$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa File: 60a1544b-8598-310f-8888-5a763d4944f7.roa (raw, json) Hash identifier: Zl4mfKjs3zBQ/ecB93KEMGE8Q82YHvE1OOEU3xXEfnU= Subject key identifier: 4E:7A:01:7C:F2:8E:23:F4:71:69:63:37:92:62:69:87:A9:4B:26:9F Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Certificate serial: 010D0C9F43285848FD56A993A112206F872E5400 Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 15019 IP address blocks: 208.91.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a9:93:a1:12:20:6f:87:2e:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=9b0b5b8f-12cf-47b5-a83c-a2b905b425d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5e:5a:17:80:bc:95:4c:a9:1f:5b:6b:9c:9c: 6b:d8:ec:76:8c:4a:42:5b:95:3d:5a:ad:01:57:f1: 68:4c:ca:5f:1a:4f:87:bb:a1:eb:46:15:a9:f2:10: 5d:eb:3d:6a:c5:ec:fe:2e:25:4a:d1:72:60:44:cf: a4:13:ea:28:85:77:69:f3:a2:bf:9e:01:3c:49:31: a1:86:d2:ee:da:e8:2a:e6:bf:15:c2:35:07:56:71: b3:6f:05:c6:fa:15:4e:0e:1c:9f:62:45:51:df:f6: cb:55:54:4a:ca:56:73:b2:17:00:de:e5:4b:42:ba: 42:30:f2:cb:bc:ea:ad:f1:89:16:13:7e:17:74:3b: 7e:7e:5b:1c:93:3a:29:dc:04:70:5b:d3:e4:22:8b: f2:36:2d:a1:f1:74:99:e9:b0:35:d7:18:e4:ed:dc: 76:e5:ed:7f:84:43:1b:6f:52:2e:5d:3b:c4:da:58: 5b:e4:d8:67:8d:bf:e0:b7:3b:d3:44:17:ed:25:2c: 6d:e8:fa:d6:60:96:f2:0c:77:0d:a0:34:78:c2:b2: 44:e7:4a:60:99:f8:2f:3d:a2:ff:90:72:9b:6d:23: 1c:8a:fb:91:92:3b:cd:d2:80:69:33:f7:de:7c:04: 77:98:ec:2c:b0:37:87:5f:4c:65:8d:0e:44:cd:27: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7A:01:7C:F2:8E:23:F4:71:69:63:37:92:62:69:87:A9:4B:26:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl X509v3 Authority Key Identifier: keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer sbgp-ipAddrBlock: critical IPv4: 208.91.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:58:06:fb:12:61:b8:01:26:89:c4:95:84:6f:da:8b:70:90: 72:db:92:89:98:3a:fa:98:7d:c4:e0:56:b3:a9:ef:f1:06:f0: 37:48:16:cc:c3:84:6a:88:99:d6:f8:65:3e:1a:93:4e:f5:a3: 6f:67:8b:26:1f:56:b2:f5:a3:38:45:cd:3e:fa:50:77:f5:36: c7:31:8a:33:94:de:9f:1a:eb:d2:7f:60:c1:5f:09:73:f8:e6: 87:48:77:2c:3b:ee:99:0e:30:de:ff:6e:23:e5:92:b5:c9:75: 28:45:cb:bc:40:81:27:9f:1e:5b:ac:4e:c9:16:ca:05:e9:35: b2:63:45:6a:1c:92:4b:af:a4:bc:8b:70:13:3e:5c:02:22:9d: 5b:58:40:73:66:6c:69:5c:86:73:75:d1:15:a9:a8:c9:d2:d0: 45:99:c2:ce:6d:9a:cc:16:9a:13:5e:27:4e:0a:cf:2f:fd:e2: 47:3d:80:c0:0e:e8:a9:f2:1b:39:57:06:20:1f:e8:3d:e9:d6: 22:9e:57:c9:34:3f:23:e6:eb:1a:0f:a5:4c:1b:5f:1d:ae:c2: 13:4b:91:65:4a:5a:97:3c:5d:0f:f4:93:21:99:20:66:d0:33: 9f:56:78:15:ef:25:f1:77:bb:fb:85:92:68:ce:dc:38:dd:70: dc:ee:c6:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VqmToRIgb4cuVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVmOGQ0NDMtZTgyMy00YjM3LTkyMTctM2M1YWY4ZGNj OGZhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OWIwYjViOGYtMTJjZi00N2I1LWE4M2MtYTJiOTA1YjQyNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF5aF4C8lUypH1trnJxr2Ox2jEpCW5U9Wq0B V/FoTMpfGk+Hu6HrRhWp8hBd6z1qxez+LiVK0XJgRM+kE+oohXdp86K/ngE8STGh htLu2ugq5r8VwjUHVnGzbwXG+hVODhyfYkVR3/bLVVRKylZzshcA3uVLQrpCMPLL vOqt8YkWE34XdDt+flsckzop3ARwW9PkIovyNi2h8XSZ6bA11xjk7dx25e1/hEMb b1IuXTvE2lhb5Nhnjb/gtzvTRBftJSxt6PrWYJbyDHcNoDR4wrJE50pgmfgvPaL/ kHKbbSMcivuRkjvN0oBpM/fefAR3mOwssDeHX0xljQ5EzSf9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE56AXzyjiP0cWljN5JiaYepSyafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4 ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVhZjhkY2M4ZmEvNjBhMTU0NGItODU5OC0z MTBmLTg4ODgtNWE3NjNkNDk0NGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTVmOGQ0NDMtZTgyMy00YjM3LTky MTctM2M1YWY4ZGNjOGZhLzE1ZjhkNDQzLWU4MjMtNGIzNy05MjE3LTNjNWFmOGRj YzhmYS5jcmwwHwYDVR0jBBgwFoAU9YWLjmQM9/Nlg4QdP7rAQAXC1tswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVh ZjhkY2M4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZYBvsSYbgBJonElYRv2otwkHLbkomYOvqYfcTgVrOp7/EG8DdIFszD hGqImdb4ZT4ak071o29niyYfVrL1ozhFzT76UHf1NscxijOU3p8a69J/YMFfCXP4 5odIdyw77pkOMN7/biPlkrXJdShFy7xAgSefHlusTskWygXpNbJjRWockkuvpLyL cBM+XAIinVtYQHNmbGlchnN10RWpqMnS0EWZws5tmswWmhNeJ04Kzy/94kc9gMAO 6KnyGzlXBiAf6D3p1iKeV8k0PyPm6xoPpUwbXx2uwhNLkWVKWpc8XQ/0kyGZIGbQ M59WeBXvJfF3u/uFkmjO3DjdcNzuxls= -----END CERTIFICATE-----Generated at Sat Apr 12 14:21:30 2025 by rpki-client