$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa File: a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa (raw, json) Hash identifier: hFnA1F3C3/zmRjrkr8NV6HPoJuOi5iAKoEQs1z3ce9o= Subject key identifier: AE:32:29:05:F4:7E:43:7D:3C:C0:71:4B:85:A1:F1:2E:BB:63:94:EB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B1F01771211EC952AAB84D780 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 216.71.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:77:12:11:ec:95:2a:ab:84:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ce9eca99-989f-44d6-bdd0-fd17161a8319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:d8:3b:18:be:17:8c:0b:62:b1:49:a8:bf: a3:72:fa:15:19:c1:1b:6a:c8:19:da:c5:68:12:42: 16:46:83:83:b1:18:83:07:a0:6a:fd:b0:26:21:ab: cb:b5:e3:df:5b:40:c4:c0:d1:4d:2d:16:03:ba:74: 3e:71:6f:c8:f1:c7:bf:7e:af:8d:ed:17:07:67:4e: 17:8c:96:2b:de:32:74:83:9e:d9:93:54:23:75:31: 30:fc:69:e7:5b:d8:94:9e:f4:0e:2b:cb:b5:5c:d1: f4:ba:bb:8c:20:e0:4d:13:7f:5a:01:a3:58:b3:4d: 87:0f:f3:54:08:c8:eb:7d:0e:5f:03:0b:47:6d:e0: 91:c6:17:64:59:f3:75:26:95:ff:43:81:56:d9:28: 21:e8:47:8f:92:cd:4b:f4:d3:b3:bc:b3:2c:d9:6e: 23:45:24:17:da:26:7c:3d:22:e3:23:eb:9b:40:a8: 84:3a:cb:32:a4:f0:4d:d0:3f:41:96:cb:9d:23:95: 1a:d1:d0:5c:0c:8a:18:c7:ea:18:b2:d7:36:bd:42: a3:57:ac:d8:43:ee:b5:66:f6:fc:f5:cb:36:24:9a: ee:d1:13:41:35:84:3a:96:8b:85:a2:85:6e:88:b5: de:f8:13:02:39:7d:4e:6d:e6:3b:34:07:b7:a7:44: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:32:29:05:F4:7E:43:7D:3C:C0:71:4B:85:A1:F1:2E:BB:63:94:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:98:12:d4:a0:58:05:4e:96:f1:a9:2a:0d:6f:0a:c3:46:40: 2e:6f:45:34:1c:c6:b4:80:1f:cd:e4:bd:09:af:3f:8e:24:4d: d9:6c:0b:1e:b7:6c:8b:93:c0:2c:5e:08:16:00:b1:eb:13:cf: b8:90:73:91:62:13:d5:da:aa:0d:5f:79:a3:45:30:ef:c7:62: 62:45:d5:71:2e:04:d9:95:d5:7b:d7:c7:10:2c:91:80:61:d7: 37:cc:6c:d5:23:40:ae:62:b0:e4:8a:93:a8:b8:d5:4d:7d:65: 50:72:8b:52:b4:ae:a4:76:0c:dd:bb:7b:4c:22:22:e0:6a:43: d8:de:cc:df:c9:4d:07:46:b1:3b:a3:8a:91:c3:05:98:b5:04: e9:2a:10:11:25:9b:72:4d:57:91:98:b8:92:e5:2b:4c:61:10: 19:f3:1a:e6:7a:36:b0:94:53:96:c3:fd:38:b7:fc:9b:62:70: c8:c0:73:e9:a7:89:08:52:17:b6:46:b9:52:62:59:d6:cc:2d: f5:3d:3c:e4:84:91:48:75:bc:f7:ba:ba:dd:ad:10:ec:ff:b7: d7:03:97:69:62:f1:3b:ae:13:36:08:b2:e7:f6:8b:9d:54:a7: 98:40:5b:db:9a:3c:04:e5:ab:df:34:6d:9f:9c:55:6f:e3:22: 53:af:de:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXcSEeyVKquE14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2U5ZWNhOTktOTg5Zi00NGQ2LWJkZDAtZmQxNzE2MWE4MzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXPYOxi+F4wLYrFJqL+jcvoVGcEbasgZ2sVo EkIWRoODsRiDB6Bq/bAmIavLtePfW0DEwNFNLRYDunQ+cW/I8ce/fq+N7RcHZ04X jJYr3jJ0g57Zk1QjdTEw/GnnW9iUnvQOK8u1XNH0uruMIOBNE39aAaNYs02HD/NU CMjrfQ5fAwtHbeCRxhdkWfN1JpX/Q4FW2Sgh6EePks1L9NOzvLMs2W4jRSQX2iZ8 PSLjI+ubQKiEOssypPBN0D9BlsudI5Ua0dBcDIoYx+oYstc2vUKjV6zYQ+61Zvb8 9cs2JJru0RNBNYQ6louFooVuiLXe+BMCOX1ObeY7NAe3p0Q3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4yKQX0fkN9PMBxS4Wh8S67Y5TrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTg2MGY0OTctNTFjMC0z NjFjLWIzZDAtMWUzZGFkNGM3YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKYEtSgWAVOlvGpKg1vCsNGQC5vRTQcxrSAH83kvQmvP44kTdlsCx63 bIuTwCxeCBYAsesTz7iQc5FiE9Xaqg1feaNFMO/HYmJF1XEuBNmV1XvXxxAskYBh 1zfMbNUjQK5isOSKk6i41U19ZVByi1K0rqR2DN27e0wiIuBqQ9jezN/JTQdGsTuj ipHDBZi1BOkqEBElm3JNV5GYuJLlK0xhEBnzGuZ6NrCUU5bD/Ti3/JticMjAc+mn iQhSF7ZGuVJiWdbMLfU9POSEkUh1vPe6ut2tEOz/t9cDl2li8TuuEzYIsuf2i51U p5hAW9uaPATlq980bZ+cVW/jIlOv3u4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:40 2025 by rpki-client