31: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B1:93:61:26:86:DA:1C:18:D3:04:CB:A1:3E:51:ED:14:BC:C6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl X509v3 Authority Key Identifier: keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer sbgp-ipAddrBlock: critical IPv4: 208.78.36.0/23 208.78.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:0a:67:4f:24:33:b1:dd:2f:24:97:5f:76:39:19:78:9c:8d: 13:2d:74:89:f0:dd:2a:19:ab:b9:9a:f2:01:e6:06:a8:52:0c: 08:d6:83:3a:1f:45:a8:19:54:ec:11:d0:bf:72:c1:77:c7:5d: b4:61:11:6c:42:69:df:92:73:af:a5:d5:7a:5f:8c:07:ef:39: b6:83:58:4c:3a:fa:aa:4e:6f:df:73:44:65:f1:cb:0f:51:e6: fc:37:c0:cc:94:0b:19:4f:26:15:72:aa:d6:d4:8e:0e:1c:9c: 0c:c8:11:99:bd:c6:e0:1f:85:43:60:b2:88:55:64:6d:54:15: f6:17:f5:c8:94:80:91:c2:81:d7:ba:3f:b8:37:be:44:2b:a4: 7d:34:87:02:c6:8c:6f:8c:da:ed:c2:50:1a:1f:40:fd:72:4e: 2b:d4:04:41:ef:c4:19:42:b2:d4:bb:c2:eb:d9:59:de:06:b3: e9:6c:cf:5a:fa:b6:e1:9a:69:c4:5a:82:2f:62:d2:06:d6:c6: 16:34:a1:e7:76:ea:d0:17:92:36:c8:b2:1a:75:74:cb:61:ce: a7:74:13:07:5d:77:32:ca:b3:67:1a:9d:56:3e:10:e6:40:33: 1b:b2:06:33:34:7e:8a:dc:ea:c0:39:d5:c7:e2:01:0d:12:1a: c9:1a:01:1c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtOdwcaAG8ZRtB/9tQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU3OGJiODUtYzM4Ny00ZWY1LWEyYjMtNjQ3NjM2ZGEx NjZhMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YjY2N2Q0YjgtZjY3ZS00ZTI3LWI5N2YtMjNhZDY0NzgyMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf+CWZVv6HsX/Lhe8/h2wzECWwfeg2qrD6Y6 fRMcjgYfQ7JSJGyO/cgLJHS2nZTYFUeDUrUu+MfoT28Ky1CUQBnHZuxCJIxtJim+ ygsnOo9Bk88N3VPgejNagUygwyERZWubhUwAI4RIveB4tf+1Ae5Y1o3Y8sElkIlk I8Yk3beGryoe2QH3XwP+5DjrJLFVmWFei+5kvzE6ZcHAYHQmxAMM0REj8R7xlWyy qNnqvb3VLDBjhSTVaghlTPjDTsTM3Bx5018SL9XwVQdxJvgNBKvpefLF9fnvHG9E x4Hl16pBMXAir1nXgkfFy9HAiSE1R88SsJds7J2r3mH6yjEkIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOaxk2EmhtocGNMEy6E+Ue0UvMZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZTc4 YmI4NS1jMzg3LTRlZjUtYTJiMy02NDc2MzZkYTE2NmEvZjAwMWNiMGYtZDc2MS0z ZDBlLWJhMzEtNzRmZmIzYjg1NWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmU3OGJiODUtYzM4Ny00ZWY1LWEy YjMtNjQ3NjM2ZGExNjZhLzJlNzhiYjg1LWMzODctNGVmNS1hMmIzLTY0NzYzNmRh MTY2YS5jcmwwHwYDVR0jBBgwFoAUCoRC+eaSsjIunkYokOLiCMEk2mYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZTc4YmI4NS1jMzg3LTRlZjUtYTJiMy02NDc2 MzZkYTE2NmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0E4kAwQA 0E4nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD8KZ08kM7HdLySXX3Y5GXicjRMtdInw3SoZq7ma8gHmBqhS DAjWgzofRagZVOwR0L9ywXfHXbRhEWxCad+Sc6+l1XpfjAfvObaDWEw6+qpOb99z RGXxyw9R5vw3wMyUCxlPJhVyqtbUjg4cnAzIEZm9xuAfhUNgsohVZG1UFfYX9ciU gJHCgde6P7g3vkQrpH00hwLGjG+M2u3CUBofQP1yTivUBEHvxBlCstS7wuvZWd4G s+lsz1r6tuGaacRagi9i0gbWxhY0oed26tAXkjbIshp1dMthzqd0EwdddzLKs2ca nVY+EOZAMxuyBjM0forc6sA51cfiAQ0SGskaARw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:18 2025 by rpki-client