$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa File: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (raw, json) Hash identifier: Z943qcbkc+4fwXnRwFMd5AYhZWxObs4SWi+KZDGRqqs= Subject key identifier: 5B:27:26:E7:F3:7D:E7:24:E6:97:AD:DC:F8:02:A1:BB:76:C8:17:5D Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584F506D453AD3C24C1138812280 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11342 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:45:3a:d3:c2:4c:11:38:81:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3885f4a1-2cc2-4d90-8235-173c3891438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:40:9d:d7:86:25:bf:6a:92:3f:7f:4a:20: 29:65:b3:b2:b7:3c:6b:91:4f:5a:96:50:6f:cd:ff: af:6e:3c:05:7f:7f:f3:20:94:bc:45:ab:f6:98:89: 73:39:06:54:64:30:0f:a0:7a:7c:90:9e:bb:0d:97: 50:83:1c:77:4e:65:50:a4:02:65:f5:b6:66:80:71: 6b:ee:6c:14:15:32:f3:97:18:e5:74:1d:df:13:85: 9e:39:c7:f8:51:06:e4:f2:da:e3:a3:69:0f:0e:35: 5b:9d:c6:d9:f2:2a:f1:d5:7a:2f:fa:88:1e:ea:1e: a8:7a:4e:f7:c0:21:f0:1f:a9:27:07:cb:ab:e6:4b: 59:6a:f7:d0:14:38:88:7d:e8:24:fa:c7:26:6d:89: 46:71:8d:a2:40:9d:f9:39:01:56:cd:c0:1a:69:df: 29:98:5f:c7:2e:67:53:93:45:d4:fa:b1:fc:6d:97: f5:77:6a:41:e8:b6:ca:b1:dd:83:a3:09:9c:07:0b: 8e:87:08:d2:24:0a:8e:37:e6:c2:b7:bb:13:29:5d: 01:66:31:d5:79:44:71:6f:27:d2:30:8f:92:d5:be: bb:bd:bc:71:10:6a:01:7c:78:76:b2:ce:1e:5f:f4: 6c:95:57:7f:20:77:5c:10:1f:06:ef:99:c0:63:f6: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:26:E7:F3:7D:E7:24:E6:97:AD:DC:F8:02:A1:BB:76:C8:17:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:68:f8:ee:48:09:00:b0:48:e4:12:0f:41:2e:31:f3:4f:d5: 91:41:14:ce:6c:9a:b7:06:9c:c7:d9:27:ab:86:0f:8e:9f:6a: 92:c1:79:63:02:0b:80:22:4e:ed:86:ec:56:98:cf:f3:3d:4c: 4f:2f:8b:1f:ba:65:a3:d0:93:90:27:2b:8a:66:48:e4:7f:b9: a3:87:f1:16:66:b1:dc:06:88:eb:52:32:0a:fd:e3:a8:ef:f1: 71:db:a9:a0:3b:b5:27:b5:08:00:1b:49:99:e9:fe:90:aa:dd: f4:41:5d:5f:19:52:d6:5f:ff:91:eb:73:f6:44:58:73:0f:6a: b2:d1:83:e6:fd:72:78:4a:c7:8d:52:1e:01:c3:41:a7:77:95: 7c:0c:ab:bf:54:f3:99:52:69:22:ec:a2:b3:41:71:cc:6a:34: a8:97:6e:41:bf:f2:e4:67:79:be:04:a7:0b:14:da:3b:19:15: 3a:70:13:26:1e:3d:3b:fe:5f:ea:2a:bc:bb:fa:15:be:dc:b4: f7:93:5e:fe:3f:67:a9:02:21:5b:7d:b3:71:7d:5f:42:97:07: 1c:c7:6e:d9:7a:a9:29:ad:d7:21:39:2f:c0:93:2e:d7:5d:6a: 76:f6:48:64:9b:a9:d5:86:df:1a:fe:42:fa:31:39:3c:d0:35: 48:b8:c5:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUU608JMETiBIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk Mzg4NWY0YTEtMmNjMi00ZDkwLTgyMzUtMTczYzM4OTE0MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDtAndeGJb9qkj9/SiApZbOytzxrkU9allBv zf+vbjwFf3/zIJS8Rav2mIlzOQZUZDAPoHp8kJ67DZdQgxx3TmVQpAJl9bZmgHFr 7mwUFTLzlxjldB3fE4WeOcf4UQbk8trjo2kPDjVbncbZ8irx1Xov+oge6h6oek73 wCHwH6knB8ur5ktZavfQFDiIfegk+scmbYlGcY2iQJ35OQFWzcAaad8pmF/HLmdT k0XU+rH8bZf1d2pB6LbKsd2DowmcBwuOhwjSJAqON+bCt7sTKV0BZjHVeURxbyfS MI+S1b67vbxxEGoBfHh2ss4eX/RslVd/IHdcEB8G75nAY/YHKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsnJufzfeck5pet3PgCobt2yBddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjc2MjY1MjAtMjQ1Yy0z M2ZiLWJiOTktNWRjN2QwODIxZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdo+O5ICQCwSOQSD0EuMfNP1ZFBFM5smrcGnMfZJ6uGD46fapLBeWMC C4AiTu2G7FaYz/M9TE8vix+6ZaPQk5AnK4pmSOR/uaOH8RZmsdwGiOtSMgr946jv 8XHbqaA7tSe1CAAbSZnp/pCq3fRBXV8ZUtZf/5Hrc/ZEWHMParLRg+b9cnhKx41S HgHDQad3lXwMq79U85lSaSLsorNBccxqNKiXbkG/8uRneb4EpwsU2jsZFTpwEyYe PTv+X+oqvLv6Fb7ctPeTXv4/Z6kCIVt9s3F9X0KXBxzHbtl6qSmt1yE5L8CTLtdd anb2SGSbqdWG3xr+QvoxOTzQNUi4xbw= -----END CERTIFICATE-----Generated at Sat Oct 10 16:00:31 2026 by rpki-client