$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/629734fc-8070-3d45-9d2e-371f45d21f12.roa File: 629734fc-8070-3d45-9d2e-371f45d21f12.roa (raw, json) Hash identifier: qmevmhk+oLCiDDP2fTUojTHdV0RS0XNheCgfD3L2EjA= Subject key identifier: D3:BB:FE:20:40:1F:F4:21:4F:E2:57:E4:4E:32:F5:E9:49:90:E5:58 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC134603E1C0103E45DAA00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/629734fc-8070-3d45-9d2e-371f45d21f12.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 216.71.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:34:60:3e:1c:01:03:e4:5d:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9dfc0d46-9fe2-4196-82b1-97d77a2e49a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:9f:cb:08:9a:0b:ba:eb:e7:7b:b8:7e:54: 52:14:22:e3:b2:eb:28:8d:73:41:a6:36:8d:99:36: fc:aa:2f:f7:9c:2d:0a:aa:c0:26:e0:d8:c2:a9:fa: d1:37:72:b7:ac:d6:6d:c9:ae:be:68:19:5c:a8:fc: 4a:4f:12:91:1f:b5:78:50:98:96:1f:45:ab:4c:39: 84:5a:11:b6:a9:36:95:27:0d:45:1f:2e:c3:42:e9: 7d:9f:b0:c2:76:60:42:43:f7:11:43:9b:2f:e8:09: b5:30:72:22:5f:90:cd:28:c4:85:e9:56:89:36:00: cf:be:cd:a8:59:82:4c:58:c4:20:11:c3:47:d4:61: 85:1f:1d:4d:62:26:e8:fe:29:35:60:b5:fd:05:de: 1b:42:c5:ca:f8:e5:6e:1d:6b:5b:15:89:10:55:53: a6:ff:de:18:bd:59:d0:36:e4:f2:bd:c3:e7:72:42: 14:4c:57:39:9e:93:63:04:df:bd:35:96:f9:65:70: a2:ab:00:5b:54:b9:b6:ae:3d:52:c3:d2:d3:92:98: 8a:53:02:24:94:d7:3b:5b:4a:ee:c2:70:e2:d9:cd: a0:0c:da:79:a9:ad:db:d5:94:1a:b9:40:59:c3:54: cc:71:36:73:84:71:06:0b:f9:6a:36:26:d4:0d:53: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BB:FE:20:40:1F:F4:21:4F:E2:57:E4:4E:32:F5:E9:49:90:E5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/629734fc-8070-3d45-9d2e-371f45d21f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:40:73:64:73:d1:36:27:10:02:79:07:3d:5d:3e:4f:46:7e: e7:cf:2c:2d:e9:b9:aa:f5:9e:b6:96:c5:41:21:1e:ae:d3:6a: ca:2a:22:8d:74:b8:50:be:51:1a:f1:e3:cc:12:45:67:0d:77: 51:5e:d1:4c:d2:5f:f7:02:9c:8b:4e:b1:48:aa:d9:02:4a:e6: 66:fb:c7:a2:4a:56:06:f4:63:34:71:f6:d8:45:87:f9:02:99: 9a:af:35:9c:65:06:48:f2:be:61:c6:38:1b:56:3d:06:2b:d6: 97:42:39:50:e8:7b:b4:de:e1:0e:47:52:c2:95:54:ee:1b:22: 60:b1:a3:8b:8f:a7:68:aa:60:b3:2e:d1:99:2e:33:8f:b4:61: a9:50:ec:29:e1:7b:47:70:82:eb:0f:25:6c:29:c0:6c:99:71: 82:61:ba:82:cd:97:c0:87:9a:47:c3:1c:a5:1c:e3:81:cc:25: a6:f5:56:37:b7:00:82:90:a9:05:cf:a1:b9:dd:1a:28:eb:9e: 4a:9b:a6:37:0e:25:0d:a1:97:95:91:bb:e4:e6:27:1f:35:86: 92:4c:cf:55:93:8f:74:a9:93:4b:35:9f:df:36:3d:8d:6c:8c: 20:e6:71:df:97:d6:06:ba:51:1f:db:df:15:8b:ec:91:69:b2: a0:49:51:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTRgPhwBA+RdqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWRmYzBkNDYtOWZlMi00MTk2LTgyYjEtOTdkNzdhMmU0OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO+fywiaC7rr53u4flRSFCLjsusojXNBpjaN mTb8qi/3nC0KqsAm4NjCqfrRN3K3rNZtya6+aBlcqPxKTxKRH7V4UJiWH0WrTDmE WhG2qTaVJw1FHy7DQul9n7DCdmBCQ/cRQ5sv6Am1MHIiX5DNKMSF6VaJNgDPvs2o WYJMWMQgEcNH1GGFHx1NYibo/ik1YLX9Bd4bQsXK+OVuHWtbFYkQVVOm/94YvVnQ NuTyvcPnckIUTFc5npNjBN+9NZb5ZXCiqwBbVLm2rj1Sw9LTkpiKUwIklNc7W0ru wnDi2c2gDNp5qa3b1ZQauUBZw1TMcTZzhHEGC/lqNibUDVPjKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO7/iBAH/QhT+JX5E4y9elJkOVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNjI5NzM0ZmMtODA3MC0z ZDQ1LTlkMmUtMzcxZjQ1ZDIxZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFAc2Rz0TYnEAJ5Bz1dPk9GfufPLC3puar1nraWxUEhHq7TasoqIo10 uFC+URrx48wSRWcNd1Fe0UzSX/cCnItOsUiq2QJK5mb7x6JKVgb0YzRx9thFh/kC mZqvNZxlBkjyvmHGOBtWPQYr1pdCOVDoe7Te4Q5HUsKVVO4bImCxo4uPp2iqYLMu 0ZkuM4+0YalQ7Cnhe0dwgusPJWwpwGyZcYJhuoLNl8CHmkfDHKUc44HMJab1Vje3 AIKQqQXPobndGijrnkqbpjcOJQ2hl5WRu+TmJx81hpJMz1WTj3Spk0s1n982PY1s jCDmcd+X1ga6UR/b3xWL7JFpsqBJUX4= -----END CERTIFICATE-----Generated at Sun Aug 24 04:20:34 2025 by rpki-client