$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa File: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (raw, json) Hash identifier: qUdRvTN2iEkt+aQgJEr5vqrxy+SQYREcCjeMD/ADHh4= Subject key identifier: A9:7F:AC:85:48:AB:95:D4:6F:06:6D:1D:A5:43:3C:C4:02:7B:B5:18 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584DC40055FED3261BB1A01C2840 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 912 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:55:fe:d3:26:1b:b1:a0:1c:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=34fc8115-aee1-4560-a2ce-43ac8a07bf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:88:04:57:2a:1f:95:8e:fb:6b:68:63:9c:9a: 45:98:63:07:0b:ce:c7:d8:a4:02:ea:68:12:90:4f: db:85:a9:20:c7:2e:95:4d:94:c5:54:d0:9a:f2:7b: a7:2e:69:85:fd:b2:16:ee:b2:69:38:75:70:4c:25: c8:46:31:94:81:c8:16:1b:3a:70:a1:7d:a7:01:b0: 6f:be:db:e4:1b:eb:8a:20:2f:2d:d9:91:58:e6:f6: db:8e:39:9a:6e:dd:86:d5:54:55:a3:4f:cd:4d:28: ed:e9:2e:9a:f2:7d:5e:22:0e:a9:dc:92:83:ee:04: e2:7b:60:00:b7:3a:9d:e6:f2:de:3b:76:0e:65:c5: d9:10:e7:08:e6:f8:96:7f:ee:8a:87:3f:8e:1c:e6: 8b:91:15:2c:c5:f6:50:b8:1f:f3:5f:31:2b:89:1a: 75:b3:16:ca:1f:a6:03:d2:a1:98:67:f7:5a:5c:c7: 0f:f8:bc:df:76:39:ba:16:02:e9:f2:a6:05:86:3a: bd:25:aa:9a:ea:ec:44:f9:62:d0:e3:87:37:3a:b0: 4d:a3:4a:61:39:00:5e:8f:32:69:cd:66:d3:49:b1: e9:47:e7:35:3d:2b:76:1b:c4:20:da:e3:2f:67:99: cf:8f:c8:c8:b8:f7:fc:a3:3e:22:93:dd:60:d3:9d: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7F:AC:85:48:AB:95:D4:6F:06:6D:1D:A5:43:3C:C4:02:7B:B5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:90:4a:86:d2:6d:0f:e1:4b:7c:9b:d4:75:12:58:47:82:f5: 28:0e:1c:b2:b1:ff:b1:b1:47:58:08:06:da:0d:2a:cf:1d:56: d6:5a:ef:e7:61:6a:e5:e0:95:e8:62:c0:a7:a5:f3:68:7a:b4: 81:f3:f1:a4:37:bb:f3:74:24:35:98:57:ea:b6:48:85:85:d1: bf:40:73:ea:10:83:80:ec:6a:ba:eb:ae:1f:65:db:ea:95:4a: 7e:fa:e9:24:0d:56:ee:f2:3b:b1:18:47:b6:69:67:f1:3a:93: 3a:ff:55:bc:bf:30:1e:6f:de:e4:6a:8e:7e:4e:47:40:ab:65: a1:db:f9:17:d1:76:9c:54:41:f5:a4:f5:80:39:a9:63:89:a9: b6:19:d3:ed:ef:23:56:ff:7b:e1:d9:40:60:00:6e:85:29:97: 56:68:d4:f3:bf:33:28:56:13:a4:1e:5a:76:5d:16:1f:41:dd: fd:65:da:db:ba:ab:f5:9c:6e:c7:78:11:9e:19:f6:82:04:99: 07:2c:fa:b4:d1:8c:56:57:71:cd:2e:11:e7:a0:1b:f3:06:71: ed:8d:3b:4c:65:15:d4:9c:ae:67:9e:b0:19:58:a4:f9:2e:a7: 7a:d8:86:98:16:e4:f3:cb:c3:56:76:43:a3:51:8b:3f:8c:cd: 4d:6b:c5:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFX+0yYbsaAcKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk MzRmYzgxMTUtYWVlMS00NTYwLWEyY2UtNDNhYzhhMDdiZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4gEVyoflY77a2hjnJpFmGMHC87H2KQC6mgS kE/bhakgxy6VTZTFVNCa8nunLmmF/bIW7rJpOHVwTCXIRjGUgcgWGzpwoX2nAbBv vtvkG+uKIC8t2ZFY5vbbjjmabt2G1VRVo0/NTSjt6S6a8n1eIg6p3JKD7gTie2AA tzqd5vLeO3YOZcXZEOcI5viWf+6Khz+OHOaLkRUsxfZQuB/zXzEriRp1sxbKH6YD 0qGYZ/daXMcP+Lzfdjm6FgLp8qYFhjq9Jaqa6uxE+WLQ44c3OrBNo0phOQBejzJp zWbTSbHpR+c1PSt2G8Qg2uMvZ5nPj8jIuPf8oz4ik91g052UYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl/rIVIq5XUbwZtHaVDPMQCe7UYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvNDg2Y2Y1OTYtNmFjNS0z MjBjLWI0MzctZTljMWZkYjg5ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSQSobSbQ/hS3yb1HUSWEeC9SgOHLKx/7GxR1gIBtoNKs8dVtZa7+dh auXglehiwKel82h6tIHz8aQ3u/N0JDWYV+q2SIWF0b9Ac+oQg4Dsarrrrh9l2+qV Sn766SQNVu7yO7EYR7ZpZ/E6kzr/Vby/MB5v3uRqjn5OR0CrZaHb+RfRdpxUQfWk 9YA5qWOJqbYZ0+3vI1b/e+HZQGAAboUpl1Zo1PO/MyhWE6QeWnZdFh9B3f1l2tu6 q/Wcbsd4EZ4Z9oIEmQcs+rTRjFZXcc0uEeegG/MGce2NO0xlFdScrmeesBlYpPku p3rYhpgW5PPLw1Z2Q6NRiz+MzU1rxck= -----END CERTIFICATE-----Generated at Wed May 13 11:28:14 2026 by rpki-client