$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa File: fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa (raw, json) Hash identifier: elpE+tFaJiQJLaK5csu4own0CTruk41ATLKnzrtrHHU= Subject key identifier: 34:70:4C:73:8E:C2:0F:A4:28:3B:9C:34:F3:00:C6:A4:E7:74:12:F3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC13473C7BA084FE9E68C00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 216.71.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:34:73:c7:ba:08:4f:e9:e6:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=02af9d8a-f88e-4070-a476-2916c0457341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:ab:11:b9:a8:69:17:c8:18:75:08:59:d1: ef:4e:9b:3e:b0:a8:31:55:2e:26:81:3f:27:b5:cd: 29:56:79:30:a5:ee:78:2e:22:fd:99:65:71:0d:27: 47:98:76:8a:74:12:19:11:b9:3d:5e:4f:98:04:d4: 18:c8:56:88:6e:48:f8:6a:aa:87:39:79:9a:5c:ed: 77:ef:21:e2:6c:ec:0d:10:40:48:b1:8c:26:6d:ee: 3d:63:de:52:ff:9f:ee:3c:6f:66:cc:ad:5d:e8:3d: 4d:7c:74:63:8f:53:7a:dd:c3:96:c5:a9:8a:cf:41: 97:ff:93:0d:7b:21:57:3a:72:d4:e3:d6:44:46:81: 0f:f8:8a:8f:e0:e4:9b:e7:5f:b2:65:4d:d3:f0:71: 34:94:4e:55:ac:6d:a8:00:d1:7b:e9:f9:16:5b:ef: 1d:0e:94:52:98:81:39:07:22:5a:bd:b1:35:79:97: 6d:67:22:17:98:3c:ad:90:fe:0e:e0:dc:58:8c:2f: de:52:76:45:68:fe:c6:56:8b:88:dc:b0:62:86:a1: 3b:fa:12:5a:03:76:67:84:6c:78:89:a7:b7:f1:9b: 09:ad:4a:24:ce:ba:1a:45:1a:51:0c:4d:c5:16:6f: 28:ce:d3:76:fa:94:cb:b4:02:2a:eb:0f:72:27:96: f7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:70:4C:73:8E:C2:0F:A4:28:3B:9C:34:F3:00:C6:A4:E7:74:12:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a1:01:a2:c7:97:d4:28:62:9e:87:ec:af:79:0f:00:72:d1: 7a:c5:cf:09:cd:27:a9:6d:53:90:a9:16:bc:94:31:07:28:b1: c7:60:15:8d:b5:b8:4b:02:54:59:20:3e:d6:80:62:80:84:45: be:8d:40:7b:97:e0:aa:82:47:fe:95:5a:ed:21:a0:af:88:5f: e7:56:15:e1:04:de:0d:cb:a0:40:d1:fd:27:44:de:62:ae:06: 6c:8f:4f:98:36:34:8d:a1:70:e6:a5:e9:9f:67:44:cb:62:b9: eb:2c:25:d4:ad:df:25:8c:37:8a:ef:d7:1f:68:f5:a3:94:05: 91:5c:bc:ab:d7:dc:0b:48:1a:d2:86:08:5d:ad:6d:d2:23:ff: e5:4a:e1:84:72:ff:fb:99:3a:2b:30:76:44:dd:f9:a5:1a:cd: 13:d1:fd:20:37:02:61:58:19:dc:e2:f5:b7:8b:4b:07:bc:91: d5:0b:cb:ef:5b:06:14:cd:c9:c2:8a:09:fe:12:85:92:7f:4b: ec:8a:32:39:8f:ec:19:c7:2f:4d:71:f6:e6:48:63:ad:a5:a5: 9b:ff:42:96:16:df:f6:b3:ef:7b:b8:85:a4:f6:37:e1:94:d8: b4:f2:1c:6a:d6:c9:29:10:b6:eb:2d:d0:e7:ef:08:0d:b1:b9: a0:95:bd:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTRzx7oIT+nmjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDJhZjlkOGEtZjg4ZS00MDcwLWE0NzYtMjkxNmMwNDU3MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6irEbmoaRfIGHUIWdHvTps+sKgxVS4mgT8n tc0pVnkwpe54LiL9mWVxDSdHmHaKdBIZEbk9Xk+YBNQYyFaIbkj4aqqHOXmaXO13 7yHibOwNEEBIsYwmbe49Y95S/5/uPG9mzK1d6D1NfHRjj1N63cOWxamKz0GX/5MN eyFXOnLU49ZERoEP+IqP4OSb51+yZU3T8HE0lE5VrG2oANF76fkWW+8dDpRSmIE5 ByJavbE1eZdtZyIXmDytkP4O4NxYjC/eUnZFaP7GVouI3LBihqE7+hJaA3ZnhGx4 iae38ZsJrUokzroaRRpRDE3FFm8oztN2+pTLtAIq6w9yJ5b3dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRwTHOOwg+kKDucNPMAxqTndBLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZmVkMTZiZDItYWVkNC0z YTdhLWFhOTEtMTZiZjBiZmRjOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADahAaLHl9QoYp6H7K95DwBy0XrFzwnNJ6ltU5CpFryUMQcoscdgFY21 uEsCVFkgPtaAYoCERb6NQHuX4KqCR/6VWu0hoK+IX+dWFeEE3g3LoEDR/SdE3mKu BmyPT5g2NI2hcOal6Z9nRMtiuessJdSt3yWMN4rv1x9o9aOUBZFcvKvX3AtIGtKG CF2tbdIj/+VK4YRy//uZOiswdkTd+aUazRPR/SA3AmFYGdzi9beLSwe8kdULy+9b BhTNycKKCf4ShZJ/S+yKMjmP7BnHL01x9uZIY62lpZv/QpYW3/az73u4haT2N+GU 2LTyHGrWySkQtust0OfvCA2xuaCVvcU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:58 2025 by rpki-client