$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/425098bb-36f7-385b-bbd6-5f541c7388b1.roa File: 425098bb-36f7-385b-bbd6-5f541c7388b1.roa (raw, json) Hash identifier: cn8VLIIEvS9l2AdbbyINTDJ1Ll0OWFA2ntBA8DwZt1c= Subject key identifier: 28:3F:E5:37:6B:AA:1E:6A:6C:44:D6:63:FD:5E:2C:8D:67:91:A3:D8 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E78328E2A69A1D3F78E8E0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/425098bb-36f7-385b-bbd6-5f541c7388b1.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 216.71.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:28:e2:a6:9a:1d:3f:78:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=2ff9ce57-910f-4cf8-b269-34fc2c35ea6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:39:24:4d:e8:8b:c8:f8:d1:ea:3d:76:68: bc:5e:ae:fb:49:8b:a8:ac:4e:50:6f:98:f6:ca:5e: 2b:0e:eb:fd:3d:ab:b5:94:1e:ea:f4:b5:ef:39:04: 8a:03:69:6a:fe:0d:8b:ea:d2:fd:80:27:a9:c0:60: 4c:2d:d9:de:8e:67:02:10:f9:e4:20:74:8e:5c:6e: 72:63:49:78:bb:27:f3:ad:a4:7d:f0:2e:9e:0f:2a: 30:2e:8d:54:9a:fe:a0:d2:52:ea:74:18:45:09:86: 3e:71:d5:64:2c:ce:63:2f:1b:1b:73:f6:b5:52:fa: 7c:c2:cf:6b:cf:94:b3:6a:24:2b:e4:14:ae:f5:14: ff:41:eb:b5:2c:70:a5:6c:b4:f6:b7:92:63:64:4b: 2d:62:36:2e:ed:56:63:55:93:2e:f8:e3:1e:52:f3: 85:e7:ee:c9:10:40:39:d8:b4:5f:4c:80:92:22:07: 14:b4:18:88:2f:42:d0:3d:a0:50:60:83:87:f3:d3: b6:6b:76:82:f3:fc:15:08:47:42:94:4c:e6:ef:fb: a9:d7:b8:89:47:20:1c:22:ac:d8:f6:ab:f5:ce:1b: af:a3:7c:fa:f6:e5:18:79:df:73:99:41:09:a3:e1: d9:8e:c0:ce:22:2b:4b:33:49:5f:9d:b8:a7:ac:20: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3F:E5:37:6B:AA:1E:6A:6C:44:D6:63:FD:5E:2C:8D:67:91:A3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/425098bb-36f7-385b-bbd6-5f541c7388b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a1:ae:e8:e6:7f:1e:8b:df:77:ff:1c:e9:bc:4c:ee:62:eb: a7:8e:68:e1:1a:04:b7:8b:04:d3:3f:d3:cd:d8:e0:8b:fa:fa: 36:06:8e:3e:6d:2f:71:90:88:21:99:2f:2f:fc:32:c1:88:1c: 0e:02:23:ea:24:d3:1a:06:69:cf:ae:8c:72:b9:61:47:e7:54: 75:78:fd:9e:55:ff:53:77:cc:8c:14:f8:91:ce:58:c5:53:61: 5a:2e:89:a2:e0:2f:d0:b7:60:01:d7:97:ee:f4:98:89:fc:68: 41:a7:42:83:06:97:e3:d1:27:23:98:f6:96:52:95:d5:d6:8e: 5b:93:05:8b:a5:59:9b:48:3a:03:b3:10:38:13:ee:96:ee:4d: c0:71:fb:41:12:7c:69:ca:22:23:0f:4e:51:c2:25:28:30:16: a6:e6:25:9c:93:6c:bb:7b:7e:40:7e:79:b6:a4:c8:0d:81:60: e1:1e:46:b8:b7:0c:52:c1:40:63:01:58:42:de:4a:f9:7e:57: b6:1f:17:20:16:3d:b9:1a:d6:09:02:2c:58:ae:37:e2:44:73: 0d:d8:b0:21:a8:a4:7f:c4:56:7c:08:62:a6:5c:aa:ed:ea:da: 8d:d3:54:c4:61:30:ee:15:9b:34:c1:6d:4c:23:fc:27:f1:2b: dd:b3:f7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54Mo4qaaHT946OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MmZmOWNlNTctOTEwZi00Y2Y4LWIyNjktMzRmYzJjMzVlYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbI5JE3oi8j40eo9dmi8Xq77SYuorE5Qb5j2 yl4rDuv9Pau1lB7q9LXvOQSKA2lq/g2L6tL9gCepwGBMLdnejmcCEPnkIHSOXG5y Y0l4uyfzraR98C6eDyowLo1Umv6g0lLqdBhFCYY+cdVkLM5jLxsbc/a1Uvp8ws9r z5SzaiQr5BSu9RT/Qeu1LHClbLT2t5JjZEstYjYu7VZjVZMu+OMeUvOF5+7JEEA5 2LRfTICSIgcUtBiIL0LQPaBQYIOH89O2a3aC8/wVCEdClEzm7/up17iJRyAcIqzY 9qv1zhuvo3z69uUYed9zmUEJo+HZjsDOIitLM0lfnbinrCAZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg/5Tdrqh5qbETWY/1eLI1nkaPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDI1MDk4YmItMzZmNy0z ODViLWJiZDYtNWY1NDFjNzM4OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+hrujmfx6L33f/HOm8TO5i66eOaOEaBLeLBNM/083Y4Iv6+jYGjj5t L3GQiCGZLy/8MsGIHA4CI+ok0xoGac+ujHK5YUfnVHV4/Z5V/1N3zIwU+JHOWMVT YVouiaLgL9C3YAHXl+70mIn8aEGnQoMGl+PRJyOY9pZSldXWjluTBYulWZtIOgOz EDgT7pbuTcBx+0ESfGnKIiMPTlHCJSgwFqbmJZyTbLt7fkB+ebakyA2BYOEeRri3 DFLBQGMBWELeSvl+V7YfFyAWPbka1gkCLFiuN+JEcw3YsCGopH/EVnwIYqZcqu3q 2o3TVMRhMO4VmzTBbUwj/CfxK92z91M= -----END CERTIFICATE-----Generated at Tue Oct 21 02:08:09 2025 by rpki-client