$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa File: 3842dcc3-b68c-317f-a314-9bd4be8788b0.roa (raw, json) Hash identifier: N4Jvx0ufJOLgnngZOsYR3CXL7z3SLCXYEW2RWcdsuJM= Subject key identifier: 72:29:7A:6B:AE:CE:DF:CA:EB:04:0E:9F:31:E3:75:35:0F:9F:A8:A4 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849C4D4C8376241191C1BF45740 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16417 IP address blocks: 216.71.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c8:37:62:41:19:1c:1b:f4:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=62359624-f7de-4519-8913-45baa5e0c24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:bf:8d:19:07:1a:5a:0a:7c:e6:9c:10:b8: c5:d9:3d:8e:15:f6:9b:38:6b:21:10:20:a6:3a:ec: 21:d7:19:3f:2a:a0:5a:1c:18:9a:78:d6:20:15:7e: 47:d1:67:08:11:3a:a2:d3:3d:dc:6d:75:20:53:93: 79:10:e3:a8:32:aa:11:7f:82:d3:30:4d:08:38:15: 84:d0:6f:19:08:52:8d:a5:80:ed:bb:40:29:5d:3d: d4:10:4c:79:9e:ab:8e:3d:ff:e7:0e:ec:c1:e6:2c: 02:7d:06:a4:2f:a3:16:35:9d:4e:6d:1c:a0:22:b3: 70:5e:ea:d9:f9:58:1f:3a:87:36:b4:9b:86:3c:7d: e3:a7:35:a6:70:b3:6c:98:f8:08:43:80:ea:0a:e6: e7:60:06:9e:e8:b9:c0:a6:2d:30:ab:cb:c3:e9:c9: cd:fe:57:3f:b8:c9:2c:4b:42:92:ed:e7:74:af:c8: 87:99:15:96:87:fe:76:b5:1e:85:89:bc:10:f6:a5: 3e:d6:73:38:b6:32:76:d6:f7:b2:77:f7:2f:53:00: bc:cb:db:62:86:bd:e4:c5:02:d2:62:f4:3f:9c:37: 4c:af:57:1c:f4:76:66:2f:13:ac:e4:c2:49:61:5c: 1e:65:ed:1d:a0:e1:b9:bd:54:61:1f:c8:1f:c5:2a: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:7A:6B:AE:CE:DF:CA:EB:04:0E:9F:31:E3:75:35:0F:9F:A8:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ba:82:6a:8a:04:1f:bb:8e:e3:61:b4:60:4e:2d:09:4c:a3: c0:87:57:08:cd:c8:2f:8d:57:b6:a2:b7:38:8d:92:7b:eb:7c: 4f:57:80:49:93:d0:51:56:cb:ad:e1:f9:6f:f6:41:de:1b:08: 15:0c:50:66:38:e8:3a:de:62:8c:be:5c:cb:96:ec:07:46:90: 84:3c:74:e1:c1:47:b1:e5:77:81:e2:21:42:45:ee:d5:d7:a6: cd:ee:b7:88:63:cd:19:62:51:45:e5:a6:51:d8:ed:81:1b:d8: 9c:a4:c9:df:42:6e:22:d0:8f:fe:71:c3:13:86:22:bc:e7:41: e8:d7:09:86:80:bf:65:ff:0b:f0:64:1b:7d:e7:8c:68:5a:0d: 30:b7:2f:ee:8a:e3:b5:4f:69:ec:86:c4:71:3f:31:7f:d7:fe: 9f:54:99:69:24:8c:4e:9c:49:e3:47:83:a6:9c:77:b3:4b:83: bd:7f:70:eb:e6:46:29:67:e7:43:52:ba:32:32:ed:c9:13:c6: 97:ca:10:95:c1:05:cb:98:11:24:0c:a3:ec:4b:dc:71:8e:4a: bf:5e:c0:16:a6:86:4e:d5:5d:26:68:a4:2a:96:63:36:ca:f3: 8e:e0:38:82:0a:77:cd:75:fd:94:85:43:6b:0d:ac:f9:4c:48: 82:f3:d2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1Mg3YkEZHBv0V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NjIzNTk2MjQtZjdkZS00NTE5LTg5MTMtNDViYWE1ZTBjMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLG/jRkHGloKfOacELjF2T2OFfabOGshECCm Ouwh1xk/KqBaHBiaeNYgFX5H0WcIETqi0z3cbXUgU5N5EOOoMqoRf4LTME0IOBWE 0G8ZCFKNpYDtu0ApXT3UEEx5nquOPf/nDuzB5iwCfQakL6MWNZ1ObRygIrNwXurZ +VgfOoc2tJuGPH3jpzWmcLNsmPgIQ4DqCubnYAae6LnApi0wq8vD6cnN/lc/uMks S0KS7ed0r8iHmRWWh/52tR6FibwQ9qU+1nM4tjJ21veyd/cvUwC8y9tihr3kxQLS YvQ/nDdMr1cc9HZmLxOs5MJJYVweZe0doOG5vVRhH8gfxSqFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIpemuuzt/K6wQOnzHjdTUPn6ikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzg0MmRjYzMtYjY4Yy0z MTdmLWEzMTQtOWJkNGJlODc4OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC6gmqKBB+7juNhtGBOLQlMo8CHVwjNyC+NV7aitziNknvrfE9XgEmT 0FFWy63h+W/2Qd4bCBUMUGY46DreYoy+XMuW7AdGkIQ8dOHBR7Hld4HiIUJF7tXX ps3ut4hjzRliUUXlplHY7YEb2Jykyd9CbiLQj/5xwxOGIrznQejXCYaAv2X/C/Bk G33njGhaDTC3L+6K47VPaeyGxHE/MX/X/p9UmWkkjE6cSeNHg6acd7NLg71/cOvm Riln50NSujIy7ckTxpfKEJXBBcuYESQMo+xL3HGOSr9ewBamhk7VXSZopCqWYzbK 847gOIIKd811/ZSFQ2sNrPlMSILz0tI= -----END CERTIFICATE-----Generated at Mon Jun 30 07:18:21 2025 by rpki-client