$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: YJiCoss6jIknD4aSY9FbCTjCjsVVxEFOg0+DGuTQtK0= Subject key identifier: CA:82:4C:5B:44:80:06:29:B1:8A:44:DB:CD:B2:F4:31:97:90:70:FF Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584DBBA0452F772264BF90F9CC40 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 4755 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:45:2f:77:22:64:bf:90:f9:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=3e5ff67e-ef11-4715-b413-71e32f2dd6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e0:8a:92:ee:10:51:93:90:06:01:49:74:78: ce:41:d3:d4:9d:3c:2d:f4:a4:c3:6e:54:66:6a:5d: 87:83:aa:46:61:df:81:8b:17:b9:50:e9:c1:35:53: 63:2d:fe:e3:9f:2d:85:49:2b:1d:64:66:26:e3:3b: ff:4f:cb:49:c9:ca:ce:5a:a2:73:85:b8:f2:ba:33: 67:79:c5:14:8a:18:97:5e:b7:6d:1d:2c:ca:1d:86: 3b:5d:e3:85:ff:f2:66:19:00:61:5f:00:2f:5c:bc: c4:f0:d9:63:7d:55:d1:88:e7:3e:10:00:cd:55:60: c5:ea:8d:22:ae:55:4b:3c:8c:10:c1:2a:bf:7f:a1: 04:16:4b:c0:25:19:b3:3a:91:d0:43:3e:a4:2c:56: 6f:57:7a:7b:3a:07:39:cd:ff:a2:88:00:68:9e:7c: fd:57:87:63:69:0a:63:99:cc:48:8d:05:a9:95:85: e3:4b:50:a0:27:48:07:45:04:b9:dc:42:12:ce:ab: 1b:99:55:e0:e8:36:e6:a7:e6:3f:c1:7c:d3:33:4f: e1:ea:2e:92:15:a8:47:b8:89:a0:89:36:c5:80:41: 52:7b:f6:18:c4:db:d5:5e:33:35:00:79:48:6e:32: a1:24:c2:5f:1c:a9:b9:fb:3e:49:2f:60:70:ea:5c: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:82:4C:5B:44:80:06:29:B1:8A:44:DB:CD:B2:F4:31:97:90:70:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:10:ff:a3:72:46:b0:46:17:03:0d:b7:74:80:f6:19:cf:ff: 80:1a:c1:11:93:1c:b9:b9:60:f8:3b:10:3e:fd:3e:f6:ba:71: d6:a3:35:0b:2b:79:cb:1b:47:df:ae:d9:ad:d6:0d:b1:59:5f: 1c:13:8f:8a:f1:f1:84:7d:40:3b:db:e8:0b:41:ec:76:7f:cd: 3e:da:b2:ea:1f:d8:93:7f:7b:e9:d8:f8:8c:1f:ef:49:a6:f2: 19:5e:ad:f8:06:5b:ba:9d:ff:86:40:57:02:fd:81:76:ee:00: 25:50:ab:3d:20:b9:5e:68:1f:da:9a:63:a3:35:c4:69:45:9b: 43:a7:26:30:de:fe:30:62:94:73:a1:5a:3a:cd:07:99:d2:58: 7d:e7:61:13:ac:24:2e:06:27:85:7b:d0:c6:c0:0f:2a:51:1e: 4c:34:88:c8:8f:71:ca:18:b4:15:14:34:b3:5b:ce:31:45:05: c4:12:93:2e:e3:88:34:eb:d2:db:b2:62:62:49:1b:45:a9:40: c6:58:2a:35:46:d8:b6:86:b2:d8:fe:c5:04:c8:5c:b5:b9:af: f4:94:ee:f6:d0:b6:52:18:a1:93:54:5d:a1:9b:09:cc:00:60: f6:34:3d:59:1e:25:42:70:08:d2:eb:e4:8e:97:f5:b0:1c:f0: 09:71:45:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEUvdyJkv5D5zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk M2U1ZmY2N2UtZWYxMS00NzE1LWI0MTMtNzFlMzJmMmRkNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeCKku4QUZOQBgFJdHjOQdPUnTwt9KTDblRm al2Hg6pGYd+Bixe5UOnBNVNjLf7jny2FSSsdZGYm4zv/T8tJycrOWqJzhbjyujNn ecUUihiXXrdtHSzKHYY7XeOF//JmGQBhXwAvXLzE8NljfVXRiOc+EADNVWDF6o0i rlVLPIwQwSq/f6EEFkvAJRmzOpHQQz6kLFZvV3p7Ogc5zf+iiABonnz9V4djaQpj mcxIjQWplYXjS1CgJ0gHRQS53EISzqsbmVXg6Dbmp+Y/wXzTM0/h6i6SFahHuImg iTbFgEFSe/YYxNvVXjM1AHlIbjKhJMJfHKm5+z5JL2Bw6lz2YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqCTFtEgAYpsYpE282y9DGXkHD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMQ/6NyRrBGFwMNt3SA9hnP/4AawRGTHLm5YPg7ED79Pva6cdajNQsr ecsbR9+u2a3WDbFZXxwTj4rx8YR9QDvb6AtB7HZ/zT7asuof2JN/e+nY+Iwf70mm 8hlerfgGW7qd/4ZAVwL9gXbuACVQqz0guV5oH9qaY6M1xGlFm0OnJjDe/jBilHOh WjrNB5nSWH3nYROsJC4GJ4V70MbADypRHkw0iMiPccoYtBUUNLNbzjFFBcQSky7j iDTr0tuyYmJJG0WpQMZYKjVG2LaGstj+xQTIXLW5r/SU7vbQtlIYoZNUXaGbCcwA YPY0PVkeJUJwCNLr5I6X9bAc8AlxRfY= -----END CERTIFICATE-----Generated at Wed May 13 11:47:52 2026 by rpki-client