$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa File: 356617d6-d98a-3c12-9d4a-857c06ded68b.roa (raw, json) Hash identifier: Dk8mGY4rc0b/RSNcV5Gi32gFHMAZXwdPsAvLbEqTKug= Subject key identifier: 42:6E:A1:5E:EA:56:28:AA:20:1B:49:73:92:85:E3:75:61:5E:1C:5F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AA42B8ADB20D11AB437533400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16417 IP address blocks: 216.71.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8a:db:20:d1:1a:b4:37:53:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f58d7bd2-092c-4b3d-8c3e-0dc5c9a026b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:a2:b0:d7:43:72:04:6c:37:a1:ee:65:c0: 26:f2:d6:79:60:e4:48:6c:ca:47:fb:37:c5:5a:7b: 33:a8:39:20:45:28:63:89:fa:66:2a:6b:41:5a:56: c4:62:78:d8:84:74:b8:b9:97:a6:7d:c3:51:a1:c4: 14:30:3e:95:10:8e:f2:f6:fb:a3:25:04:b9:f9:3e: ae:3a:7e:f4:9f:2f:74:95:ee:70:9d:7b:15:e5:24: 91:93:9c:9a:5e:9e:f4:80:b0:33:e7:56:23:18:99: 38:ee:48:4d:44:a8:48:fc:c3:d2:4a:f1:8a:ab:9d: a0:1f:51:05:90:07:3f:1e:51:86:6d:09:01:2e:0f: 64:ce:91:95:1b:73:bc:66:17:3e:e4:bf:77:ad:48: 24:2a:67:3a:92:6a:f2:b5:82:b7:ca:25:2f:e4:0f: 8c:f6:c6:71:8c:17:a9:59:3c:fa:3d:42:c6:40:b8: a2:5e:c5:6c:dd:36:49:59:fe:b3:3e:09:12:cd:a4: 20:39:da:42:d6:55:9a:a9:35:8d:89:43:c3:bc:c2: ec:84:ff:ac:85:4b:25:33:85:44:75:31:0d:55:57: 7e:97:c5:9c:ac:13:59:08:e6:b4:f6:11:a2:93:04: f5:62:1a:c6:90:cc:b9:48:97:73:78:97:eb:c3:2f: e6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:A1:5E:EA:56:28:AA:20:1B:49:73:92:85:E3:75:61:5E:1C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8a:11:e1:f6:a4:37:62:03:c5:48:97:22:ce:31:96:4c:49: 54:5b:0b:af:55:e2:1b:c1:7d:14:01:eb:99:7d:d8:01:b2:df: c6:52:d6:5b:a3:8c:09:d1:2b:7f:37:69:a2:5e:56:4c:e6:99: 87:5a:cd:09:b7:78:f8:83:62:8b:15:cb:36:42:b8:03:5d:99: 2f:5a:5a:8a:80:4f:4c:36:c6:86:3a:58:64:cc:de:2d:19:27: a5:bf:93:dc:f3:66:7e:16:3d:5a:0b:e4:fd:bc:49:e1:5f:3e: b2:91:41:0d:8c:5b:63:df:49:3a:c1:b0:bf:d6:88:99:72:c1: a1:ba:66:26:c5:a9:7f:c7:60:79:23:1c:53:71:66:bc:4c:45: 09:d5:42:67:5b:c9:21:e4:ac:b1:08:75:a4:93:88:f8:b8:64: 5e:2d:e6:fa:b9:f1:41:d0:d8:91:44:88:8c:72:c0:ff:2d:d3: c6:81:5e:05:49:48:67:32:5e:06:06:aa:3e:5e:ee:a6:60:0a: d2:da:f3:bc:38:d3:ee:82:2a:9a:57:8d:3d:73:b3:a0:08:d7: 1a:b7:0d:ed:33:be:29:a9:09:c5:bf:0b:a4:38:c5:38:75:03: 0d:14:df:f3:88:9c:2d:d5:a4:21:2c:45:33:8a:09:ae:61:f8: ff:14:b1:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4rbINEatDdTNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjU4ZDdiZDItMDkyYy00YjNkLThjM2UtMGRjNWM5YTAyNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxSisNdDcgRsN6HuZcAm8tZ5YORIbMpH+zfF WnszqDkgRShjifpmKmtBWlbEYnjYhHS4uZemfcNRocQUMD6VEI7y9vujJQS5+T6u On70ny90le5wnXsV5SSRk5yaXp70gLAz51YjGJk47khNRKhI/MPSSvGKq52gH1EF kAc/HlGGbQkBLg9kzpGVG3O8Zhc+5L93rUgkKmc6kmrytYK3yiUv5A+M9sZxjBep WTz6PULGQLiiXsVs3TZJWf6zPgkSzaQgOdpC1lWaqTWNiUPDvMLshP+shUslM4VE dTENVVd+l8WcrBNZCOa09hGikwT1YhrGkMy5SJdzeJfrwy/mlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJuoV7qViiqIBtJc5KF43VhXhxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzU2NjE3ZDYtZDk4YS0z YzEyLTlkNGEtODU3YzA2ZGVkNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOKEeH2pDdiA8VIlyLOMZZMSVRbC69V4hvBfRQB65l92AGy38ZS1luj jAnRK383aaJeVkzmmYdazQm3ePiDYosVyzZCuANdmS9aWoqAT0w2xoY6WGTM3i0Z J6W/k9zzZn4WPVoL5P28SeFfPrKRQQ2MW2PfSTrBsL/WiJlywaG6ZibFqX/HYHkj HFNxZrxMRQnVQmdbySHkrLEIdaSTiPi4ZF4t5vq58UHQ2JFEiIxywP8t08aBXgVJ SGcyXgYGqj5e7qZgCtLa87w40+6CKppXjT1zs6AI1xq3De0zvimpCcW/C6Q4xTh1 Aw0U3/OInC3VpCEsRTOKCa5h+P8UsY4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:14 2025 by rpki-client