$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa File: 15918682-1f44-3387-abb8-f7772b5f9f5e.roa (raw, json) Hash identifier: JqU85PkRT9vbND0/rBrnssSnXZcvUp14TqbF4MkajFE= Subject key identifier: 65:B0:CA:5A:39:0A:0E:1E:13:76:39:75:69:66:F7:A4:18:01:53:C6 Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Certificate serial: 010D0C9F43285848FD569A0F145F6D30E9016480 Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 208.91.36.0/24 maxlen: 24 208.91.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:9a:0f:14:5f:6d:30:e9:01:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=570947ff-43d5-41e9-8291-5c5586ed7a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:be:b9:b8:7f:9e:03:1f:4b:4c:17:8b:11:82: 89:61:4a:8f:cb:59:3f:80:98:35:a2:b4:b3:1b:66: a1:6b:5e:df:e9:09:79:28:14:a2:25:bb:29:0b:ae: b1:06:7f:db:5e:d3:d7:ef:61:2a:26:0c:5e:d9:50: 2c:57:15:2e:f1:fa:b4:28:ba:72:9e:8a:8b:44:91: 80:cf:c2:29:e9:97:05:80:46:00:b4:2b:bf:af:ce: 59:56:0e:aa:9e:6a:b9:52:2d:35:c6:c2:7f:b9:af: 38:0e:11:1b:87:46:b6:34:d3:74:ad:15:36:cc:bc: dc:92:ab:79:f1:4d:13:37:80:8a:75:75:53:e5:ab: 0a:1c:af:23:1d:65:f0:de:0c:db:c1:41:3e:5c:56: 63:ce:5a:1d:42:79:cc:b7:72:f7:19:12:bb:80:d5: 9a:02:1f:ce:83:27:92:84:0d:f2:91:e0:86:73:55: 70:c7:2e:e5:78:ad:7f:86:be:70:cc:e2:f7:73:4c: 89:33:e7:f0:dd:90:c5:db:e3:93:ee:1e:cd:85:49: 64:56:8e:96:76:51:41:75:71:eb:86:f6:c4:c2:37: cb:43:2c:52:3b:cc:d2:1a:d5:88:c6:48:a4:fa:08: 53:0e:a4:3e:32:35:9e:38:cf:eb:c2:ec:57:af:35: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B0:CA:5A:39:0A:0E:1E:13:76:39:75:69:66:F7:A4:18:01:53:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl X509v3 Authority Key Identifier: keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer sbgp-ipAddrBlock: critical IPv4: 208.91.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:91:46:e3:94:7a:3a:5e:5e:a8:23:5c:8a:4b:d6:03:9a: f5:24:ef:f9:bc:80:03:ae:c9:fb:15:eb:65:58:f3:54:21:de: dc:d4:90:a4:10:c1:c2:97:be:f8:1d:40:af:8b:38:c6:56:d4: 7f:8c:7b:51:d5:95:eb:49:3a:ab:78:30:14:34:df:b6:d0:eb: 8c:c4:31:27:c1:fa:f7:5b:f9:8b:24:88:fa:72:1f:47:79:50: f5:7a:32:25:88:7d:8a:d4:83:c0:31:a8:c0:f9:52:24:0b:2a: 94:fb:c3:91:4d:e1:29:fa:af:c9:d3:37:8f:2f:04:77:87:09: 3f:cf:f9:1e:13:6d:d0:f6:b1:8a:30:37:56:4c:ee:55:2f:40: 38:a1:d4:6d:1a:cc:99:d6:cc:7d:92:0d:73:bb:1d:e3:8b:aa: 9d:48:55:eb:61:e1:55:8c:f0:da:e3:20:b1:6d:f1:66:23:45: b4:eb:ca:4d:fe:30:a0:67:50:a5:6f:b3:fe:72:a0:ce:3d:a7: e7:b2:80:38:39:7f:80:d1:eb:7c:28:92:a7:c4:a2:91:f6:30: 8e:c4:41:11:b0:2e:b1:9e:a5:eb:29:2c:20:be:4c:27:ad:2f: 17:8c:29:c8:24:ee:ba:ea:97:61:02:06:09:e2:6d:61:4d:89: cd:de:63:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VpoPFF9tMOkBZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVmOGQ0NDMtZTgyMy00YjM3LTkyMTctM2M1YWY4ZGNj OGZhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTcwOTQ3ZmYtNDNkNS00MWU5LTgyOTEtNWM1NTg2ZWQ3YTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb65uH+eAx9LTBeLEYKJYUqPy1k/gJg1orSz G2aha17f6Ql5KBSiJbspC66xBn/bXtPX72EqJgxe2VAsVxUu8fq0KLpynoqLRJGA z8Ip6ZcFgEYAtCu/r85ZVg6qnmq5Ui01xsJ/ua84DhEbh0a2NNN0rRU2zLzckqt5 8U0TN4CKdXVT5asKHK8jHWXw3gzbwUE+XFZjzlodQnnMt3L3GRK7gNWaAh/OgyeS hA3ykeCGc1Vwxy7leK1/hr5wzOL3c0yJM+fw3ZDF2+OT7h7NhUlkVo6WdlFBdXHr hvbEwjfLQyxSO8zSGtWIxkik+ghTDqQ+MjWeOM/rwuxXrzVh5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWwylo5Cg4eE3Y5dWlm96QYAVPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4 ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVhZjhkY2M4ZmEvMTU5MTg2ODItMWY0NC0z Mzg3LWFiYjgtZjc3NzJiNWY5ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTVmOGQ0NDMtZTgyMy00YjM3LTky MTctM2M1YWY4ZGNjOGZhLzE1ZjhkNDQzLWU4MjMtNGIzNy05MjE3LTNjNWFmOGRj YzhmYS5jcmwwHwYDVR0jBBgwFoAU9YWLjmQM9/Nlg4QdP7rAQAXC1tswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVh ZjhkY2M4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaGkUbjlHo6Xl6oI1yKS9YDmvUk7/m8gAOuyfsV62VY81Qh3tzUkKQQ wcKXvvgdQK+LOMZW1H+Me1HVletJOqt4MBQ037bQ64zEMSfB+vdb+YskiPpyH0d5 UPV6MiWIfYrUg8AxqMD5UiQLKpT7w5FN4Sn6r8nTN48vBHeHCT/P+R4TbdD2sYow N1ZM7lUvQDih1G0azJnWzH2SDXO7HeOLqp1IVeth4VWM8NrjILFt8WYjRbTryk3+ MKBnUKVvs/5yoM49p+eygDg5f4DR63wokqfEopH2MI7EQRGwLrGepespLCC+TCet LxeMKcgk7rrql2ECBgnibWFNic3eYw8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:23 2025 by rpki-client