$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa File: 02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa (raw, json) Hash identifier: t76yElB2acRIBmKoR83HQd3JnsblGaVAqBOMiXgTb7o= Subject key identifier: 0F:5C:F5:80:54:CF:F1:6B:FB:E5:BC:2B:BB:CE:6E:50:01:E3:0B:B8 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849754458D8DAF9D476C261CB80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 16417 IP address blocks: 216.71.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:58:d8:da:f9:d4:76:c2:61:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=6ac4b8e7-16c5-4910-a155-d50b5c294d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:32:32:9b:58:ea:03:fb:e5:be:71:16:42: aa:36:06:ea:99:43:f3:d9:a5:3e:b8:75:fb:9c:41: 47:5d:d1:d9:22:5b:a3:3b:6a:91:73:f0:22:18:79: d5:2f:e2:e0:10:76:57:04:43:3e:ee:9c:a1:1e:4b: 31:50:2e:4b:30:6b:44:68:ab:ee:03:17:38:0f:e6: dd:4b:f6:19:f4:bc:e5:e3:24:91:9d:62:c7:e9:ae: 12:5e:15:23:9a:18:f2:2e:07:69:08:73:05:01:57: a8:bc:23:59:85:ac:0e:35:6b:20:a1:56:ce:e4:ac: 7f:ad:77:bd:63:42:c1:44:f5:bd:c5:ac:16:97:97: ef:cb:d9:62:33:5e:e2:39:c7:9d:c7:71:89:72:c4: b6:5c:5a:1e:c6:8e:62:a6:67:95:4f:92:a0:ec:01: 50:09:8e:f0:f6:ca:36:83:8e:53:99:92:7b:3e:4e: da:54:28:ed:ca:3f:03:3e:85:6f:9d:05:a6:52:cb: ed:01:fb:98:ca:61:cc:5b:a1:78:1e:c7:af:be:d7: dd:61:af:ac:e6:76:3a:82:b1:0f:df:17:43:87:6c: 09:07:e6:10:3c:74:20:75:53:c2:50:5c:84:31:87: dd:ca:58:a9:91:d1:11:07:50:a5:16:b1:8a:e8:63: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5C:F5:80:54:CF:F1:6B:FB:E5:BC:2B:BB:CE:6E:50:01:E3:0B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2a:73:48:5b:c4:52:19:4e:31:a5:6f:f6:e5:95:75:bd:16: de:90:0e:5b:b6:57:df:26:1c:11:e0:e5:25:a3:91:10:2e:6e: 68:de:b6:e7:43:28:96:2f:2c:2a:bd:27:3d:2c:57:eb:8a:21: 86:92:e6:00:8e:cc:79:d6:ae:4d:a9:5e:9b:e1:5c:19:d4:5a: 9d:f4:8d:69:b3:20:92:77:3a:99:f3:e4:d2:43:01:5f:c9:74: a4:c5:0a:0c:54:7b:7e:55:64:38:e2:bf:1b:e3:82:72:dd:8c: 17:73:64:06:38:fe:e3:df:57:8b:d7:8b:ba:e4:02:03:e5:e7: 88:38:26:f2:96:6c:8d:6a:42:ad:6a:2d:7a:fb:45:57:15:0b: 16:f6:74:cf:f8:9f:cf:65:c9:a1:93:2f:2a:39:07:9a:84:65: 20:e1:4c:27:3c:7f:bb:e4:0b:be:44:59:a9:21:cf:c8:2b:1c: 17:f7:01:29:6d:80:15:47:19:37:01:0e:a1:58:e7:f3:56:d3: d4:6f:3d:96:e5:c0:8b:53:80:47:15:4a:96:7d:22:8e:62:15: 98:f5:94:f4:04:10:f6:13:fe:74:b0:c1:cd:cc:b5:c3:56:f6: 68:60:08:cf:7c:08:9b:25:6b:fd:a5:1d:f4:f4:93:a2:5a:54: c3:7f:ff:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFjY2vnUdsJhy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NmFjNGI4ZTctMTZjNS00OTEwLWExNTUtZDUwYjVjMjk0ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHcyMptY6gP75b5xFkKqNgbqmUPz2aU+uHX7 nEFHXdHZIlujO2qRc/AiGHnVL+LgEHZXBEM+7pyhHksxUC5LMGtEaKvuAxc4D+bd S/YZ9Lzl4ySRnWLH6a4SXhUjmhjyLgdpCHMFAVeovCNZhawONWsgoVbO5Kx/rXe9 Y0LBRPW9xawWl5fvy9liM17iOcedx3GJcsS2XFoexo5ipmeVT5Kg7AFQCY7w9so2 g45TmZJ7Pk7aVCjtyj8DPoVvnQWmUsvtAfuYymHMW6F4HsevvtfdYa+s5nY6grEP 3xdDh2wJB+YQPHQgdVPCUFyEMYfdylipkdERB1ClFrGK6GMFeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9c9YBUz/Fr++W8K7vOblAB4wu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDJmODNmZjUtMmJlNC0z YzhlLWI4YWUtZTI0ZjI3MTY0MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkqc0hbxFIZTjGlb/bllXW9Ft6QDlu2V98mHBHg5SWjkRAubmjetudD KJYvLCq9Jz0sV+uKIYaS5gCOzHnWrk2pXpvhXBnUWp30jWmzIJJ3Opnz5NJDAV/J dKTFCgxUe35VZDjivxvjgnLdjBdzZAY4/uPfV4vXi7rkAgPl54g4JvKWbI1qQq1q LXr7RVcVCxb2dM/4n89lyaGTLyo5B5qEZSDhTCc8f7vkC75EWakhz8grHBf3ASlt gBVHGTcBDqFY5/NW09RvPZblwItTgEcVSpZ9Io5iFZj1lPQEEPYT/nSwwc3MtcNW 9mhgCM98CJsla/2lHfT0k6JaVMN///Y= -----END CERTIFICATE-----Generated at Mon May 5 08:49:16 2025 by rpki-client