$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa File: 30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa (raw, json) Hash identifier: xDcoTNxNOVEGpC/9jFmorrDhL+kQ4ayfrATiZzDCGqg= Subject key identifier: B0:95:3F:42:7A:80:84:AC:5A:1E:1D:B9:0A:D1:1E:D0:43:16:95:56 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E7835E0583F1680AFE5740 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 216.71.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:5e:05:83:f1:68:0a:fe:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=1f9f47da-7cea-438b-a5e0-8ee81cf9a289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:49:92:48:21:8a:3f:d2:5b:1c:70:f9:10: 72:6f:54:93:f1:a4:69:ef:cc:b1:d2:5a:79:ff:ab: 7f:a6:25:7f:ab:2b:47:c9:b1:18:58:9d:d1:1f:0d: 13:11:f7:18:67:96:ac:a6:5e:40:84:8f:6e:b5:80: 5b:34:1a:62:49:66:3d:e4:96:f7:6f:ca:22:43:86: 49:f4:77:da:b4:7c:29:7b:38:c8:3a:17:b6:ed:54: 83:da:d2:71:d8:1f:2d:b3:40:f4:7a:6e:2c:d4:2b: 11:11:5d:03:fc:ad:04:fe:62:a7:21:7a:28:99:2d: cc:31:d0:24:b0:84:f1:36:75:4f:8a:06:a4:55:be: f5:0a:ba:c5:9d:f5:95:b0:3d:70:98:02:52:8c:4d: 81:66:8a:18:9a:34:b8:7e:2d:23:05:9c:75:78:d2: 78:cc:c1:c2:6b:96:f8:30:15:5e:66:30:ee:d5:b8: b2:ae:a1:23:9c:ff:12:f1:f1:35:a5:b0:5d:bf:df: ae:7c:c4:dd:bf:01:e3:9d:d7:13:f5:09:53:f2:98: 1f:3a:77:f3:1d:1a:a2:2d:c5:e8:cb:13:7d:f5:48: ed:ce:38:be:a0:2a:14:29:c5:42:fc:60:73:eb:34: 4f:22:ed:6e:15:ff:7d:ef:68:ef:11:d1:23:68:c6: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:95:3F:42:7A:80:84:AC:5A:1E:1D:B9:0A:D1:1E:D0:43:16:95:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d7:83:79:22:d7:aa:49:84:71:ff:a5:d5:f4:ca:2c:8a:72: 46:d0:59:4e:5a:a0:20:f9:bc:b7:b9:ad:75:5e:f8:81:48:05: 07:ec:67:3e:1a:3b:70:13:24:dc:0f:b0:be:01:3b:63:b3:ce: cb:c8:6c:68:84:8b:a6:ef:07:74:15:d6:b7:4c:aa:c8:4c:30: 05:d4:93:fd:9b:28:09:a3:a5:16:97:6f:9d:57:48:d8:f9:a7: ba:2f:31:25:ff:f1:ac:20:9d:90:36:b6:13:3f:36:09:2f:58: 24:99:b6:69:cc:c7:21:3e:c8:02:2e:3c:da:f4:06:92:51:2a: 3c:87:10:36:04:89:3c:f6:34:c8:e9:00:ac:ec:bb:46:ad:3c: b8:be:bb:55:b7:16:fc:9e:d8:3f:89:48:a8:4d:22:f9:d2:83: 4e:c2:7f:f1:aa:76:4a:0b:db:cf:34:4d:ea:c9:03:5d:a6:5d: ed:62:16:bc:e7:4f:9a:3e:26:c1:5e:d7:fd:4c:b6:9e:0f:8c: 83:4a:30:ea:87:50:a7:2d:e5:0e:42:8d:7d:a9:98:70:49:1d: 94:a3:20:5e:df:80:8a:20:47:7e:db:3a:3f:59:29:25:d6:72: e4:fe:b1:94:e3:30:ce:da:d4:fa:23:d9:86:cc:0a:0c:a2:26: 6a:ad:be:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54NeBYPxaAr+V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MWY5ZjQ3ZGEtN2NlYS00MzhiLWE1ZTAtOGVlODFjZjlhMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KdJkkghij/SWxxw+RByb1ST8aRp78yx0lp5 /6t/piV/qytHybEYWJ3RHw0TEfcYZ5aspl5AhI9utYBbNBpiSWY95Jb3b8oiQ4ZJ 9HfatHwpezjIOhe27VSD2tJx2B8ts0D0em4s1CsREV0D/K0E/mKnIXoomS3MMdAk sITxNnVPigakVb71CrrFnfWVsD1wmAJSjE2BZooYmjS4fi0jBZx1eNJ4zMHCa5b4 MBVeZjDu1biyrqEjnP8S8fE1pbBdv9+ufMTdvwHjndcT9QlT8pgfOnfzHRqiLcXo yxN99Ujtzji+oCoUKcVC/GBz6zRPIu1uFf9972jvEdEjaMa5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCVP0J6gISsWh4duQrRHtBDFpVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzBlY2RjZWEtODhlYy0z Mjg5LWE3ZmEtMWFjMTAzZDI1MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3Xg3ki16pJhHH/pdX0yiyKckbQWU5aoCD5vLe5rXVe+IFIBQfsZz4a O3ATJNwPsL4BO2OzzsvIbGiEi6bvB3QV1rdMqshMMAXUk/2bKAmjpRaXb51XSNj5 p7ovMSX/8awgnZA2thM/NgkvWCSZtmnMxyE+yAIuPNr0BpJRKjyHEDYEiTz2NMjp AKzsu0atPLi+u1W3Fvye2D+JSKhNIvnSg07Cf/GqdkoL2880TerJA12mXe1iFrzn T5o+JsFe1/1Mtp4PjINKMOqHUKct5Q5CjX2pmHBJHZSjIF7fgIogR37bOj9ZKSXW cuT+sZTjMM7a1Poj2YbMCgyiJmqtvsw= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:04 2025 by rpki-client