$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa File: b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa (raw, json) Hash identifier: 2ZXTU3ZHmSTa0WlpFGEOfbjSZ7CgzQkoajXYanCqck4= Subject key identifier: 76:5D:79:66:A8:46:16:B4:CD:B2:C8:8B:AF:28:29:1C:3D:FD:74:BB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E783A255AC932558F935C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 216.71.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:a2:55:ac:93:25:58:f9:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b86c4cc9-ce22-48da-9486-620296b24a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:ce:60:ff:64:7f:65:06:04:5d:2f:ba:41: 40:41:87:0b:78:89:77:48:b1:7f:fb:cd:a3:11:c6: 62:de:ba:9e:d5:38:21:d2:72:eb:1c:98:5f:8c:76: ba:79:af:34:bd:d5:b9:60:ce:a4:cf:dc:bd:93:10: e1:28:de:f7:a4:ab:ce:42:ea:24:e8:5a:67:8d:60: 93:17:7f:c4:39:2b:94:05:73:bf:ff:4c:1a:a0:3b: dc:cb:fb:ae:ee:05:c3:85:12:59:0d:09:5b:cc:1f: 0f:69:96:83:fe:45:cb:fe:77:d8:9e:af:7c:11:98: 7f:a9:3e:52:97:a9:6f:12:00:36:86:d4:27:84:5f: cd:15:0b:d9:1b:9f:44:fd:41:6a:0d:67:56:23:78: 22:76:56:d4:46:0a:02:2a:9a:bf:b2:cb:f9:ba:62: 3f:d7:c7:83:7f:6a:10:f0:97:18:a4:88:b6:8c:18: 0c:83:d9:cb:a2:00:68:42:8b:71:51:6d:a1:8a:ce: cb:d7:27:00:b8:c9:55:63:37:c0:3b:e8:24:54:50: a0:ec:4c:3d:bd:72:be:43:cb:1b:55:80:fb:a7:42: ee:99:de:63:e5:f8:f8:05:ff:67:b2:dc:27:90:9b: b5:81:5d:b5:d1:bf:17:88:d3:7b:fc:e4:b2:47:8d: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:79:66:A8:46:16:B4:CD:B2:C8:8B:AF:28:29:1C:3D:FD:74:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:16:10:f1:c5:1e:76:f1:8f:b5:d5:26:93:72:ca:0b:d6:74: 60:be:69:92:1c:5c:f5:ef:bd:79:8e:9f:2b:d4:b5:7c:f4:8b: e5:d6:a7:6a:e4:c0:a8:b0:d8:01:b5:f1:be:ec:c5:e2:89:d7: 08:f7:5e:c0:26:3b:c0:0b:db:50:8f:8f:ba:97:94:73:b1:84: 46:a8:8a:42:a8:c0:68:0a:fc:d5:c6:56:a1:2c:bd:d6:4a:e7: 5b:0a:a3:c1:30:78:25:b2:31:44:06:cf:62:89:56:0a:2a:ab: 73:5e:03:b0:59:16:a6:29:5b:ac:45:b1:3f:01:ef:dc:3c:00: 7b:d0:4d:21:cf:40:10:39:01:22:4c:df:3b:b4:f4:32:bf:0a: 56:c3:ad:a5:b9:b3:b6:33:f1:d4:4a:32:e2:5a:1a:3d:39:10: f7:8d:01:6c:a6:32:b7:06:af:78:77:8f:7a:fa:c3:09:19:e1: c5:ed:54:35:d1:80:ac:5c:9b:0f:f5:9c:77:8f:c5:0e:af:a2: 6a:86:bd:41:6a:2e:92:86:27:d1:48:99:9c:10:85:52:e2:45: 13:3b:71:fd:1a:b4:b9:ea:c2:96:8f:e7:f5:f5:8b:61:9a:67: d3:61:6a:f9:fc:3f:9d:22:aa:12:12:21:bb:99:1b:2c:f0:26: eb:a2:03:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54OiVayTJVj5NcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Yjg2YzRjYzktY2UyMi00OGRhLTk0ODYtNjIwMjk2YjI0YTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh07OYP9kf2UGBF0vukFAQYcLeIl3SLF/+82j EcZi3rqe1Tgh0nLrHJhfjHa6ea80vdW5YM6kz9y9kxDhKN73pKvOQuok6FpnjWCT F3/EOSuUBXO//0waoDvcy/uu7gXDhRJZDQlbzB8PaZaD/kXL/nfYnq98EZh/qT5S l6lvEgA2htQnhF/NFQvZG59E/UFqDWdWI3gidlbURgoCKpq/ssv5umI/18eDf2oQ 8JcYpIi2jBgMg9nLogBoQotxUW2his7L1ycAuMlVYzfAO+gkVFCg7Ew9vXK+Q8sb VYD7p0Lumd5j5fj4Bf9nstwnkJu1gV210b8XiNN7/OSyR40b+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZdeWaoRha0zbLIi68oKRw9/XS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjNjNzQ4ZjAtZTBiNC0z ZGQ5LTg3MjMtMGZmMWMwMTJjNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYWEPHFHnbxj7XVJpNyygvWdGC+aZIcXPXvvXmOnyvUtXz0i+XWp2rk wKiw2AG18b7sxeKJ1wj3XsAmO8AL21CPj7qXlHOxhEaoikKowGgK/NXGVqEsvdZK 51sKo8EweCWyMUQGz2KJVgoqq3NeA7BZFqYpW6xFsT8B79w8AHvQTSHPQBA5ASJM 3zu09DK/ClbDraW5s7Yz8dRKMuJaGj05EPeNAWymMrcGr3h3j3r6wwkZ4cXtVDXR gKxcmw/1nHePxQ6vomqGvUFqLpKGJ9FImZwQhVLiRRM7cf0atLnqwpaP5/X1i2Ga Z9Nhavn8P50iqhISIbuZGyzwJuuiA/k= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:43 2025 by rpki-client