$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa File: d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa (raw, json) Hash identifier: JFxwAwQmQGFTmqNwrA1dqGrpB7MetTRsiWVGEfZ0+Is= Subject key identifier: D8:88:99:FD:AE:AF:EB:79:F9:52:30:EF:4F:87:E3:7B:F2:08:74:64 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A0C056FCAB9891098F04D8DC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 30238 IP address blocks: 216.71.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6f:ca:b9:89:10:98:f0:4d:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=43814d90-9956-4d49-98de-f4def34835fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:50:63:33:b0:1f:cc:f3:f4:fa:f5:03:30: ac:c8:9b:8f:1d:04:d9:38:07:3a:68:7f:fd:6b:18: a7:9f:79:f0:55:eb:96:95:9f:f3:9f:e2:86:d0:07: 5c:5b:8d:d8:51:35:45:bd:ed:78:57:19:f9:de:5a: 96:a4:a9:0c:49:f8:99:cb:d4:9e:91:42:c6:f5:34: 18:c5:6f:a5:f1:8f:ca:48:7e:89:b3:77:53:0f:d5: 7b:53:e5:97:29:bb:35:0c:02:d0:ef:5a:fc:7c:fd: 15:72:c3:0f:cc:04:b9:03:38:46:f9:7e:d1:5c:a3: 1d:2d:89:b4:89:01:dd:c7:09:9c:41:a5:5b:20:09: ad:3a:df:3e:a3:3a:e6:a6:50:ae:70:d7:5a:37:cd: 0b:1f:73:98:94:4a:c7:4a:16:bf:3c:db:fe:cf:a6: ab:69:ea:c0:46:6c:72:87:3f:bc:5c:06:d1:a3:7a: f4:84:49:25:87:7b:2d:33:64:67:c3:4c:87:a0:1b: c7:85:32:17:09:e7:43:57:7b:b8:31:4d:0c:88:48: 1e:7d:30:97:2e:70:44:8c:4f:1b:69:3b:c5:28:e4: bc:25:ac:74:45:dc:b7:39:8b:f0:ab:fe:b4:fc:bc: 28:0a:36:87:c8:24:15:45:f9:be:63:79:58:63:70: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:99:FD:AE:AF:EB:79:F9:52:30:EF:4F:87:E3:7B:F2:08:74:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:10:35:30:cf:0a:31:4d:59:bb:7e:9b:73:ad:53:23:88:78: a5:24:03:c3:8f:23:86:26:f6:07:65:1e:73:14:b9:62:00:89: 1b:3c:9f:58:b5:52:3a:ea:24:2e:43:12:40:66:b6:dc:de:b7: 0f:94:28:7b:0d:c7:7b:90:3f:d6:30:b8:79:17:9f:2b:97:8b: 6b:cd:7d:7a:0c:1d:8b:0e:d0:85:10:72:1c:dd:78:d4:7b:39: 83:13:a4:7f:3d:5e:c7:c8:ca:71:81:e4:46:fe:a0:89:c3:80: b3:a4:6b:35:5e:3e:7c:4e:d8:fe:59:9b:a8:3a:b8:90:a0:3e: 97:57:0b:f0:9b:db:ff:64:ce:28:b0:ec:bb:64:93:32:71:58: 04:e1:90:55:50:4e:e3:0e:4b:36:11:fa:1f:00:cc:7c:da:32: 71:02:a9:c9:c7:30:12:94:44:2c:ee:bb:a7:70:66:fa:ae:37: de:c4:36:c3:5b:c1:46:d5:de:8b:64:47:99:a8:03:8e:48:bf: 07:a3:30:ed:b1:3c:34:44:3b:52:44:3f:9f:a3:86:74:6d:ee: 57:59:09:1c:86:52:9c:45:48:9e:20:00:3e:66:84:45:a9:1d: 71:5c:b3:61:33:ae:df:9f:11:52:59:02:7a:48:79:ca:62:b9: 87:42:9b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBW/KuYkQmPBNjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDM4MTRkOTAtOTk1Ni00ZDQ5LTk4ZGUtZjRkZWYzNDgzNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsBQYzOwH8zz9Pr1AzCsyJuPHQTZOAc6aH/9 axinn3nwVeuWlZ/zn+KG0AdcW43YUTVFve14Vxn53lqWpKkMSfiZy9SekULG9TQY xW+l8Y/KSH6Js3dTD9V7U+WXKbs1DALQ71r8fP0VcsMPzAS5AzhG+X7RXKMdLYm0 iQHdxwmcQaVbIAmtOt8+ozrmplCucNdaN80LH3OYlErHSha/PNv+z6araerARmxy hz+8XAbRo3r0hEklh3stM2Rnw0yHoBvHhTIXCedDV3u4MU0MiEgefTCXLnBEjE8b aTvFKOS8Jax0Rdy3OYvwq/60/LwoCjaHyCQVRfm+Y3lYY3BwPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiImf2ur+t5+VIw70+H43vyCHRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDA5Y2ZkYmQtYmI2YS0z MWEyLTkzYTUtODkwZGI5YWExZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcQNTDPCjFNWbt+m3OtUyOIeKUkA8OPI4Ym9gdlHnMUuWIAiRs8n1i1 UjrqJC5DEkBmttzetw+UKHsNx3uQP9YwuHkXnyuXi2vNfXoMHYsO0IUQchzdeNR7 OYMTpH89XsfIynGB5Eb+oInDgLOkazVePnxO2P5Zm6g6uJCgPpdXC/Cb2/9kziiw 7LtkkzJxWAThkFVQTuMOSzYR+h8AzHzaMnECqcnHMBKURCzuu6dwZvquN97ENsNb wUbV3otkR5moA45IvwejMO2xPDREO1JEP5+jhnRt7ldZCRyGUpxFSJ4gAD5mhEWp HXFcs2Ezrt+fEVJZAnpIecpiuYdCm1Q= -----END CERTIFICATE-----Generated at Mon Jun 16 15:32:31 2025 by rpki-client