$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa File: 3842dcc3-b68c-317f-a314-9bd4be8788b0.roa (raw, json) Hash identifier: 6W5T5Qd+bWmsQ3btv3ALXenCSIm2CpVQOTES/otukoQ= Subject key identifier: D0:5F:29:28:C3:24:54:50:2D:C8:9C:96:E1:75:CF:6C:C0:23:D6:54 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AA42B8A84643B79AC9FBB8C00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16417 IP address blocks: 216.71.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8a:84:64:3b:79:ac:9f:bb:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=c835d989-2e10-46f0-9497-89a960fa7a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:74:49:74:27:93:43:8e:0f:28:33:e5:ad:4d: b8:26:84:d0:84:4c:4d:c0:ee:86:8a:32:d1:2b:9b: ab:5d:0c:f0:a0:3d:5d:d2:1b:ab:e3:1a:03:7c:83: 18:53:83:c8:e1:a1:15:10:08:11:19:2e:17:20:06: f3:3e:09:bd:d9:84:d0:54:0a:5d:7e:46:f4:ef:4e: 62:7e:9b:7d:da:d1:08:b6:70:e0:b1:9d:6c:fc:30: b0:c3:bf:ab:1c:4a:1e:a5:67:e5:ea:dc:00:9e:f3: 5f:02:f9:60:0b:31:0e:df:e9:74:e2:4d:32:49:f4: 55:44:6f:d9:e5:21:8b:6e:d0:bc:72:ec:b8:b7:6e: 14:53:bc:7e:8f:e8:24:f5:09:70:e0:0c:a0:39:31: 87:76:5a:93:a1:91:55:ed:64:3a:f9:a1:91:58:0a: 4d:53:4c:0d:44:8d:81:f0:dd:e9:8b:4a:b3:99:4f: b8:2a:db:79:18:25:20:dc:27:3e:17:e5:93:fe:0b: 06:04:7e:ae:a9:19:a3:e9:97:a5:40:eb:a7:a4:6a: 6d:23:85:e5:d0:a9:1f:46:10:8d:dc:61:ab:26:57: 7e:e1:68:02:83:1b:79:a9:18:dd:86:1b:f1:ed:00: 90:fd:76:74:9a:dc:50:34:fe:39:46:65:45:a5:d4: 23:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5F:29:28:C3:24:54:50:2D:C8:9C:96:E1:75:CF:6C:C0:23:D6:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2a:3c:a7:2d:92:1a:aa:dd:d6:f4:11:fb:14:af:1d:1f:18: df:d0:9e:6c:b7:87:f6:df:ab:af:e5:95:e8:98:2a:3d:20:63: 9a:9e:db:64:f6:08:8a:da:80:95:59:25:42:a9:e2:58:9b:0f: 37:bb:91:5e:b4:7d:16:a8:39:58:3b:60:bb:27:41:e1:9e:b2: f6:a8:36:9a:6e:fc:6a:68:b5:cd:7c:23:02:cf:56:1c:c7:d3: 24:2b:d6:1b:e1:6f:10:8b:f1:38:32:dc:09:40:03:55:b9:23: ac:43:cf:03:b6:e4:65:94:01:86:94:56:65:1c:96:8e:85:d0: 79:dd:5c:eb:99:35:5a:9a:40:2e:e7:50:ea:4c:8e:60:e3:27: a5:06:69:60:bd:67:2a:c7:1a:35:eb:bb:5c:a3:ee:1e:dc:d5: 1e:24:59:a5:65:f4:5f:70:7f:92:55:fc:12:5b:dd:38:f4:db: 31:03:88:02:6c:2b:e3:8f:7e:de:ef:78:d7:da:eb:3b:b4:d4: b2:15:a7:08:3a:c7:23:9b:d0:52:58:09:98:60:90:82:16:ec: aa:25:fc:d1:6a:e8:3d:58:63:45:8a:6e:58:7a:59:70:25:5f: 1e:6f:05:77:96:d3:3a:b6:89:bc:e0:b9:35:85:b5:51:e4:78: 83:56:c5:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4qEZDt5rJ+7jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YzgzNWQ5ODktMmUxMC00NmYwLTk0OTctODlhOTYwZmE3YTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXRJdCeTQ44PKDPlrU24JoTQhExNwO6GijLR K5urXQzwoD1d0hur4xoDfIMYU4PI4aEVEAgRGS4XIAbzPgm92YTQVApdfkb0705i fpt92tEItnDgsZ1s/DCww7+rHEoepWfl6twAnvNfAvlgCzEO3+l04k0ySfRVRG/Z 5SGLbtC8cuy4t24UU7x+j+gk9Qlw4AygOTGHdlqToZFV7WQ6+aGRWApNU0wNRI2B 8N3pi0qzmU+4Ktt5GCUg3Cc+F+WT/gsGBH6uqRmj6ZelQOunpGptI4Xl0KkfRhCN 3GGrJld+4WgCgxt5qRjdhhvx7QCQ/XZ0mtxQNP45RmVFpdQjxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBfKSjDJFRQLcicluF1z2zAI9ZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzg0MmRjYzMtYjY4Yy0z MTdmLWEzMTQtOWJkNGJlODc4OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAqPKctkhqq3db0EfsUrx0fGN/Qnmy3h/bfq6/lleiYKj0gY5qe22T2 CIragJVZJUKp4libDze7kV60fRaoOVg7YLsnQeGesvaoNppu/Gpotc18IwLPVhzH 0yQr1hvhbxCL8Tgy3AlAA1W5I6xDzwO25GWUAYaUVmUclo6F0HndXOuZNVqaQC7n UOpMjmDjJ6UGaWC9ZyrHGjXru1yj7h7c1R4kWaVl9F9wf5JV/BJb3Tj02zEDiAJs K+OPft7veNfa6zu01LIVpwg6xyOb0FJYCZhgkIIW7Kol/NFq6D1YY0WKblh6WXAl Xx5vBXeW0zq2ibzguTWFtVHkeINWxeA= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:22 2025 by rpki-client