$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa File: 60a1544b-8598-310f-8888-5a763d4944f7.roa (raw, json) Hash identifier: lafJk3rt2x0vuQBAEPuZnxIkkf1xfsofz7yXcKP/dbY= Subject key identifier: EA:DF:F5:8C:3B:CA:EA:73:EA:11:3E:59:C2:8F:FF:86:E3:E4:BF:58 Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Certificate serial: 010D0C9F4328584ABD4B7CE60417B6BB800BABE0 Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 15019 IP address blocks: 208.91.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7c:e6:04:17:b6:bb:80:0b:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=f8d6adb4-237c-43e3-a339-01d8406f9aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:76:e2:59:d7:12:b0:40:92:b3:9c:c1:b6:d5: d6:c5:aa:c6:0b:cd:0f:53:30:68:ac:9f:3c:74:4e: 6f:79:47:74:ec:c5:59:ef:d0:2d:79:4f:0e:cd:f9: 43:58:7d:56:78:74:47:9a:e8:45:fd:56:c1:d8:cc: d0:2b:ac:a9:77:1f:f8:bf:2f:02:b8:72:91:cf:51: ce:d7:1d:1b:33:5f:66:fc:ca:fe:6c:7b:4e:29:7d: 17:98:9f:b1:34:9e:7e:20:46:c7:0f:da:02:24:ce: b0:75:df:36:22:4f:2a:6e:17:e7:54:13:95:5a:60: f1:26:58:0c:9c:ce:85:8c:82:71:9b:21:17:44:e7: 42:ee:cc:13:07:50:1f:ed:4f:55:b6:5f:3b:ec:38: d5:bc:04:a7:f8:9d:6f:19:97:ac:e0:1f:a8:ca:91: 86:67:58:12:02:b5:f5:7c:67:04:a3:f3:6b:85:37: 90:81:45:5b:cc:4f:20:1c:0c:8f:e3:70:b9:92:d0: 6c:8e:a0:38:69:5a:36:3d:8e:53:58:1c:01:3d:9c: ba:15:78:58:4a:51:9c:1f:a0:14:a5:34:df:46:29: 43:5d:31:f1:1e:21:0d:6c:36:18:ba:05:68:bb:d3: 5e:b8:f3:59:1a:09:e2:97:3f:02:e2:cd:3b:ce:cf: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DF:F5:8C:3B:CA:EA:73:EA:11:3E:59:C2:8F:FF:86:E3:E4:BF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl X509v3 Authority Key Identifier: keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer sbgp-ipAddrBlock: critical IPv4: 208.91.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:31:71:e5:97:12:9d:7a:dd:d1:4e:6d:1e:01:ea:52:74:ad: 26:b5:ba:a2:1c:1c:5a:8d:71:ef:16:2f:19:b2:b2:04:5e:34: 71:6d:e4:9d:74:e1:39:85:70:b1:62:c9:55:ae:83:4f:4a:88: 7f:85:89:aa:81:c4:18:c6:85:f1:d8:fd:ac:8a:64:93:ec:24: 63:44:9f:f4:b5:ad:cd:7e:21:8c:d9:61:58:1f:2d:86:6f:05: 7c:76:cc:e7:9f:b6:f7:b2:c2:15:52:d6:c9:60:01:e1:73:70: 77:58:de:fd:bb:5b:c5:fb:31:3d:d4:01:9f:fd:10:48:87:d1: 86:ad:c3:d8:02:9d:92:26:2b:71:19:f2:8c:a7:08:8e:65:0b: 61:2d:6b:04:5b:e3:3d:9e:5c:12:f8:33:7e:db:d2:ea:a5:b5: fb:49:db:3e:8b:90:ad:af:88:d4:ca:e2:a5:78:b7:45:d7:97: 35:86:af:dd:2d:04:65:e7:8a:bf:aa:e2:54:66:fa:05:da:d7: 90:ce:4b:2f:14:93:e1:82:c0:df:91:c5:6b:fb:0c:dc:71:63: e2:fe:06:03:18:21:03:7a:09:9a:0c:4f:43:4c:99:7e:9f:a8: 91:4c:ec:a9:28:be:27:af:7f:05:ad:14:9d:5f:d7:2d:4e:24: a0:c2:f8:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3zmBBe2u4ALq+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVmOGQ0NDMtZTgyMy00YjM3LTkyMTctM2M1YWY4ZGNj OGZhMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZjhkNmFkYjQtMjM3Yy00M2UzLWEzMzktMDFkODQwNmY5YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnbiWdcSsECSs5zBttXWxarGC80PUzBorJ88 dE5veUd07MVZ79AteU8OzflDWH1WeHRHmuhF/VbB2MzQK6ypdx/4vy8CuHKRz1HO 1x0bM19m/Mr+bHtOKX0XmJ+xNJ5+IEbHD9oCJM6wdd82Ik8qbhfnVBOVWmDxJlgM nM6FjIJxmyEXROdC7swTB1Af7U9Vtl877DjVvASn+J1vGZes4B+oypGGZ1gSArX1 fGcEo/NrhTeQgUVbzE8gHAyP43C5ktBsjqA4aVo2PY5TWBwBPZy6FXhYSlGcH6AU pTTfRilDXTHxHiENbDYYugVou9NeuPNZGgnilz8C4s07zs/fuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrf9Yw7yupz6hE+WcKP/4bj5L9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4 ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVhZjhkY2M4ZmEvNjBhMTU0NGItODU5OC0z MTBmLTg4ODgtNWE3NjNkNDk0NGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTVmOGQ0NDMtZTgyMy00YjM3LTky MTctM2M1YWY4ZGNjOGZhLzE1ZjhkNDQzLWU4MjMtNGIzNy05MjE3LTNjNWFmOGRj YzhmYS5jcmwwHwYDVR0jBBgwFoAU9YWLjmQM9/Nlg4QdP7rAQAXC1tswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVh ZjhkY2M4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIxceWXEp163dFObR4B6lJ0rSa1uqIcHFqNce8WLxmysgReNHFt5J10 4TmFcLFiyVWug09KiH+FiaqBxBjGhfHY/ayKZJPsJGNEn/S1rc1+IYzZYVgfLYZv BXx2zOeftveywhVS1slgAeFzcHdY3v27W8X7MT3UAZ/9EEiH0Yatw9gCnZImK3EZ 8oynCI5lC2EtawRb4z2eXBL4M37b0uqltftJ2z6LkK2viNTK4qV4t0XXlzWGr90t BGXnir+q4lRm+gXa15DOSy8Uk+GCwN+RxWv7DNxxY+L+BgMYIQN6CZoMT0NMmX6f qJFM7KkovievfwWtFJ1f1y1OJKDC+LY= -----END CERTIFICATE-----Generated at Sat Aug 9 20:44:24 2025 by rpki-client