$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa File: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (raw, json) Hash identifier: JaamAzqphHZzToRfQ+Myb0iwpJB9VMQHsT6kUjj8kXA= Subject key identifier: AA:01:DC:69:C6:01:A6:8F:8B:AA:56:F1:4F:A7:99:2C:04:F0:CF:1A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584F506D47C806FD379EDE578FA0 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 19875 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:47:c8:06:fd:37:9e:de:57:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=24832463-ece4-441c-a5ba-5ea63ecf2d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:13:7f:54:3a:de:d7:c0:d8:54:42:60:7e: eb:70:ae:53:06:24:fc:9d:ca:4d:fc:6e:2c:59:90: 60:30:f8:1c:54:44:f9:75:81:9c:46:39:6f:7d:7e: 7e:fa:db:8e:93:dc:94:3d:1a:e8:a8:2b:f5:af:0c: 92:ce:9d:a8:a1:3a:31:40:ca:e5:be:d2:24:cf:97: 5e:1d:2e:ee:77:e0:40:a0:d4:52:d4:8b:59:03:8c: 06:b8:d9:60:b8:27:f1:2f:2b:b7:13:be:ae:92:d4: 18:1e:9b:ff:6d:75:6d:3b:62:d9:07:cc:03:17:9e: b1:12:ef:96:33:a4:04:2a:75:9c:bd:11:8d:18:52: ec:71:77:8e:dd:68:f9:aa:94:77:af:bc:10:e3:b7: ce:98:ce:a8:23:27:65:1a:8e:80:a1:58:a0:6d:b2: 21:27:0e:2c:94:ea:71:67:3a:59:03:51:f3:3d:38: 6e:ed:7a:38:9c:c9:ba:4c:11:1c:e1:15:37:1f:77: b4:0f:62:fd:70:85:8e:04:89:d3:ef:58:8e:dd:98: 70:bd:ae:f0:1e:39:45:e3:ba:9d:71:4a:b0:d0:d4: d2:15:39:e4:13:2c:9a:92:7d:19:32:5b:90:07:b3: 83:b5:ed:f4:48:83:c7:70:e9:75:1f:78:84:c1:16: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:DC:69:C6:01:A6:8F:8B:AA:56:F1:4F:A7:99:2C:04:F0:CF:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/139652f7-af23-334e-a7f9-9e08d724d62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e1:ec:3c:cd:c9:c9:b6:7e:97:63:5a:17:aa:ee:f5:da:ea: ba:b1:eb:2d:08:48:60:4f:18:c4:08:23:9f:6f:11:49:a6:d1: c1:6d:bb:5c:6b:7f:61:7f:c8:c2:03:e3:1f:57:34:36:1f:2d: ed:29:84:0a:31:e4:4e:37:e7:1c:37:ba:68:cd:fa:62:07:a8: 41:91:b2:57:97:1c:99:8f:df:40:7a:da:c7:25:04:f4:b7:53: a5:5f:70:a0:e2:71:7d:9b:17:97:8b:91:de:ef:05:91:3c:ed: e7:9c:db:76:1f:e0:d3:5d:bb:aa:31:24:02:a5:9e:30:92:e7: 1e:a6:41:ea:a7:6a:f7:ec:b8:06:6d:a6:39:6f:8c:06:50:ac: 58:37:f5:4d:5c:48:37:2e:d3:30:a8:12:fe:96:5d:55:0f:0d: b5:21:28:84:83:c2:24:13:46:e4:9d:b7:fc:b4:53:36:bf:ea: 7b:64:df:b7:90:1a:67:ca:27:dd:07:f4:21:37:fd:14:1c:0e: f9:01:5b:a1:5b:8f:67:2f:18:69:08:61:f9:88:a1:46:fe:af: 62:24:67:8a:fb:1c:37:0e:da:f4:2a:2b:c2:97:5f:8a:9f:86: cd:bd:cb:a6:93:f6:67:fe:68:bd:58:2b:5e:4f:c7:1c:c9:b5: a0:f6:2b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUfIBv03nt5Xj6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MjQ4MzI0NjMtZWNlNC00NDFjLWE1YmEtNWVhNjNlY2YyZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI8Tf1Q63tfA2FRCYH7rcK5TBiT8ncpN/G4s WZBgMPgcVET5dYGcRjlvfX5++tuOk9yUPRroqCv1rwySzp2ooToxQMrlvtIkz5de HS7ud+BAoNRS1ItZA4wGuNlguCfxLyu3E76uktQYHpv/bXVtO2LZB8wDF56xEu+W M6QEKnWcvRGNGFLscXeO3Wj5qpR3r7wQ47fOmM6oIydlGo6AoVigbbIhJw4slOpx ZzpZA1HzPThu7Xo4nMm6TBEc4RU3H3e0D2L9cIWOBInT71iO3Zhwva7wHjlF47qd cUqw0NTSFTnkEyyakn0ZMluQB7ODte30SIPHcOl1H3iEwRZgVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoB3GnGAaaPi6pW8U+nmSwE8M8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMTM5NjUyZjctYWYyMy0z MzRlLWE3ZjktOWUwOGQ3MjRkNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXh7DzNycm2fpdjWheq7vXa6rqx6y0ISGBPGMQII59vEUmm0cFtu1xr f2F/yMID4x9XNDYfLe0phAox5E435xw3umjN+mIHqEGRsleXHJmP30B62sclBPS3 U6VfcKDicX2bF5eLkd7vBZE87eec23Yf4NNdu6oxJAKlnjCS5x6mQeqnavfsuAZt pjlvjAZQrFg39U1cSDcu0zCoEv6WXVUPDbUhKISDwiQTRuSdt/y0Uza/6ntk37eQ GmfKJ90H9CE3/RQcDvkBW6Fbj2cvGGkIYfmIoUb+r2IkZ4r7HDcO2vQqK8KXX4qf hs29y6aT9mf+aL1YK15PxxzJtaD2K+c= -----END CERTIFICATE-----Generated at Fri Oct 9 22:46:38 2026 by rpki-client