$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa File: c5544001-80a2-3d37-a385-da4ad0a51bab.roa (raw, json) Hash identifier: VBXhm8blG7i/nfbAODH6TYqxVF3EzmpvOZ+L4jvCzDY= Subject key identifier: 1E:A1:B6:9C:C5:24:45:C4:DF:82:BB:F3:E8:74:2B:39:76:2B:FC:2E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1DB29160B8A5319B8180 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 216.71.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1d:b2:91:60:b8:a5:31:9b:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=0b2854c7-442e-49de-b944-ed7678b35a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:ef:a4:b7:f0:22:f9:7d:c1:ed:21:9d:5c: 72:cb:20:4f:5e:8b:64:83:4a:a7:55:bf:5f:a5:41: 56:e0:6c:f7:fe:c6:18:97:b7:ad:67:10:22:65:fc: 78:73:bb:d0:92:e4:5f:d8:24:7a:d4:84:6b:de:50: 70:f4:c6:6d:54:43:d9:f6:60:9c:e8:f6:cd:c7:1a: 57:96:5c:8f:8e:d5:54:ea:5d:19:4d:49:26:8f:11: 33:d2:5c:cd:19:ac:e0:41:12:aa:0c:1e:e3:bb:ce: 9c:e0:94:ef:80:70:53:66:e9:0c:59:9f:93:ff:d5: 36:cb:8b:20:f3:79:c8:81:11:05:e8:a2:92:9e:a3: 76:0a:0b:9b:a9:79:b2:b9:76:f6:8b:72:05:0f:87: b4:17:92:7f:1d:b7:5c:55:c4:a1:0a:8d:a8:5f:17: b5:e3:37:09:1b:71:b6:a5:86:71:7c:28:7f:51:da: c4:b0:cb:e4:0e:39:16:9b:89:1a:84:a1:e1:af:6b: 8b:8f:e0:f5:8f:6f:d9:a1:84:9e:b5:eb:38:51:fd: 3c:fe:f5:07:4c:a6:3a:a7:c8:73:52:49:c8:31:4d: 5e:08:50:f2:39:54:5e:99:c2:f9:f8:55:63:a9:2e: 28:4a:95:d7:5a:c4:4d:f1:dc:1b:2f:d3:6a:62:ee: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:B6:9C:C5:24:45:C4:DF:82:BB:F3:E8:74:2B:39:76:2B:FC:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:24:a8:a5:b3:48:78:9d:10:b5:d9:57:0f:ee:a6:6d:50:1f: c7:33:75:e3:d1:8b:11:eb:74:8b:80:36:57:2a:10:15:db:03: 6e:8e:12:76:cb:7f:21:72:25:c3:3a:aa:3b:ec:f0:e4:a4:2a: 72:14:2e:3c:52:41:8c:ab:aa:64:73:e7:94:81:27:8e:46:95: ec:d5:aa:36:e5:25:cf:1d:61:19:6b:59:ab:01:d6:65:06:08: 5e:6a:5d:28:50:aa:72:9d:b4:40:da:e6:f5:81:3d:e7:d4:26: 04:ec:bc:a1:62:f3:8f:44:d6:94:e8:3d:f3:4e:7e:65:83:7b: f6:c0:47:65:83:46:55:15:c2:93:1a:cf:a0:de:eb:54:8f:1b: 12:5d:d1:f3:2d:21:0d:00:44:44:97:f8:69:37:d5:e6:b3:b4: 72:2d:ba:b3:e1:00:9f:b3:eb:50:29:fd:72:32:99:7c:99:c1: fb:fa:76:cc:98:93:c0:40:55:15:77:ea:77:ab:bf:99:37:9b: 30:3a:43:c3:c8:67:6b:8a:5e:31:7a:7b:d3:bd:ca:da:44:0f: 39:07:41:71:1a:c4:7a:db:31:91:1a:46:77:95:57:43:e3:f2: 6e:43:4d:fc:33:7e:b3:b6:09:23:85:64:28:cf:7b:89:db:05: eb:36:bd:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx2ykWC4pTGbgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MGIyODU0YzctNDQyZS00OWRlLWI5NDQtZWQ3Njc4YjM1YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/vvpLfwIvl9we0hnVxyyyBPXotkg0qnVb9f pUFW4Gz3/sYYl7etZxAiZfx4c7vQkuRf2CR61IRr3lBw9MZtVEPZ9mCc6PbNxxpX llyPjtVU6l0ZTUkmjxEz0lzNGazgQRKqDB7ju86c4JTvgHBTZukMWZ+T/9U2y4sg 83nIgREF6KKSnqN2CgubqXmyuXb2i3IFD4e0F5J/HbdcVcShCo2oXxe14zcJG3G2 pYZxfCh/UdrEsMvkDjkWm4kahKHhr2uLj+D1j2/ZoYSetes4Uf08/vUHTKY6p8hz UknIMU1eCFDyOVRemcL5+FVjqS4oSpXXWsRN8dwbL9NqYu5eHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6htpzFJEXE34K78+h0Kzl2K/wuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYzU1NDQwMDEtODBhMi0z ZDM3LWEzODUtZGE0YWQwYTUxYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUkqKWzSHidELXZVw/upm1QH8czdePRixHrdIuANlcqEBXbA26OEnbL fyFyJcM6qjvs8OSkKnIULjxSQYyrqmRz55SBJ45GlezVqjblJc8dYRlrWasB1mUG CF5qXShQqnKdtEDa5vWBPefUJgTsvKFi849E1pToPfNOfmWDe/bAR2WDRlUVwpMa z6De61SPGxJd0fMtIQ0ARESX+Gk31eaztHIturPhAJ+z61Ap/XIymXyZwfv6dsyY k8BAVRV36nerv5k3mzA6Q8PIZ2uKXjF6e9O9ytpEDzkHQXEaxHrbMZEaRneVV0Pj 8m5DTfwzfrO2CSOFZCjPe4nbBes2vdA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:24:41 2025 by rpki-client