$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: gXjDDRpozX1zYOKaKcLycNJ990uKHjGBwE8j3+iUevw= Subject key identifier: EE:DA:92:8B:2F:11:84:63:2B:B3:3F:A2:15:86:EB:22:40:7E:DF:B4 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584A3A157B1725491DFB61936900 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 4755 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7b:17:25:49:1d:fb:61:93:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=82b1cfef-9b38-4341-b83c-25c958d7d3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:ed:a1:bb:2a:e5:93:36:5c:db:a3:3b:12: 7a:5b:40:81:71:f8:52:9f:f4:8b:6f:5b:b1:a8:31: c5:b0:35:95:77:0d:96:1d:0d:75:ce:0a:25:ae:c1: 82:3a:f4:b6:28:52:fe:6c:7c:cd:bd:06:c7:46:b7: 7b:4d:9c:f8:be:fb:8d:f2:ce:74:d5:e4:45:af:98: c3:57:fb:cf:b8:48:f0:91:04:7b:ef:8f:9a:59:42: 9a:f4:0f:01:29:79:d0:6f:05:7c:3e:7a:23:f8:3d: 9d:70:51:b1:66:b0:66:2c:4a:d0:79:d8:6d:5b:51: 82:3f:04:3f:0b:22:2a:32:26:3f:99:62:37:41:24: 31:8e:ae:c7:74:d3:a1:0b:9e:a8:21:df:99:42:11: bb:e6:1b:24:0f:4f:b0:8b:17:21:81:3e:1f:dd:e8: cd:88:ff:09:17:04:ae:3f:80:63:0a:67:8c:ca:d8: ac:8e:48:6f:11:93:21:1d:7a:7a:ed:6a:d6:17:50: 1f:6a:67:98:d0:3f:12:ba:10:4a:a0:91:74:15:a6: 4d:27:e5:a8:f1:fe:70:9e:11:86:b4:ab:81:a5:b9: c1:80:a6:c8:08:ed:db:f1:24:4c:89:9e:90:99:f9: 94:06:e8:1e:33:a3:94:82:f6:b6:3a:1d:e2:0e:c5: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:92:8B:2F:11:84:63:2B:B3:3F:A2:15:86:EB:22:40:7E:DF:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fd:58:a1:28:22:23:4e:4f:c7:4f:13:6e:09:6a:45:7e:31: 9d:45:af:55:e9:75:ca:75:cf:73:74:68:21:ec:d9:09:3c:61: 0f:d8:36:00:ce:94:4e:05:b8:db:23:0c:af:3e:55:e0:b6:88: 49:eb:40:ce:c0:c2:ab:f2:84:00:41:6b:62:bc:e4:7a:35:a4: f3:d6:31:1b:8b:fe:aa:c0:d2:c8:5e:81:4e:39:74:fc:09:0a: 23:15:08:9a:0d:0e:6f:56:24:8c:a4:6c:28:aa:ec:1e:27:ea: 14:7e:78:e2:6c:53:da:06:25:73:87:2b:44:c4:f5:a5:84:e3: dc:6b:33:2a:d2:1a:c5:e7:61:dd:e1:53:00:7d:3a:0c:9f:9e: 26:e4:cf:c9:d4:00:bb:2a:d2:e7:8d:23:a0:69:09:92:2b:9c: 66:1a:96:b0:08:d6:83:e8:7d:32:47:fa:9a:c0:77:62:a6:f0: 5c:fc:c4:59:2a:5c:5b:04:0b:2f:33:7b:72:73:5b:e7:ba:d4: da:e7:88:16:9e:58:15:21:6b:ad:7e:bc:ec:ff:cc:2c:c8:89: 54:e1:56:45:4c:13:b4:04:5c:c5:64:fb:bb:48:a7:c3:34:00: 92:34:53:52:5b:2d:e5:67:31:fe:63:01:c3:e1:eb:90:0c:53: d0:b6:66:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXsXJUkd+2GTaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ODJiMWNmZWYtOWIzOC00MzQxLWI4M2MtMjVjOTU4ZDdkM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrftobsq5ZM2XNujOxJ6W0CBcfhSn/SLb1ux qDHFsDWVdw2WHQ11zgolrsGCOvS2KFL+bHzNvQbHRrd7TZz4vvuN8s501eRFr5jD V/vPuEjwkQR774+aWUKa9A8BKXnQbwV8Pnoj+D2dcFGxZrBmLErQedhtW1GCPwQ/ CyIqMiY/mWI3QSQxjq7HdNOhC56oId+ZQhG75hskD0+wixchgT4f3ejNiP8JFwSu P4BjCmeMytisjkhvEZMhHXp67WrWF1AfameY0D8SuhBKoJF0FaZNJ+Wo8f5wnhGG tKuBpbnBgKbICO3b8SRMiZ6QmfmUBugeM6OUgva2Oh3iDsWZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7akosvEYRjK7M/ohWG6yJAft+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID9WKEoIiNOT8dPE24JakV+MZ1Fr1Xpdcp1z3N0aCHs2Qk8YQ/YNgDO lE4FuNsjDK8+VeC2iEnrQM7AwqvyhABBa2K85Ho1pPPWMRuL/qrA0shegU45dPwJ CiMVCJoNDm9WJIykbCiq7B4n6hR+eOJsU9oGJXOHK0TE9aWE49xrMyrSGsXnYd3h UwB9Ogyfnibkz8nUALsq0ueNI6BpCZIrnGYalrAI1oPofTJH+prAd2Km8Fz8xFkq XFsECy8ze3JzW+e61NrniBaeWBUha61+vOz/zCzIiVThVkVME7QEXMVk+7tIp8M0 AJI0U1JbLeVnMf5jAcPh65AMU9C2Zhg= -----END CERTIFICATE-----Generated at Sun Jun 29 20:26:53 2025 by rpki-client