$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa File: 7c9c0f53-d891-3144-bfee-1bcb12654926.roa (raw, json) Hash identifier: kdt9bTHMVFTtRbdMG5KwxSYA2x64QqnwCfvO3yLtWjY= Subject key identifier: 11:75:DE:E0:5C:D1:BB:B0:1F:39:59:7B:E8:67:3A:E5:D5:2F:29:AB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E783B06970384B23D6D3A0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 216.71.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:b0:69:70:38:4b:23:d6:d3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6ca8942b-c0cf-47d4-b899-a92e4617cecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:c3:39:19:a3:54:c6:dc:a5:9b:6d:c8:eb: 9d:bb:1d:79:c5:51:18:4b:2d:03:aa:8d:6d:9c:33: 99:5a:50:b8:7c:68:db:63:16:89:ea:7b:d8:6c:5e: 7d:ab:e7:01:ca:b1:87:c5:fd:c0:c2:8a:0f:08:7d: a3:db:19:df:cd:fa:b7:1b:fc:34:31:dd:03:7c:da: 85:52:16:29:12:8d:f3:72:a1:30:0f:d6:33:f9:26: a0:45:1c:f2:cb:38:fe:ec:cf:66:f4:b9:7e:97:ef: 26:52:57:01:8f:d7:ee:5b:20:ba:5c:1c:a2:83:d5: 96:54:a0:44:73:bc:3b:4e:47:34:c0:68:d2:37:a4: 5a:cd:14:7a:59:5b:41:d3:0c:16:df:0c:69:aa:b1: 3b:23:9a:e5:80:06:ef:91:ac:06:cd:81:3c:ce:52: 63:50:e5:ff:52:66:64:9e:8a:5c:c8:34:30:88:0f: 0d:b6:b4:2d:2b:4f:e7:b0:af:a6:68:42:3e:31:a9: d9:7f:89:12:ba:1e:ea:19:59:53:82:bb:56:60:85: 60:b7:69:8b:c2:77:16:83:fb:cd:63:7f:61:03:af: c0:7c:1b:0b:91:9f:09:4e:b1:0f:a0:14:91:8b:be: 21:4f:83:e4:a6:12:ee:ea:ab:33:85:d4:e2:50:94: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:75:DE:E0:5C:D1:BB:B0:1F:39:59:7B:E8:67:3A:E5:D5:2F:29:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:97:76:0b:2e:86:3f:04:d2:12:ab:36:ef:b1:94:54:de:a2: 8a:85:f1:91:c2:ca:53:eb:a0:b3:59:bc:46:9e:e4:f6:52:7d: 9c:78:a1:9e:a3:c7:4c:b5:16:0d:2c:0f:5d:d6:ed:dd:36:52: 66:33:9b:f5:9f:9d:a4:fd:c5:c7:3f:5a:ab:11:9a:70:c9:ff: 9b:d5:dc:52:3c:d0:5d:80:b3:ba:f4:79:ba:d8:ee:c9:95:a1: 5e:4d:c3:f0:55:f4:dd:8b:d9:1d:c4:51:55:e0:60:3a:48:05: 6e:d0:e6:17:f0:66:b5:c5:46:51:b8:72:55:b0:2a:30:61:d6: 67:c1:b1:71:4a:22:d5:88:f1:d0:8b:ad:e7:7f:c8:43:68:eb: 1b:c6:a2:36:09:d7:ba:ca:2a:09:bd:2a:8f:1f:1b:cc:90:fd: ae:15:c3:9c:7a:6a:59:53:29:91:ca:da:0e:2b:64:0e:30:d2: 36:e6:d1:68:8b:7f:a7:90:fd:9a:12:eb:a2:80:dc:63:41:de: 72:f4:65:17:d3:3f:b1:1e:cb:ca:9d:3d:bf:3b:d0:31:82:e6: b7:aa:78:33:60:3f:ce:f6:d2:75:72:d7:b1:51:74:aa:da:5c: 0f:18:6a:2b:ee:4e:92:05:28:59:ac:ee:59:2a:6d:55:ec:7b: 61:69:b1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54OwaXA4SyPW06AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NmNhODk0MmItYzBjZi00N2Q0LWI4OTktYTkyZTQ2MTdjZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPHDORmjVMbcpZttyOudux15xVEYSy0Dqo1t nDOZWlC4fGjbYxaJ6nvYbF59q+cByrGHxf3AwooPCH2j2xnfzfq3G/w0Md0DfNqF UhYpEo3zcqEwD9Yz+SagRRzyyzj+7M9m9Ll+l+8mUlcBj9fuWyC6XByig9WWVKBE c7w7Tkc0wGjSN6RazRR6WVtB0wwW3wxpqrE7I5rlgAbvkawGzYE8zlJjUOX/UmZk nopcyDQwiA8NtrQtK0/nsK+maEI+ManZf4kSuh7qGVlTgrtWYIVgt2mLwncWg/vN Y39hA6/AfBsLkZ8JTrEPoBSRi74hT4PkphLu6qszhdTiUJRHlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF13uBc0buwHzlZe+hnOuXVLymrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2M5YzBmNTMtZDg5MS0z MTQ0LWJmZWUtMWJjYjEyNjU0OTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuXdgsuhj8E0hKrNu+xlFTeooqF8ZHCylProLNZvEae5PZSfZx4oZ6j x0y1Fg0sD13W7d02UmYzm/WfnaT9xcc/WqsRmnDJ/5vV3FI80F2As7r0ebrY7smV oV5Nw/BV9N2L2R3EUVXgYDpIBW7Q5hfwZrXFRlG4clWwKjBh1mfBsXFKItWI8dCL red/yENo6xvGojYJ17rKKgm9Ko8fG8yQ/a4Vw5x6allTKZHK2g4rZA4w0jbm0WiL f6eQ/ZoS66KA3GNB3nL0ZRfTP7Eey8qdPb870DGC5reqeDNgP8720nVy17FRdKra XA8YaivuTpIFKFms7lkqbVXse2FpsWA= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:09 2025 by rpki-client