$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa File: 3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa (raw, json) Hash identifier: /iuefhdrMl9m+sRn5kE6vbLzKmmoVYIsBXnUH8EeSiE= Subject key identifier: 1A:1A:78:C9:D6:46:92:23:80:FC:71:4C:67:67:E0:77:88:0F:B8:EB Certificate issuer: /CN=1278dcae-79cc-43c4-b974-7a8df750630c Certificate serial: 010D0C9F43285849FE0FF06E43F466CE0752B080 Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 397550 IP address blocks: 208.91.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:f0:6e:43:f4:66:ce:07:52:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=a2ceb9ec-1634-4056-91ae-d32f1b1e7a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:06:10:41:24:0c:f0:79:fd:51:f2:4b:93:c0: ab:7f:14:1e:5b:fb:cc:3e:00:a2:4f:95:7b:f1:d5: 4b:5d:12:d4:d3:bb:f8:8a:d2:d3:c5:ac:e2:a6:a7: 13:e1:9c:be:96:a1:93:32:e6:64:21:ed:64:c5:ae: 04:5e:5d:b8:09:2c:eb:96:fe:81:d2:5a:49:1b:58: 98:f2:d6:05:1c:24:71:a7:8d:d2:62:fc:39:df:5e: 82:60:f8:8e:51:79:e4:7a:95:a1:25:8f:84:f1:6a: 5b:2d:2c:b0:27:42:6f:2c:48:12:47:ea:30:7b:69: d9:9f:43:e1:63:87:2c:33:43:44:12:ab:df:e7:77: 26:39:44:e2:e3:0d:51:32:11:d1:9a:b0:41:b4:54: f3:13:62:0d:88:f5:a2:47:01:43:8a:f0:da:d1:13: d2:d0:dc:50:d4:ba:7a:fb:b6:ef:78:1a:40:f6:6b: 81:58:e8:86:4e:00:69:93:05:2f:97:c7:95:bb:6f: 75:ec:06:d9:42:00:17:d8:57:a8:e2:a6:f0:71:f9: 9c:c6:fd:80:5f:3d:70:eb:de:fb:b2:4d:55:cf:56: ab:63:96:10:e7:1c:4f:d7:65:63:1c:8e:d7:bf:74: 38:86:2c:e5:da:9e:24:08:97:57:68:d3:64:10:a2: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1A:78:C9:D6:46:92:23:80:FC:71:4C:67:67:E0:77:88:0F:B8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl X509v3 Authority Key Identifier: keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer sbgp-ipAddrBlock: critical IPv4: 208.91.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d9:b9:83:6d:42:29:92:d0:88:3d:41:c4:4b:0e:b5:80:51: eb:12:13:00:7b:93:0d:c7:3e:dc:03:d7:bc:22:81:b0:6b:90: 04:74:e8:4e:5c:df:b0:f5:2d:e9:d9:b3:cc:07:02:b0:a9:c2: 75:c4:14:1b:c2:be:7e:73:61:df:df:b7:d6:26:fe:85:27:3d: 40:d1:58:bb:a0:74:ee:65:50:7d:1f:ce:19:e0:f2:96:e3:ca: 2d:28:4c:bb:0b:83:f0:6a:6e:0c:e2:c2:16:82:86:e6:e3:8c: e0:65:27:0b:b7:af:84:78:cc:96:9d:06:08:46:c4:2b:40:e5: 00:06:16:d3:ba:d6:29:61:8a:66:3e:30:ba:3c:60:f3:33:c5: 77:f5:94:43:eb:b2:cf:e6:62:13:09:5e:3b:c8:8a:12:02:a4: 5e:d9:9d:74:ae:bb:a9:99:b3:f6:bb:1e:e7:da:49:1f:1a:89: bd:2b:0c:80:78:62:1c:79:a5:30:ac:b8:65:45:70:e3:e9:71: 65:48:04:84:af:5c:c9:5f:35:0d:18:f0:7a:a5:a2:07:b1:ef: 2e:75:f0:51:0c:40:b1:6e:d1:01:18:be:d7:b6:79:4e:9d:ad: d5:7c:9c:1c:c8:2b:fe:96:ac:51:dd:a4:f3:33:45:73:ff:35: 46:6c:f4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/BuQ/RmzgdSsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OGRjYWUtNzljYy00M2M0LWI5NzQtN2E4ZGY3NTA2 MzBjMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YTJjZWI5ZWMtMTYzNC00MDU2LTkxYWUtZDMyZjFiMWU3YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQYQQSQM8Hn9UfJLk8CrfxQeW/vMPgCiT5V7 8dVLXRLU07v4itLTxazipqcT4Zy+lqGTMuZkIe1kxa4EXl24CSzrlv6B0lpJG1iY 8tYFHCRxp43SYvw5316CYPiOUXnkepWhJY+E8WpbLSywJ0JvLEgSR+owe2nZn0Ph Y4csM0NEEqvf53cmOUTi4w1RMhHRmrBBtFTzE2INiPWiRwFDivDa0RPS0NxQ1Lp6 +7bveBpA9muBWOiGTgBpkwUvl8eVu2917AbZQgAX2Feo4qbwcfmcxv2AXz1w6977 sk1Vz1arY5YQ5xxP12VjHI7Xv3Q4hizl2p4kCJdXaNNkEKK0KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoaeMnWRpIjgPxxTGdn4HeID7jrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4 ZGNhZS03OWNjLTQzYzQtYjk3NC03YThkZjc1MDYzMGMvM2FmYTEyMjgtYTE5Mi0z YWI2LTg1YzMtZTNlYjA2YmE3Mzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI3OGRjYWUtNzljYy00M2M0LWI5 NzQtN2E4ZGY3NTA2MzBjLzEyNzhkY2FlLTc5Y2MtNDNjNC1iOTc0LTdhOGRmNzUw NjMwYy5jcmwwHwYDVR0jBBgwFoAUqh4vs7pUdgbjFYK+JtSg46Bv9yYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4ZGNhZS03OWNjLTQzYzQtYjk3NC03YThk Zjc1MDYzMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInZuYNtQimS0Ig9QcRLDrWAUesSEwB7kw3HPtwD17wigbBrkAR06E5c 37D1LenZs8wHArCpwnXEFBvCvn5zYd/ft9Ym/oUnPUDRWLugdO5lUH0fzhng8pbj yi0oTLsLg/BqbgziwhaChubjjOBlJwu3r4R4zJadBghGxCtA5QAGFtO61ilhimY+ MLo8YPMzxXf1lEPrss/mYhMJXjvIihICpF7ZnXSuu6mZs/a7HufaSR8aib0rDIB4 Yhx5pTCsuGVFcOPpcWVIBISvXMlfNQ0Y8Hqlogex7y518FEMQLFu0QEYvte2eU6d rdV8nBzIK/6WrFHdpPMzRXP/NUZs9ME= -----END CERTIFICATE-----Generated at Wed Jun 18 06:00:59 2025 by rpki-client