$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa File: 15918682-1f44-3387-abb8-f7772b5f9f5e.roa (raw, json) Hash identifier: Cd/BIg4kAV9QOjEwRG5pRtkRES6NZoC4dnBXQ9b8iXs= Subject key identifier: DA:52:8F:F5:41:A0:58:0F:4A:98:9B:14:1C:8E:4A:BC:D7:EC:A6:4F Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Certificate serial: 010D0C9F4328584ABD4B7326BEAA0AD7C04215C0 Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 14618 IP address blocks: 208.91.36.0/24 maxlen: 24 208.91.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:73:26:be:aa:0a:d7:c0:42:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=4493f2a2-1eea-4ae4-8e16-1c9079323358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:a3:0a:97:03:a9:a6:11:49:5a:f6:d3:2e: 8d:b7:3c:3f:87:37:1f:f9:f7:30:6c:5e:69:56:d0: ed:16:a7:09:16:2e:d4:10:92:54:10:18:26:05:ce: e7:68:66:a3:87:1b:bd:1b:ad:8c:17:35:91:d0:62: 5f:6a:5a:83:5b:97:58:17:5c:8c:ab:d3:c8:08:58: 42:20:1b:e7:45:30:d9:5e:b9:61:a6:55:53:7d:69: 8d:35:d8:c9:d1:55:94:12:7c:f8:a2:83:d4:c3:4d: 7c:db:82:4e:ca:f8:9a:df:86:41:46:8a:0e:32:76: 6c:69:7d:b6:d7:d1:dc:d8:59:6f:95:36:c1:77:ab: 5f:de:a7:cd:0e:cd:d7:6b:d9:82:37:4a:5b:b8:19: 06:76:36:05:0d:51:45:de:46:8d:18:b5:d1:75:3a: d7:f1:59:36:90:80:a8:cc:3a:f3:75:67:cc:37:21: 67:9b:c1:ca:be:bf:93:6b:ab:0d:b9:47:9a:81:9c: 9f:41:cf:32:02:0e:f3:55:68:1e:24:82:bd:2f:18: 62:4d:04:b9:c8:35:9e:52:99:59:c1:7d:5e:f8:0f: 48:24:18:9f:46:90:cc:3c:70:38:66:65:e6:21:6d: 62:9f:41:26:2c:63:13:f1:89:45:bc:d3:20:54:84: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:8F:F5:41:A0:58:0F:4A:98:9B:14:1C:8E:4A:BC:D7:EC:A6:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl X509v3 Authority Key Identifier: keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer sbgp-ipAddrBlock: critical IPv4: 208.91.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c0:28:e0:3a:87:98:19:fa:dc:f7:27:8f:a4:02:f3:aa:a8: 3b:58:3a:6f:b1:16:f7:9c:86:a3:0b:2b:14:b0:30:15:f7:cd: 16:85:6c:19:80:af:3a:18:7c:73:6b:97:ac:a9:1b:9d:86:ae: cc:df:bf:f2:7b:59:b9:d1:c7:00:2e:f5:d3:3f:ac:2e:cf:db: e0:05:6b:a3:79:ff:ba:d6:73:61:08:fa:75:9c:f2:e3:6d:ca: 15:27:50:da:34:78:04:5c:38:e8:69:9e:6a:05:44:70:d0:c2: 7f:17:bf:e8:e7:06:ec:ba:58:cb:aa:2c:1a:8e:f6:7c:ee:c0: 55:dd:2b:b0:e1:fc:b0:cb:a9:db:fb:e8:ca:b7:e3:c1:74:61: 2d:14:3f:4d:4b:6e:84:81:53:b4:e7:88:f2:b2:c3:79:e4:9a: 25:b5:ca:de:21:50:0d:3e:3a:25:a1:3b:e9:00:6d:2c:ac:d0: 6f:61:5c:8a:8e:8a:da:96:0d:6f:5b:b0:af:61:47:28:09:0f: 06:9b:bc:4c:11:e8:a3:5d:f0:e7:9a:a6:c1:56:db:f7:88:ee: a9:20:50:9c:11:4e:28:46:d3:67:4f:48:84:a8:0e:25:13:28: 32:c5:2f:e0:70:35:f2:98:96:62:cb:04:d9:5f:1d:1b:e8:d9: 05:42:f1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3MmvqoK18BCFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVmOGQ0NDMtZTgyMy00YjM3LTkyMTctM2M1YWY4ZGNj OGZhMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDQ5M2YyYTItMWVlYS00YWU0LThlMTYtMWM5MDc5MzIzMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke2jCpcDqaYRSVr20y6Ntzw/hzcf+fcwbF5p VtDtFqcJFi7UEJJUEBgmBc7naGajhxu9G62MFzWR0GJfalqDW5dYF1yMq9PICFhC IBvnRTDZXrlhplVTfWmNNdjJ0VWUEnz4ooPUw01824JOyvia34ZBRooOMnZsaX22 19Hc2FlvlTbBd6tf3qfNDs3Xa9mCN0pbuBkGdjYFDVFF3kaNGLXRdTrX8Vk2kICo zDrzdWfMNyFnm8HKvr+Ta6sNuUeagZyfQc8yAg7zVWgeJIK9LxhiTQS5yDWeUplZ wX1e+A9IJBifRpDMPHA4ZmXmIW1in0EmLGMT8YlFvNMgVISDYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpSj/VBoFgPSpibFByOSrzX7KZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4 ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVhZjhkY2M4ZmEvMTU5MTg2ODItMWY0NC0z Mzg3LWFiYjgtZjc3NzJiNWY5ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTVmOGQ0NDMtZTgyMy00YjM3LTky MTctM2M1YWY4ZGNjOGZhLzE1ZjhkNDQzLWU4MjMtNGIzNy05MjE3LTNjNWFmOGRj YzhmYS5jcmwwHwYDVR0jBBgwFoAU9YWLjmQM9/Nlg4QdP7rAQAXC1tswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVh ZjhkY2M4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHAKOA6h5gZ+tz3J4+kAvOqqDtYOm+xFvechqMLKxSwMBX3zRaFbBmA rzoYfHNrl6ypG52Grszfv/J7WbnRxwAu9dM/rC7P2+AFa6N5/7rWc2EI+nWc8uNt yhUnUNo0eARcOOhpnmoFRHDQwn8Xv+jnBuy6WMuqLBqO9nzuwFXdK7Dh/LDLqdv7 6Mq348F0YS0UP01LboSBU7TniPKyw3nkmiW1yt4hUA0+OiWhO+kAbSys0G9hXIqO itqWDW9bsK9hRygJDwabvEwR6KNd8OeapsFW2/eI7qkgUJwRTihG02dPSISoDiUT KDLFL+BwNfKYlmLLBNlfHRvo2QVC8cA= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:16 2025 by rpki-client