$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa File: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (raw, json) Hash identifier: YUUsUgxukIJu0+btURfRRwCfb7mZJjDs1IMNbXcN20g= Subject key identifier: F8:9B:C4:FE:79:10:7C:67:B5:D5:D8:34:0C:7C:2F:51:2B:C2:3E:40 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F43285849ABB498C04E0DE307FC577E00 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11342 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:98:c0:4e:0d:e3:07:fc:57:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a49e967c-1732-44e2-b9a8-66912450d95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:3f:e9:3a:ed:72:0d:6d:ae:61:ab:55:15: c5:b5:2e:98:ba:10:ac:35:d2:38:3a:1a:6e:c0:ed: 7f:86:81:f4:9e:23:b6:60:e2:43:70:88:ce:08:26: ed:9e:ac:66:e5:e5:1d:d5:c4:94:da:73:bc:b5:68: 79:78:d4:29:4c:d2:8e:67:7c:a4:48:14:1b:b2:48: 4f:1e:70:62:c8:ba:1f:c6:ae:ec:4a:56:a2:fc:0c: 13:16:ea:4f:d0:aa:1e:52:de:55:b9:9c:57:95:ed: 6a:ed:b7:f0:0b:29:62:82:7b:42:23:ef:c2:f0:dc: d8:c2:12:f2:ac:e7:8b:f5:7b:c1:ad:c8:0b:e3:f8: 62:d0:ab:97:a0:5c:f0:9f:29:b8:f3:7e:4d:b1:ab: 99:1f:04:49:07:5f:36:22:6f:3d:04:34:df:82:0f: d8:95:e8:7f:3e:fd:d6:ca:ea:c0:d1:ea:86:7f:35: 95:56:1c:56:b6:0f:33:52:5e:d7:2f:c3:32:ad:8e: 8b:0e:80:a4:6f:6c:10:30:90:15:e5:6f:5d:9a:04: 23:54:c0:e5:88:d6:88:23:42:c3:95:3c:f2:38:9a: 91:20:93:82:e7:d2:31:e6:32:39:de:5b:8b:b8:c4: 8a:05:e6:2f:16:c0:b7:54:98:69:01:f4:ab:c6:2c: 0d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:C4:FE:79:10:7C:67:B5:D5:D8:34:0C:7C:2F:51:2B:C2:3E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b3:18:bb:d2:48:61:61:a1:06:d8:0c:ad:2d:bd:84:13:70: 40:a6:c2:f2:f9:f4:57:5b:56:04:55:30:83:a1:9d:50:0f:d6: 34:9d:da:aa:73:ac:b3:f0:5a:09:66:36:d2:60:aa:ad:63:58: 68:90:2b:13:d3:15:c4:f7:c9:c8:af:37:76:cb:d8:ae:33:4b: 77:99:7e:16:89:61:68:63:f5:ee:77:04:d3:36:a7:89:55:9f: 07:23:c4:e2:75:fe:8c:03:54:91:25:9a:0a:d4:d9:9c:b6:4e: 55:62:cc:1b:01:5b:f2:93:fe:90:01:bb:6f:8c:fa:05:75:41: 84:0a:22:eb:30:fa:ef:27:55:f7:70:48:dc:8a:81:84:6d:b8: fd:91:f5:c4:7c:74:68:f6:6f:34:ac:0d:ae:b7:5c:ef:9a:6c: 77:a1:8a:a5:12:45:65:f7:c3:2d:d6:86:7d:79:0d:3a:be:08: b4:35:75:63:b1:50:62:b7:93:c8:bd:d0:10:80:6e:54:b4:63: b4:b6:38:6a:60:93:c6:ec:d0:2b:aa:33:a2:91:1a:22:42:47: 3c:14:5b:fe:73:8e:9b:7f:44:1c:fa:42:e0:16:93:3b:e4:eb: 02:16:a0:31:95:48:8a:66:a8:84:b9:17:00:9b:49:96:72:88: 34:d9:f9:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJjATg3jB/xXfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTQ5ZTk2N2MtMTczMi00NGUyLWI5YTgtNjY5MTI0NTBkOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW8/6Trtcg1trmGrVRXFtS6YuhCsNdI4Ohpu wO1/hoH0niO2YOJDcIjOCCbtnqxm5eUd1cSU2nO8tWh5eNQpTNKOZ3ykSBQbskhP HnBiyLofxq7sSlai/AwTFupP0KoeUt5VuZxXle1q7bfwCyligntCI+/C8NzYwhLy rOeL9XvBrcgL4/hi0KuXoFzwnym4835NsauZHwRJB182Im89BDTfgg/Yleh/Pv3W yurA0eqGfzWVVhxWtg8zUl7XL8MyrY6LDoCkb2wQMJAV5W9dmgQjVMDliNaII0LD lTzyOJqRIJOC59Ix5jI53luLuMSKBeYvFsC3VJhpAfSrxiwNpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPibxP55EHxntdXYNAx8L1Erwj5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjc2MjY1MjAtMjQ1Yy0z M2ZiLWJiOTktNWRjN2QwODIxZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuzGLvSSGFhoQbYDK0tvYQTcECmwvL59FdbVgRVMIOhnVAP1jSd2qpz rLPwWglmNtJgqq1jWGiQKxPTFcT3ycivN3bL2K4zS3eZfhaJYWhj9e53BNM2p4lV nwcjxOJ1/owDVJElmgrU2Zy2TlVizBsBW/KT/pABu2+M+gV1QYQKIusw+u8nVfdw SNyKgYRtuP2R9cR8dGj2bzSsDa63XO+abHehiqUSRWX3wy3Whn15DTq+CLQ1dWOx UGK3k8i90BCAblS0Y7S2OGpgk8bs0CuqM6KRGiJCRzwUW/5zjpt/RBz6QuAWkzvk 6wIWoDGVSIpmqIS5FwCbSZZyiDTZ+RY= -----END CERTIFICATE-----Generated at Mon May 12 15:41:40 2025 by rpki-client