$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa File: 3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa (raw, json) Hash identifier: uioS0vIwTQtjEwAyCZ+FjcnbuEaUucBsliW8cKTLFVQ= Subject key identifier: D0:A8:E7:D5:92:67:4B:3C:4E:19:CE:A4:0A:57:C3:DD:63:E8:82:3D Certificate issuer: /CN=1278dcae-79cc-43c4-b974-7a8df750630c Certificate serial: 010D0C9F4328584ADECBB5CC5E21E8A8B6B2AE00 Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 397550 IP address blocks: 208.91.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b5:cc:5e:21:e8:a8:b6:b2:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=2c8d3aba-f3cd-47f1-a184-648245c433d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:5b:5a:15:1b:a9:68:87:30:67:7d:94:11: 8f:fa:ec:aa:3f:d1:64:b5:86:ba:2f:2a:5a:ed:c0: 1a:df:00:ee:28:05:72:31:ea:ea:95:57:38:d7:27: f5:8f:f1:f9:c9:7f:db:84:d1:33:5d:19:2c:06:f2: b0:e0:2a:b1:99:33:f9:b7:c1:55:69:65:84:53:27: f5:6c:5a:b7:8d:dc:e3:a6:6b:66:4c:7a:de:33:f4: 84:bc:00:23:31:0c:88:4b:eb:7f:78:72:4b:46:0f: 3b:c3:70:ee:4a:a5:d1:da:fa:2a:ae:5c:19:92:27: 87:4b:a2:7a:08:fa:2b:a4:02:c2:f8:9f:9c:43:e5: d3:e6:1d:1e:28:fb:fa:74:40:d5:c3:c8:fc:a4:ce: 22:d4:69:04:f5:93:3b:b0:8f:f8:5a:36:ab:14:f0: 56:90:41:4f:b2:00:df:71:3f:64:dd:42:53:a4:7f: 9c:16:1c:6b:1c:a8:e2:ec:18:86:9c:2c:93:3c:d8: 05:88:a9:8b:07:76:fd:0a:f6:b3:5a:4a:a1:c6:1e: 15:00:8e:f8:0f:81:71:8d:fc:47:a0:88:ed:94:2f: 5e:90:29:c0:c9:8b:34:eb:d9:9b:f5:a6:62:6e:c1: b8:a0:b7:eb:f5:ab:65:48:6a:c3:76:c9:de:86:88: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A8:E7:D5:92:67:4B:3C:4E:19:CE:A4:0A:57:C3:DD:63:E8:82:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl X509v3 Authority Key Identifier: keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer sbgp-ipAddrBlock: critical IPv4: 208.91.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1c:8c:c4:f9:0c:7a:04:df:aa:09:43:6a:cf:20:ad:58:2c: b3:3e:9b:30:ba:34:2d:ad:66:ed:3b:a1:3a:54:e1:8a:0e:5d: 72:f0:ba:ee:6a:ef:2a:db:79:cb:05:ea:8a:f4:57:ad:a3:3e: 82:24:b6:bc:41:af:74:de:02:f5:d1:ff:aa:a9:57:03:cb:f9: 90:13:7b:3b:47:27:c4:c2:1e:74:08:1b:a8:2a:5b:c9:07:0c: 95:9b:ab:1a:46:5b:36:0f:c1:d1:50:d0:0b:be:ee:dc:7a:30: 39:19:9d:67:54:0f:ca:34:7b:a5:5a:35:c5:96:2b:26:9a:48: ef:66:e4:87:0e:86:c2:0c:2a:cb:5c:dc:95:5d:77:a6:8e:ff: ee:d9:f7:be:5c:b5:ab:ba:97:98:e1:24:15:bb:50:ec:c6:19: c6:6a:88:64:dd:f9:e7:05:0a:d3:4b:09:0c:99:03:e3:ff:30: 7b:d0:34:e1:3d:f0:16:26:13:04:72:7d:0f:69:57:1f:89:92: 9a:47:f0:ba:c5:9a:23:4f:e2:53:de:db:a2:e5:59:43:63:3d: fa:11:4f:09:da:cb:85:bc:bb:33:4e:8d:cf:0b:0a:cf:c9:5c: 3d:27:dc:bf:47:cd:87:5b:76:54:87:5d:8c:c9:5b:a9:c9:f1: a3:b9:de:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7XMXiHoqLayrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OGRjYWUtNzljYy00M2M0LWI5NzQtN2E4ZGY3NTA2 MzBjMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MmM4ZDNhYmEtZjNjZC00N2YxLWExODQtNjQ4MjQ1YzQzM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg5bWhUbqWiHMGd9lBGP+uyqP9FktYa6Lypa 7cAa3wDuKAVyMerqlVc41yf1j/H5yX/bhNEzXRksBvKw4CqxmTP5t8FVaWWEUyf1 bFq3jdzjpmtmTHreM/SEvAAjMQyIS+t/eHJLRg87w3DuSqXR2voqrlwZkieHS6J6 CPorpALC+J+cQ+XT5h0eKPv6dEDVw8j8pM4i1GkE9ZM7sI/4WjarFPBWkEFPsgDf cT9k3UJTpH+cFhxrHKji7BiGnCyTPNgFiKmLB3b9CvazWkqhxh4VAI74D4FxjfxH oIjtlC9ekCnAyYs069mb9aZibsG4oLfr9atlSGrDdsnehohtAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCo59WSZ0s8ThnOpApXw91j6II9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4 ZGNhZS03OWNjLTQzYzQtYjk3NC03YThkZjc1MDYzMGMvM2FmYTEyMjgtYTE5Mi0z YWI2LTg1YzMtZTNlYjA2YmE3Mzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI3OGRjYWUtNzljYy00M2M0LWI5 NzQtN2E4ZGY3NTA2MzBjLzEyNzhkY2FlLTc5Y2MtNDNjNC1iOTc0LTdhOGRmNzUw NjMwYy5jcmwwHwYDVR0jBBgwFoAUqh4vs7pUdgbjFYK+JtSg46Bv9yYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4ZGNhZS03OWNjLTQzYzQtYjk3NC03YThk Zjc1MDYzMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8cjMT5DHoE36oJQ2rPIK1YLLM+mzC6NC2tZu07oTpU4YoOXXLwuu5q 7yrbecsF6or0V62jPoIktrxBr3TeAvXR/6qpVwPL+ZATeztHJ8TCHnQIG6gqW8kH DJWbqxpGWzYPwdFQ0Au+7tx6MDkZnWdUD8o0e6VaNcWWKyaaSO9m5IcOhsIMKstc 3JVdd6aO/+7Z975ctau6l5jhJBW7UOzGGcZqiGTd+ecFCtNLCQyZA+P/MHvQNOE9 8BYmEwRyfQ9pVx+JkppH8LrFmiNP4lPe26LlWUNjPfoRTwnay4W8uzNOjc8LCs/J XD0n3L9HzYdbdlSHXYzJW6nJ8aO53qs= -----END CERTIFICATE-----Generated at Thu Aug 21 01:55:55 2025 by rpki-client