$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa File: fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa (raw, json) Hash identifier: s1B46lp1QPm0/R52hUGBhouUtKQqT/B4CIREk88vKjA= Subject key identifier: 37:A9:BC:4B:E6:91:1C:88:7A:B3:52:32:B0:77:A8:3E:F2:E5:F2:96 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A0C0560825F13ED907B9C6D40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 30238 IP address blocks: 216.71.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:60:82:5f:13:ed:90:7b:9c:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=7fa55312-f564-4a6f-9fce-551225712122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:b6:7b:c6:fc:25:6b:62:1f:be:69:5e:bc: c1:e1:9d:4d:1a:89:05:89:6e:e1:d1:6d:27:35:37: 04:6c:68:ac:4f:31:c7:0f:10:87:c2:86:44:64:5c: a2:fe:32:17:98:ae:60:af:fb:7e:12:f8:57:7c:f4: cc:4e:68:aa:92:90:2c:95:20:12:45:5c:8c:69:ed: c5:66:c5:76:da:8c:58:6a:c0:8a:6f:e7:11:fa:4f: 76:1e:61:f8:84:e7:11:3b:58:82:ff:a5:ec:0d:b6: d9:38:b1:56:ff:44:a1:f8:62:17:bf:61:73:a4:22: b1:cf:2c:84:05:62:68:f5:38:58:68:6a:e6:6d:cd: f5:7d:16:27:9c:8b:be:44:f0:7b:4e:6b:9f:61:8d: eb:09:5e:0a:7a:60:5c:47:51:ad:97:71:0a:bb:d6: b3:6a:42:40:d6:96:3b:44:e5:06:af:a7:3e:bb:60: f1:ac:bf:69:bb:da:6e:27:3e:28:3c:45:44:e9:87: bb:54:34:33:0d:80:07:cf:87:3c:b1:72:33:18:0a: 7f:4a:01:45:48:32:60:e5:bd:01:08:1a:ad:0c:f9: 4c:b2:ad:c9:93:17:dc:7a:a1:8f:1f:a8:a7:1c:e4: b6:72:35:7b:a2:13:ca:03:8e:ad:51:ba:eb:d9:85: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A9:BC:4B:E6:91:1C:88:7A:B3:52:32:B0:77:A8:3E:F2:E5:F2:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fed16bd2-aed4-3a7a-aa91-16bf0bfdc933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:21:9d:b0:44:38:d7:79:26:7b:4f:c9:18:19:b6:45:22:bf: 38:64:9f:7d:01:38:31:b1:a9:0d:df:98:28:dc:30:aa:2d:40: 4a:cb:74:5a:66:3a:8d:fe:ce:f2:86:e9:f2:e7:90:b9:0b:b4: ab:4d:cb:69:1d:08:91:28:86:31:5d:b1:fc:3f:c8:a9:39:5f: 11:b0:4d:f7:e4:25:9b:e1:f8:94:87:f7:42:1b:4b:42:ed:6f: 52:62:21:42:0e:3b:8d:43:7d:60:a0:22:f8:82:11:97:7f:ee: 6d:62:41:23:4d:ad:d9:45:98:46:44:57:cd:4b:53:67:6d:9c: b9:e0:42:51:cb:cf:7c:71:1d:fa:38:20:5d:d8:5f:5b:37:a5: 48:09:42:67:bb:be:57:a5:c6:e3:66:da:d9:20:84:3f:12:9d: e2:65:29:c4:63:12:17:8d:d1:ff:35:45:da:20:34:15:4d:9b: d2:75:c1:dd:d5:d1:ae:9a:b9:e2:d9:4e:25:0c:e3:fa:be:06: 53:0c:56:58:58:c5:90:61:59:e7:c8:36:97:6a:ee:27:1c:89: c3:d7:59:0f:2c:34:7b:d7:4e:03:2d:50:ad:50:a0:07:a7:2b: e5:1f:6c:7b:0b:14:e1:64:db:42:5a:e7:51:7b:13:6b:6d:5f: 93:90:b1:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWCCXxPtkHucbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk N2ZhNTUzMTItZjU2NC00YTZmLTlmY2UtNTUxMjI1NzEyMTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW+2e8b8JWtiH75pXrzB4Z1NGokFiW7h0W0n NTcEbGisTzHHDxCHwoZEZFyi/jIXmK5gr/t+EvhXfPTMTmiqkpAslSASRVyMae3F ZsV22oxYasCKb+cR+k92HmH4hOcRO1iC/6XsDbbZOLFW/0Sh+GIXv2FzpCKxzyyE BWJo9ThYaGrmbc31fRYnnIu+RPB7TmufYY3rCV4KemBcR1Gtl3EKu9azakJA1pY7 ROUGr6c+u2DxrL9pu9puJz4oPEVE6Ye7VDQzDYAHz4c8sXIzGAp/SgFFSDJg5b0B CBqtDPlMsq3JkxfceqGPH6inHOS2cjV7ohPKA46tUbrr2YVOYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDepvEvmkRyIerNSMrB3qD7y5fKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZmVkMTZiZDItYWVkNC0z YTdhLWFhOTEtMTZiZjBiZmRjOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALchnbBEONd5JntPyRgZtkUivzhkn30BODGxqQ3fmCjcMKotQErLdFpm Oo3+zvKG6fLnkLkLtKtNy2kdCJEohjFdsfw/yKk5XxGwTffkJZvh+JSH90IbS0Lt b1JiIUIOO41DfWCgIviCEZd/7m1iQSNNrdlFmEZEV81LU2dtnLngQlHLz3xxHfo4 IF3YX1s3pUgJQme7vlelxuNm2tkghD8SneJlKcRjEheN0f81RdogNBVNm9J1wd3V 0a6aueLZTiUM4/q+BlMMVlhYxZBhWefINpdq7iccicPXWQ8sNHvXTgMtUK1QoAen K+UfbHsLFOFk20Ja51F7E2ttX5OQsXY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:15:21 2025 by rpki-client