$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa File: 3b38bc24-8d49-3254-ad4f-25f11914f514.roa (raw, json) Hash identifier: Jr543klH7bVmgsNILVQQzwoCWCNuIZfJZS30qjZ9wzc= Subject key identifier: 5C:96:25:3D:DA:8F:72:9C:9D:D3:E7:3A:64:2F:2F:57:25:A7:35:6B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC1471DD936916ACC10C200 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 216.71.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:47:1d:d9:36:91:6a:cc:10:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=70a4c844-a7de-41f0-9b39-dd97c25b0748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:28:7d:15:c0:42:a7:2b:39:bc:72:38:5f: f4:66:6f:fb:1d:d5:e0:82:ba:14:cc:08:4c:7b:f8: 17:33:6f:3e:53:be:2c:e3:ac:fc:31:bc:e5:5e:b5: 4d:5e:cc:8a:97:ed:ac:23:24:b1:dc:df:59:c9:7c: 2b:a1:45:19:2b:cf:84:29:a0:7f:03:52:d8:8e:25: 1a:79:48:c6:52:e2:56:97:3f:6c:d0:b5:3f:f7:3c: 67:83:85:0d:ec:8a:ec:e3:b5:f4:ad:f9:34:71:b7: c5:21:3a:c7:08:e5:52:13:24:ee:08:4b:e9:c0:70: 1c:bf:69:de:5d:57:8e:88:9c:33:82:6d:d4:b7:12: ed:b9:bc:58:13:3f:4f:0a:17:b1:09:75:5c:a7:cd: 39:42:a8:a6:24:5d:34:fc:6f:14:ad:13:1c:3b:cf: c5:0f:e6:48:75:91:dc:af:74:f8:6a:2e:26:5e:65: c5:a3:19:3d:b3:30:51:06:1d:02:4f:ff:ec:71:61: 3c:f7:95:3d:c6:ec:1e:07:aa:39:b8:9a:95:bf:c6: 27:31:49:61:63:aa:5a:36:01:7d:ad:db:b0:bd:7c: 2f:b1:95:9d:a4:86:95:b2:fb:e3:6e:55:f8:28:da: f8:5a:c0:03:cb:68:8d:6c:c2:98:b7:84:21:19:79: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:96:25:3D:DA:8F:72:9C:9D:D3:E7:3A:64:2F:2F:57:25:A7:35:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e1:54:fc:1d:3c:8d:31:28:4d:bf:60:c2:08:b0:29:8a:1b: d8:7c:66:e3:55:74:32:48:fc:38:49:f3:ae:a0:6d:1e:ee:c6: 0a:36:39:e4:38:6d:ba:60:0d:f5:1e:e8:93:02:2e:36:f5:ae: f7:a6:54:28:ae:ec:17:53:c9:d8:a7:bf:33:02:1f:b9:84:52: 66:42:5a:f4:15:c4:7d:76:c4:60:7e:84:98:72:af:49:2c:37: 61:0b:cf:39:78:04:48:f8:a8:9d:36:14:d6:72:76:4a:37:25: 27:f9:a0:e6:ff:07:4e:10:a5:21:71:32:2f:0c:af:ae:ac:dd: a1:9a:b9:12:1f:ac:92:f1:61:ac:e8:0a:d9:9e:b4:e7:db:a8: 76:90:b8:8c:54:37:fc:d2:bc:6a:92:bd:e9:be:3d:87:8f:e6: 48:64:48:97:73:55:c3:57:c4:79:24:32:28:d2:1f:7b:7d:52: 58:a2:6d:60:17:8d:21:43:29:ca:cf:96:09:66:d7:d5:25:00: 89:84:8a:a5:a3:6b:48:f7:29:df:3a:74:6e:3e:00:22:b0:43: 49:b0:3d:d3:a9:ab:0b:d5:e0:c5:8f:ce:65:f7:5e:87:bb:9c: d2:3f:4a:57:1a:9e:2f:7f:b7:33:cb:56:2f:3c:e1:2c:57:2a: 04:c3:76:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUcd2TaRaswQwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzBhNGM4NDQtYTdkZS00MWYwLTliMzktZGQ5N2MyNWIwNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWYofRXAQqcrObxyOF/0Zm/7HdXggroUzAhM e/gXM28+U74s46z8MbzlXrVNXsyKl+2sIySx3N9ZyXwroUUZK8+EKaB/A1LYjiUa eUjGUuJWlz9s0LU/9zxng4UN7Irs47X0rfk0cbfFITrHCOVSEyTuCEvpwHAcv2ne XVeOiJwzgm3UtxLtubxYEz9PChexCXVcp805QqimJF00/G8UrRMcO8/FD+ZIdZHc r3T4ai4mXmXFoxk9szBRBh0CT//scWE895U9xuweB6o5uJqVv8YnMUlhY6paNgF9 rduwvXwvsZWdpIaVsvvjblX4KNr4WsADy2iNbMKYt4QhGXmUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyWJT3aj3KcndPnOmQvL1clpzVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2IzOGJjMjQtOGQ0OS0z MjU0LWFkNGYtMjVmMTE5MTRmNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzhVPwdPI0xKE2/YMIIsCmKG9h8ZuNVdDJI/DhJ866gbR7uxgo2OeQ4 bbpgDfUe6JMCLjb1rvemVCiu7BdTydinvzMCH7mEUmZCWvQVxH12xGB+hJhyr0ks N2ELzzl4BEj4qJ02FNZydko3JSf5oOb/B04QpSFxMi8Mr66s3aGauRIfrJLxYazo CtmetOfbqHaQuIxUN/zSvGqSvem+PYeP5khkSJdzVcNXxHkkMijSH3t9UliibWAX jSFDKcrPlglm19UlAImEiqWja0j3Kd86dG4+ACKwQ0mwPdOpqwvV4MWPzmX3Xoe7 nNI/Slcani9/tzPLVi884SxXKgTDdnk= -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:39 2025 by rpki-client