$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa File: f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa (raw, json) Hash identifier: ogAHI16Y5W1A9w2A7UIs2YLAiZUz0XJ3Ux87EXLds8I= Subject key identifier: 84:49:13:85:70:46:3F:55:AA:8C:2E:2D:DF:9F:85:BE:D1:7A:C7:A4 Certificate issuer: /CN=2e78bb85-c387-4ef5-a2b3-647636da166a Certificate serial: 010D0C9F4328584D0EA7AAF808D010DD89D4A580 Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 57624 IP address blocks: 208.78.36.0/24 maxlen: 24 208.78.37.0/24 maxlen: 24 208.78.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:aa:f8:08:d0:10:dd:89:d4:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=d3584d9c-8fe6-49c4-8216-a5e60c0918d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:7c:76:27:84:9e:8c:15:d7:c9:2d:fb:ed: a7:a1:79:38:1b:e2:78:19:c8:0d:b8:02:94:1f:ba: aa:90:7e:fa:8a:a5:72:77:86:24:bb:81:de:be:8c: bd:aa:0f:5d:8e:00:83:31:2a:c7:c3:0a:52:ca:e7: 62:14:e6:db:66:e9:b5:f4:c2:72:94:d7:57:73:98: bc:0d:fa:20:81:d6:98:de:60:9b:af:6b:43:cc:51: d8:e2:45:fa:07:bc:c3:9f:06:5e:e4:44:8d:f0:80: 13:6f:61:ec:23:9f:59:7c:1a:64:3e:42:8f:48:79: 5a:58:8b:62:2f:96:c8:8f:8b:e2:3d:aa:b4:57:64: 0f:4e:65:de:38:36:a4:e4:c7:20:d5:4a:ad:fa:5a: 55:b4:1f:97:97:ec:0d:85:2f:fc:ca:73:5c:21:ab: 81:df:3b:02:a2:21:41:23:b9:bd:60:fb:ae:a4:85: 00:ff:9c:f6:3a:1f:84:18:b5:05:ed:71:51:c4:12: a6:79:27:0d:63:9f:ea:f9:15:bb:dc:11:83:b5:03: b0:aa:a0:f4:fc:19:d8:87:a5:ca:9e:ea:43:a3:73: 82:2e:e7:b7:7a:b9:4d:1b:2b:3b:66:9e:85:b5:52: 2b:7a:8c:7e:d3:30:72:59:8a:3e:2c:1b:d9:29:b9: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:49:13:85:70:46:3F:55:AA:8C:2E:2D:DF:9F:85:BE:D1:7A:C7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl X509v3 Authority Key Identifier: keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer sbgp-ipAddrBlock: critical IPv4: 208.78.36.0/23 208.78.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:80:3e:b8:0e:1e:23:c5:cf:e0:ab:39:04:9d:8e:1c:46:75: e9:88:c6:94:20:76:e2:01:2f:0d:bd:76:df:66:7b:de:b9:e1: fe:0c:de:23:35:c1:4c:36:87:a9:5b:dd:a5:44:74:3f:34:77: 17:84:0e:11:b5:4b:d8:db:80:30:95:91:1c:5e:07:ea:10:fa: 0c:a6:26:46:ea:e1:49:96:56:6e:1b:75:39:b2:cd:41:1c:fb: d9:7f:93:ad:a9:a4:39:bc:a5:ca:0c:03:cb:8e:a3:03:9c:98: c9:22:29:f6:45:30:7c:39:da:d7:61:3e:15:e1:72:89:2f:9e: c8:51:47:6e:8e:44:81:82:c0:44:44:6c:cc:a2:64:2c:16:d0: bd:a9:57:59:e7:0a:49:2d:11:40:f8:77:87:cd:86:20:8f:c8: 7e:a8:d8:c2:5a:e9:59:b5:02:67:5a:12:d0:c6:0c:1d:63:69: 55:f5:86:9a:27:f4:dc:e7:b1:8d:67:96:aa:8d:61:f6:2e:4e: b9:de:e3:e6:57:ec:f8:f3:6a:9e:7a:1e:66:c6:1f:c8:2f:51: 75:b8:71:03:b0:7c:d6:82:00:3e:50:aa:52:48:03:bc:f3:57: d9:d6:78:8e:75:a7:d0:f9:93:96:f9:11:dd:90:51:42:8e:d1: ff:14:25:51 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0Op6r4CNAQ3YnUpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU3OGJiODUtYzM4Ny00ZWY1LWEyYjMtNjQ3NjM2ZGEx NjZhMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZDM1ODRkOWMtOGZlNi00OWM0LTgyMTYtYTVlNjBjMDkxOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPV8dieEnowV18kt++2noXk4G+J4GcgNuAKU H7qqkH76iqVyd4Yku4Hevoy9qg9djgCDMSrHwwpSyudiFObbZum19MJylNdXc5i8 DfoggdaY3mCbr2tDzFHY4kX6B7zDnwZe5ESN8IATb2HsI59ZfBpkPkKPSHlaWIti L5bIj4viPaq0V2QPTmXeODak5Mcg1Uqt+lpVtB+Xl+wNhS/8ynNcIauB3zsCoiFB I7m9YPuupIUA/5z2Oh+EGLUF7XFRxBKmeScNY5/q+RW73BGDtQOwqqD0/BnYh6XK nupDo3OCLue3erlNGys7Zp6FtVIreox+0zByWYo+LBvZKbnmkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIRJE4VwRj9VqowuLd+fhb7ResekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZTc4 YmI4NS1jMzg3LTRlZjUtYTJiMy02NDc2MzZkYTE2NmEvZjAwMWNiMGYtZDc2MS0z ZDBlLWJhMzEtNzRmZmIzYjg1NWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmU3OGJiODUtYzM4Ny00ZWY1LWEy YjMtNjQ3NjM2ZGExNjZhLzJlNzhiYjg1LWMzODctNGVmNS1hMmIzLTY0NzYzNmRh MTY2YS5jcmwwHwYDVR0jBBgwFoAUCoRC+eaSsjIunkYokOLiCMEk2mYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZTc4YmI4NS1jMzg3LTRlZjUtYTJiMy02NDc2 MzZkYTE2NmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0E4kAwQA 0E4nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHSAPrgOHiPFz+CrOQSdjhxGdemIxpQgduIBLw29dt9me965 4f4M3iM1wUw2h6lb3aVEdD80dxeEDhG1S9jbgDCVkRxeB+oQ+gymJkbq4UmWVm4b dTmyzUEc+9l/k62ppDm8pcoMA8uOowOcmMkiKfZFMHw52tdhPhXhcokvnshRR26O RIGCwEREbMyiZCwW0L2pV1nnCkktEUD4d4fNhiCPyH6o2MJa6Vm1AmdaEtDGDB1j aVX1hpon9NznsY1nlqqNYfYuTrne4+ZX7Pjzap56HmbGH8gvUXW4cQOwfNaCAD5Q qlJIA7zzV9nWeI51p9D5k5b5Ed2QUUKO0f8UJVE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:05 2026 by rpki-client