$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c29404c3-e9a2-384a-a598-7e10386d91f4.roa File: c29404c3-e9a2-384a-a598-7e10386d91f4.roa (raw, json) Hash identifier: aRWEIjMf/rnEidGn8OcA4ylominHisgwqur74508REk= Subject key identifier: 3D:EB:54:A0:29:52:38:F1:2D:98:32:BF:05:62:53:D5:56:78:9F:EF Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E7838140D811DF309E9F80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c29404c3-e9a2-384a-a598-7e10386d91f4.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 216.71.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:81:40:d8:11:df:30:9e:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=47801887-8176-49c8-bbee-530ad415da4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:5f:74:d8:b4:bb:7d:e9:30:cb:40:cb:4d: 0b:ea:7a:c9:d8:66:fb:e4:eb:e2:67:09:3f:45:17: c2:af:60:81:be:08:04:10:15:1c:96:8d:47:e2:60: f7:31:0b:ca:61:0a:45:7b:e2:61:70:49:c3:aa:9a: a7:7f:49:62:ba:fd:af:ca:34:d4:a0:e7:80:05:12: 31:ba:5e:64:40:d9:fe:3e:ed:0c:4d:8f:1d:61:e6: 22:1e:65:f5:ae:e2:67:2a:f4:fb:84:25:bd:f1:28: ed:82:e3:87:58:2b:b2:b5:4b:22:ab:52:5e:0f:4e: 8c:d5:00:a6:c4:cc:5e:83:5b:02:60:30:c0:9a:67: 27:dd:46:b6:00:f9:51:72:35:6c:6b:f5:15:f4:d5: 3a:fe:71:a8:56:dc:ad:db:ca:f9:c1:a4:72:ba:61: 1a:65:63:48:2b:5c:a4:18:b2:0e:ea:c2:19:7e:fb: 64:c3:a9:2f:9a:86:d5:a2:41:ed:c9:8f:0e:41:77: 24:8b:3d:97:38:b7:0b:80:69:87:61:2b:57:6b:c2: 05:48:d1:7c:a6:e0:77:24:f7:4f:5c:0e:8c:6f:cc: e0:e0:3b:98:35:bc:e1:cc:34:47:c7:e8:4f:1c:90: cd:d3:8d:42:af:d0:e3:5d:a3:da:25:3b:87:63:a5: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EB:54:A0:29:52:38:F1:2D:98:32:BF:05:62:53:D5:56:78:9F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c29404c3-e9a2-384a-a598-7e10386d91f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:77:16:54:7f:08:86:88:87:fd:8a:cc:c3:70:db:19:db:7e: 95:b8:db:8c:c7:37:12:05:2d:63:b8:26:54:2f:a5:26:01:81: 91:06:9c:91:c0:8f:e0:2b:07:41:ed:07:87:49:cc:c6:39:ea: 1e:2c:e1:b5:24:2b:57:97:00:8e:f1:ab:d8:f1:c3:f3:5f:d7: 7b:ca:5e:3a:96:90:e8:65:be:af:d9:99:84:1f:f7:cc:7f:7d: 62:61:1d:d0:30:c5:0f:4f:13:19:ba:7f:05:15:06:5f:17:ad: 33:41:1a:f4:5d:f0:b7:91:c3:7c:47:d5:78:e9:f4:b3:e1:58: 14:d5:8c:27:66:56:43:18:59:e7:c9:09:a3:ee:b0:a6:cd:5c: 9c:16:ba:8a:1b:4c:c3:ab:07:bb:66:f0:61:00:46:d6:0b:41: 1f:75:16:6a:f2:91:bd:a1:42:e2:b1:7c:53:24:21:4f:9c:b4: d2:06:90:e1:65:51:cf:c7:0a:53:8f:1d:f7:5e:14:b3:44:46: 03:e6:2b:90:ed:92:9f:b2:a9:a1:58:cf:8c:f9:fc:54:66:81: f4:74:23:45:ce:25:2c:49:af:f1:be:20:0b:10:dd:cb:c7:50: e7:33:e9:25:56:84:52:fe:6b:55:1d:b9:10:37:da:b4:17:43: 46:e8:a5:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54OBQNgR3zCen4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NDc4MDE4ODctODE3Ni00OWM4LWJiZWUtNTMwYWQ0MTVkYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/lfdNi0u33pMMtAy00L6nrJ2Gb75OviZwk/ RRfCr2CBvggEEBUclo1H4mD3MQvKYQpFe+JhcEnDqpqnf0liuv2vyjTUoOeABRIx ul5kQNn+Pu0MTY8dYeYiHmX1ruJnKvT7hCW98SjtguOHWCuytUsiq1JeD06M1QCm xMxeg1sCYDDAmmcn3Ua2APlRcjVsa/UV9NU6/nGoVtyt28r5waRyumEaZWNIK1yk GLIO6sIZfvtkw6kvmobVokHtyY8OQXckiz2XOLcLgGmHYStXa8IFSNF8puB3JPdP XA6Mb8zg4DuYNbzhzDRHx+hPHJDN041Cr9DjXaPaJTuHY6WvvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3rVKApUjjxLZgyvwViU9VWeJ/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYzI5NDA0YzMtZTlhMi0z ODRhLWE1OTgtN2UxMDM4NmQ5MWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp3FlR/CIaIh/2KzMNw2xnbfpW424zHNxIFLWO4JlQvpSYBgZEGnJHA j+ArB0HtB4dJzMY56h4s4bUkK1eXAI7xq9jxw/Nf13vKXjqWkOhlvq/ZmYQf98x/ fWJhHdAwxQ9PExm6fwUVBl8XrTNBGvRd8LeRw3xH1Xjp9LPhWBTVjCdmVkMYWefJ CaPusKbNXJwWuoobTMOrB7tm8GEARtYLQR91Fmrykb2hQuKxfFMkIU+ctNIGkOFl Uc/HClOPHfdeFLNERgPmK5Dtkp+yqaFYz4z5/FRmgfR0I0XOJSxJr/G+IAsQ3cvH UOcz6SVWhFL+a1UduRA32rQXQ0bopUY= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:33 2025 by rpki-client