$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa File: dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa (raw, json) Hash identifier: KX9ttsOoHPnxkFKuEirTNh6WaJ2wyN5oMhigneg3mF0= Subject key identifier: 03:7E:2A:80:2E:B9:C9:12:58:32:70:AD:9C:62:26:58:6D:DD:14:DC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BB88D25EABB1D2D5ECBF5BD40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 30238 IP address blocks: 216.71.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:25:ea:bb:1d:2d:5e:cb:f5:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=64c1485d-a0f1-4e3d-b3d8-f89f383acca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:d2:6b:a2:94:9a:ef:a5:d0:25:2e:c1:82: 71:58:4b:8b:6d:83:6e:1a:50:55:ca:37:72:d4:bc: fc:4e:45:63:22:2c:d9:7a:08:76:08:d3:c7:af:9d: 23:7f:a2:82:49:81:d9:3f:54:86:e8:23:db:c5:f5: ba:76:10:5b:3e:92:ae:7e:d1:96:76:9a:3c:a9:f9: be:07:e5:d7:3c:b7:01:6f:e7:cd:84:2f:f4:f3:2c: a5:e5:7e:08:d5:44:e1:14:0f:1f:67:60:5d:94:92: c5:da:d2:1a:cb:1f:00:f4:cc:9c:5d:e9:38:9b:a5: 99:a9:93:33:73:c5:4a:14:19:8f:69:88:10:2e:2e: e1:19:5d:99:b0:61:ef:a5:b3:3c:e4:b2:eb:0e:11: 5f:b3:6f:14:a1:80:f4:fd:55:4e:1b:38:be:da:88: f1:11:e0:8b:ee:68:3f:c9:f6:bd:5e:7b:63:4c:e5: 41:0c:a2:35:88:14:12:b7:8e:4d:ff:09:e6:8d:16: 2a:d3:08:71:95:1b:26:2f:5a:23:91:34:27:ba:24: ef:92:d3:13:cf:f1:4f:17:d2:67:77:3b:29:0a:c0: 5d:fc:40:51:64:dc:b1:fc:52:3f:5a:13:05:3e:34: 4e:01:4e:3f:cf:22:1a:b0:86:b8:1d:5b:50:97:94: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:2A:80:2E:B9:C9:12:58:32:70:AD:9C:62:26:58:6D:DD:14:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ad:20:63:cd:e4:24:ae:1d:18:e0:52:80:7a:d2:dd:3d:af: 82:f4:c0:a0:14:6d:f9:fc:ae:24:19:c2:96:90:14:0f:3e:e2: 04:81:f9:30:b0:6d:92:2e:64:48:7e:c3:15:52:2a:c4:e2:e6: 52:6b:f8:fa:98:60:5c:75:34:35:e3:bb:f9:f9:85:c2:87:56: 4c:72:7d:5c:b0:c4:60:9d:04:55:17:92:6f:63:41:db:b6:ee: bc:96:1d:de:a9:00:0d:ce:e9:b1:f8:fb:6a:8f:1b:76:dd:70: 30:79:a8:c3:f8:83:61:9c:68:94:5f:00:ca:eb:ca:c1:34:ba: d7:93:2b:c9:81:18:43:c2:19:37:b2:75:9d:d8:9f:e2:dd:c2: ee:aa:e5:4e:b6:e6:cf:c0:e8:c6:1c:b7:42:06:e8:bf:ae:6b: e9:1d:04:b6:22:f6:7c:fd:e0:3d:a4:59:b8:63:be:73:dd:43: f8:7b:e1:fb:69:2c:30:af:e6:4f:82:8c:17:85:84:f9:f4:65: c9:7c:00:5f:b0:81:dc:ef:ab:99:69:e7:f2:63:3e:7a:57:dd: e4:ca:57:59:64:62:ee:9f:43:55:61:d0:6c:3f:0b:2b:73:62: 82:02:d3:ca:14:0c:b8:b7:8c:0a:24:f0:66:cf:dd:a9:a8:32: c9:7f:ed:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSXqux0tXsv1vUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjRjMTQ4NWQtYTBmMS00ZTNkLWIzZDgtZjg5ZjM4M2FjY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsrSa6KUmu+l0CUuwYJxWEuLbYNuGlBVyjdy 1Lz8TkVjIizZegh2CNPHr50jf6KCSYHZP1SG6CPbxfW6dhBbPpKuftGWdpo8qfm+ B+XXPLcBb+fNhC/08yyl5X4I1UThFA8fZ2BdlJLF2tIayx8A9MycXek4m6WZqZMz c8VKFBmPaYgQLi7hGV2ZsGHvpbM85LLrDhFfs28UoYD0/VVOGzi+2ojxEeCL7mg/ yfa9XntjTOVBDKI1iBQSt45N/wnmjRYq0whxlRsmL1ojkTQnuiTvktMTz/FPF9Jn dzspCsBd/EBRZNyx/FI/WhMFPjROAU4/zyIasIa4HVtQl5QWswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN+KoAuuckSWDJwrZxiJlht3RTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGZmY2Q0NGItNzZlNC0z OWRhLWIxYmYtYTgzMTBjYmFmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOtIGPN5CSuHRjgUoB60t09r4L0wKAUbfn8riQZwpaQFA8+4gSB+TCw bZIuZEh+wxVSKsTi5lJr+PqYYFx1NDXju/n5hcKHVkxyfVywxGCdBFUXkm9jQdu2 7ryWHd6pAA3O6bH4+2qPG3bdcDB5qMP4g2GcaJRfAMrrysE0uteTK8mBGEPCGTey dZ3Yn+Ldwu6q5U625s/A6MYct0IG6L+ua+kdBLYi9nz94D2kWbhjvnPdQ/h74ftp LDCv5k+CjBeFhPn0Zcl8AF+wgdzvq5lp5/JjPnpX3eTKV1lkYu6fQ1Vh0Gw/Cytz YoIC08oUDLi3jAok8GbP3amoMsl/7VE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:16 2025 by rpki-client