$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa File: 356617d6-d98a-3c12-9d4a-857c06ded68b.roa (raw, json) Hash identifier: /1txa+bJbGE+IdgopkYuB8o2yFEHbSrlT4TjIfjiqX0= Subject key identifier: 57:4A:1F:E0:28:3D:5E:45:AA:9C:C3:6F:FB:45:8B:F2:61:E2:0C:73 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E783D3AEB7901C9E9B3200 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 216.71.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:d3:ae:b7:90:1c:9e:9b:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=85d1b8c7-5634-46d3-9a78-de6545a4a939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:c8:d8:6e:0c:5b:05:0e:b2:49:41:c9:4d: 3a:58:3d:d0:1d:0b:5f:68:77:5f:64:61:03:71:d5: 5b:39:1b:4c:bb:a0:d5:cb:8c:8f:63:ff:14:0f:6a: 86:19:29:49:d5:95:35:d7:04:e0:c1:ca:14:63:5e: e0:af:01:c0:0b:bb:84:5b:35:b5:fd:b7:33:0a:3a: f0:05:94:a2:23:a3:97:7c:0a:bd:60:67:d3:1e:e5: 88:5c:63:76:0d:51:8f:15:a2:0b:68:0d:58:7c:4c: 85:49:60:33:80:d8:ab:85:b8:83:3a:74:d8:b0:04: 75:a9:ff:41:82:83:65:b7:47:e2:41:fb:a0:7b:22: 63:e2:6a:86:26:14:c5:d5:69:3a:dd:38:b3:a2:19: 27:7b:10:2d:98:fe:6a:c1:6e:98:44:34:7f:fb:e6: d9:12:c1:a0:5b:c7:53:02:6c:6f:24:40:e8:41:73: ed:a3:15:af:d3:83:fd:4e:3c:e6:00:eb:59:1a:ca: 1b:4b:25:b7:21:ab:76:97:fa:ac:fa:13:98:1b:61: 08:33:4e:05:2d:f0:3f:8d:c6:d7:dd:da:ff:63:6a: da:dd:74:15:63:40:47:a1:a6:60:20:e6:d2:c2:d1: f7:5b:0c:50:e4:fc:a0:ba:3e:15:e7:e5:43:66:95: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:1F:E0:28:3D:5E:45:AA:9C:C3:6F:FB:45:8B:F2:61:E2:0C:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:cb:d1:25:49:fe:e1:71:8f:5d:e8:e1:47:03:87:4b:1f:ed: 0c:1e:a2:d5:d2:e3:b4:74:63:ac:5a:f2:79:af:fb:02:d9:43: 5f:38:b4:7b:3e:19:3b:af:7e:43:c7:e8:74:86:a5:9b:6d:a1: d7:30:4c:6d:87:8f:e6:ae:3e:48:31:e1:cf:60:61:4a:ee:f0: de:37:e5:d8:81:31:5f:fe:15:c1:b6:bd:e4:5e:48:12:bf:17: 48:77:8d:e7:12:74:2b:2c:2d:af:54:d2:8f:fd:0e:da:d9:2a: 16:94:30:71:d6:59:80:6b:dd:ba:d5:39:e5:43:42:54:63:f8: 99:95:c9:ec:53:6f:ab:f0:2b:1f:02:4e:20:6b:d8:92:c9:bb: 5d:61:8f:c5:12:fc:89:61:8b:46:48:bc:88:73:3c:d9:94:b8: c2:39:2a:79:cc:c7:44:20:b9:cd:83:41:8f:5f:f5:c3:78:2e: e2:c2:b4:ef:e7:35:d8:70:39:be:ca:ff:21:f2:0c:04:ab:74: ee:b0:d6:ed:0e:11:4e:ad:08:ed:4b:87:b1:46:73:f2:e3:a8: 38:d1:9f:f9:d4:7b:9d:69:2f:a7:ff:0f:de:63:31:dd:55:64: 4f:14:32:05:59:4b:49:bc:a2:71:d8:8f:55:1b:5f:3b:2d:35: 7f:19:26:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54PTrreQHJ6bMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODVkMWI4YzctNTYzNC00NmQzLTlhNzgtZGU2NTQ1YTRhOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRDI2G4MWwUOsklByU06WD3QHQtfaHdfZGED cdVbORtMu6DVy4yPY/8UD2qGGSlJ1ZU11wTgwcoUY17grwHAC7uEWzW1/bczCjrw BZSiI6OXfAq9YGfTHuWIXGN2DVGPFaILaA1YfEyFSWAzgNirhbiDOnTYsAR1qf9B goNlt0fiQfugeyJj4mqGJhTF1Wk63TizohknexAtmP5qwW6YRDR/++bZEsGgW8dT AmxvJEDoQXPtoxWv04P9TjzmAOtZGsobSyW3Iat2l/qs+hOYG2EIM04FLfA/jcbX 3dr/Y2ra3XQVY0BHoaZgIObSwtH3WwxQ5Pyguj4V5+VDZpV1swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdKH+AoPV5FqpzDb/tFi/Jh4gxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzU2NjE3ZDYtZDk4YS0z YzEyLTlkNGEtODU3YzA2ZGVkNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvL0SVJ/uFxj13o4UcDh0sf7QweotXS47R0Y6xa8nmv+wLZQ184tHs+ GTuvfkPH6HSGpZttodcwTG2Hj+auPkgx4c9gYUru8N435diBMV/+FcG2veReSBK/ F0h3jecSdCssLa9U0o/9DtrZKhaUMHHWWYBr3brVOeVDQlRj+JmVyexTb6vwKx8C TiBr2JLJu11hj8US/Ilhi0ZIvIhzPNmUuMI5KnnMx0Qguc2DQY9f9cN4LuLCtO/n NdhwOb7K/yHyDASrdO6w1u0OEU6tCO1Lh7FGc/LjqDjRn/nUe51pL6f/D95jMd1V ZE8UMgVZS0m8onHYj1UbXzstNX8ZJi4= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:36 2025 by rpki-client