$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/24990911-53ac-3660-a099-8dbf6296634d.roa File: 24990911-53ac-3660-a099-8dbf6296634d.roa (raw, json) Hash identifier: t9x/y2yBvg2Fa2+cMp8tgWCNUz+1sf4Vkv3UogAjOWs= Subject key identifier: 93:FA:C3:E9:E7:BE:50:98:A8:80:BA:0A:AB:CC:D3:DC:22:41:5E:86 Certificate issuer: /CN=1278dcae-79cc-43c4-b974-7a8df750630c Certificate serial: 010D0C9F4328584ADECBAE55F506598542535D60 Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/24990911-53ac-3660-a099-8dbf6296634d.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 14244 IP address blocks: 208.91.60.0/22 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ae:55:f5:06:59:85:42:53:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=3fd74bf5-b1d5-4752-adc3-3d80edf427db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:7b:98:92:32:4d:87:b8:07:02:39:67:98: 5a:7c:76:9e:1b:7e:e8:45:11:ed:3b:09:52:41:30: 17:5c:b7:ad:83:ac:01:7b:66:1c:1d:8c:21:b9:00: bd:9e:62:52:08:c0:ae:f0:ba:cc:20:9c:48:da:eb: 70:8b:8b:cf:cf:23:8b:86:b9:a8:a0:0b:1a:72:10: 7a:3e:e1:bf:1f:6b:b7:c3:56:ee:9f:4f:9c:1d:18: e6:6d:c8:ec:18:b7:72:2e:d5:84:62:33:b7:1b:5a: f9:bf:4a:68:c8:3d:7e:21:2c:a0:b6:a4:63:03:84: 46:4b:4d:cc:1c:eb:b3:9e:16:71:61:ee:82:b4:6e: 6b:cc:fb:b3:8d:2e:37:d8:26:de:db:2b:08:37:ec: a8:50:f2:00:9e:92:ab:99:e8:cf:18:a7:53:7f:14: 0d:ab:f4:dd:83:9b:64:94:ed:e7:90:9d:f9:46:54: be:39:c2:bb:c0:af:52:0e:52:52:16:15:16:9a:77: 55:d4:f3:fd:8e:79:15:72:70:51:13:ce:b1:ec:b6: 9a:ff:f2:e9:15:33:5d:a1:f7:c5:99:4e:b8:6d:c0: 71:8a:67:1b:22:e1:b4:00:db:d8:3d:1e:27:9d:dd: 8e:5d:94:43:2b:20:68:72:83:fa:bb:16:90:4e:a3: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:C3:E9:E7:BE:50:98:A8:80:BA:0A:AB:CC:D3:DC:22:41:5E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/24990911-53ac-3660-a099-8dbf6296634d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl X509v3 Authority Key Identifier: keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer sbgp-ipAddrBlock: critical IPv4: 208.91.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:62:82:6a:59:29:24:15:94:47:0d:dd:22:31:d3:22:f4:eb: f6:f6:17:11:7a:7c:ed:27:84:16:63:bd:1c:c1:60:a1:2a:fd: 23:51:83:5e:4c:a4:27:de:de:52:89:34:29:16:12:be:54:77: a3:77:c8:14:01:57:17:f0:3e:7d:6f:20:49:4e:57:93:54:f3: 5f:84:c0:08:b0:f5:9f:6a:d2:dd:86:4f:fd:68:49:37:9d:8b: f7:4b:e3:2d:52:47:9a:cd:70:78:a9:30:c5:78:2d:ae:5c:51: d3:35:11:0e:5a:76:75:e3:81:b0:16:1e:eb:16:1b:3e:c4:81: 43:ae:73:eb:a4:a5:12:b0:23:de:ce:ab:71:fc:cf:7b:03:54: df:8f:3b:a9:2d:68:15:c9:01:7a:ef:a9:b5:e7:3b:1b:14:8a: 61:32:38:99:60:b8:e6:f2:40:7f:ff:c5:29:94:b0:ae:d4:65: 09:fe:5d:98:e3:13:0c:1e:ec:dc:89:3e:ba:dd:6b:31:8d:46: 48:d6:57:9a:ea:b9:9e:e4:4b:65:6c:a6:72:25:b7:6f:1c:2c: c5:98:fc:bb:e5:7d:90:d1:d5:75:7a:62:bd:09:c3:0e:71:79: 58:19:c2:a3:52:e2:5e:ee:21:ad:2c:7d:23:cc:49:2c:f0:2c: b1:f2:bf:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey65V9QZZhUJTXWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OGRjYWUtNzljYy00M2M0LWI5NzQtN2E4ZGY3NTA2 MzBjMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk M2ZkNzRiZjUtYjFkNS00NzUyLWFkYzMtM2Q4MGVkZjQyN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxt7mJIyTYe4BwI5Z5hafHaeG37oRRHtOwlS QTAXXLetg6wBe2YcHYwhuQC9nmJSCMCu8LrMIJxI2utwi4vPzyOLhrmooAsachB6 PuG/H2u3w1bun0+cHRjmbcjsGLdyLtWEYjO3G1r5v0poyD1+ISygtqRjA4RGS03M HOuznhZxYe6CtG5rzPuzjS432Cbe2ysIN+yoUPIAnpKrmejPGKdTfxQNq/Tdg5tk lO3nkJ35RlS+OcK7wK9SDlJSFhUWmndV1PP9jnkVcnBRE86x7Laa//LpFTNdoffF mU64bcBximcbIuG0ANvYPR4nnd2OXZRDKyBocoP6uxaQTqN7iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP6w+nnvlCYqIC6CqvM09wiQV6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4 ZGNhZS03OWNjLTQzYzQtYjk3NC03YThkZjc1MDYzMGMvMjQ5OTA5MTEtNTNhYy0z NjYwLWEwOTktOGRiZjYyOTY2MzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI3OGRjYWUtNzljYy00M2M0LWI5 NzQtN2E4ZGY3NTA2MzBjLzEyNzhkY2FlLTc5Y2MtNDNjNC1iOTc0LTdhOGRmNzUw NjMwYy5jcmwwHwYDVR0jBBgwFoAUqh4vs7pUdgbjFYK+JtSg46Bv9yYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4ZGNhZS03OWNjLTQzYzQtYjk3NC03YThk Zjc1MDYzMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNigmpZKSQVlEcN3SIx0yL06/b2FxF6fO0nhBZjvRzBYKEq/SNRg15M pCfe3lKJNCkWEr5Ud6N3yBQBVxfwPn1vIElOV5NU81+EwAiw9Z9q0t2GT/1oSTed i/dL4y1SR5rNcHipMMV4La5cUdM1EQ5adnXjgbAWHusWGz7EgUOuc+ukpRKwI97O q3H8z3sDVN+PO6ktaBXJAXrvqbXnOxsUimEyOJlguObyQH//xSmUsK7UZQn+XZjj Ewwe7NyJPrrdazGNRkjWV5rquZ7kS2VspnIlt28cLMWY/LvlfZDR1XV6Yr0Jww5x eVgZwqNS4l7uIa0sfSPMSSzwLLHyvy4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:43:32 2025 by rpki-client