$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa File: d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa (raw, json) Hash identifier: 2SFcUSr4Uj2tlv7+by7tFaVOjtM1vphfjkX83TEClg4= Subject key identifier: B8:0C:D7:0B:5B:D8:69:00:CB:03:49:21:E1:7D:43:3A:EB:86:25:E9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC147315BA1C8D36F6D9A80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 216.71.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:47:31:5b:a1:c8:d3:6f:6d:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=36397cdb-fb16-4527-9735-7a21a0fb4cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:53:16:f7:4e:de:d2:39:92:77:c9:c9:5b: 9a:8a:33:d6:ea:4d:eb:2b:4c:c3:91:ba:c5:92:15: c7:70:b1:ab:3a:99:2c:93:35:c1:fa:4b:22:79:f7: 16:74:f1:59:98:a3:d6:c1:ec:c3:43:17:95:ce:67: 2b:06:3f:14:8b:57:8d:2d:d9:13:c5:d7:d8:4f:f7: 92:cd:27:2b:6b:24:ac:22:49:b5:30:7a:36:4d:1f: c9:42:20:10:33:ef:81:65:d3:a9:6e:88:df:8a:67: 02:49:06:64:a7:d3:aa:0e:55:e6:3c:48:9d:75:f3: 3f:0f:9e:88:78:6b:89:3d:ff:ab:a4:31:f7:2d:a7: 22:27:3d:58:dd:2c:11:1c:4f:1c:17:f7:51:93:9e: 7a:83:2a:57:8a:d0:17:35:4c:57:92:72:20:a0:42: e9:d5:9d:05:9d:b7:5c:fa:6b:f3:77:07:6f:56:69: 83:60:3e:52:ab:97:a3:cc:c6:46:90:17:a7:22:24: 02:49:2d:32:bc:70:e2:5e:1d:4d:05:5a:7e:38:7e: 9e:10:85:ea:2b:19:26:52:c5:f6:35:ea:24:ad:30: 7a:b8:17:3c:b3:6b:d2:2b:75:a3:76:91:cc:bf:5a: 4c:7f:e0:79:f6:5c:70:00:84:1c:56:43:9e:61:ff: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0C:D7:0B:5B:D8:69:00:CB:03:49:21:E1:7D:43:3A:EB:86:25:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c5:13:bd:1a:41:e3:2c:07:94:0a:8e:60:db:30:04:6c:d9: b9:a7:f3:4b:a2:86:e2:68:f9:86:52:e7:39:2f:89:b0:9d:0b: 3e:b8:d3:e1:7b:ba:a9:af:28:31:7a:4a:3b:04:cd:f9:f9:8a: 7c:fd:99:f9:19:79:c8:de:11:47:1d:1d:bd:93:ca:fe:59:41: 1d:78:a7:36:2a:9d:ee:a4:e5:f6:93:a7:df:cd:46:bf:8b:28: 81:ea:1b:e3:d3:81:47:80:be:31:9e:bf:d9:72:98:1d:9d:f7: dd:23:68:d4:c4:58:82:25:45:18:c0:cd:e3:5e:c0:1e:3d:5b: 9c:e2:c1:ac:e9:b0:12:80:4a:83:3f:f8:59:34:88:3d:57:ef: e2:63:d6:7d:b3:a2:e2:50:3e:16:42:ec:cc:d6:6d:e1:d0:51: ae:1e:08:fe:bd:ef:8e:47:bf:15:44:e3:f4:3a:0b:fc:74:a9: 46:66:37:0b:65:46:ad:d8:8c:8b:51:a3:11:4c:ec:1a:8d:73: 4d:42:42:62:42:98:ed:60:d7:26:6d:40:d0:89:5a:99:8e:cc: d1:e7:d2:89:56:f3:c1:b6:a1:7b:d0:3d:19:d4:be:7d:bf:0e: 2e:f1:f3:0c:c4:4f:91:d9:79:19:4c:e4:0b:d9:54:51:33:a0: b4:1f:a8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUcxW6HI029tmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzYzOTdjZGItZmIxNi00NTI3LTk3MzUtN2EyMWEwZmI0Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvlTFvdO3tI5knfJyVuaijPW6k3rK0zDkbrF khXHcLGrOpkskzXB+ksiefcWdPFZmKPWwezDQxeVzmcrBj8Ui1eNLdkTxdfYT/eS zScraySsIkm1MHo2TR/JQiAQM++BZdOpbojfimcCSQZkp9OqDlXmPEiddfM/D56I eGuJPf+rpDH3LaciJz1Y3SwRHE8cF/dRk556gypXitAXNUxXknIgoELp1Z0Fnbdc +mvzdwdvVmmDYD5Sq5ejzMZGkBenIiQCSS0yvHDiXh1NBVp+OH6eEIXqKxkmUsX2 NeokrTB6uBc8s2vSK3WjdpHMv1pMf+B59lxwAIQcVkOeYf/NLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgM1wtb2GkAywNJIeF9QzrrhiXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDA5Y2ZkYmQtYmI2YS0z MWEyLTkzYTUtODkwZGI5YWExZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3FE70aQeMsB5QKjmDbMARs2bmn80uihuJo+YZS5zkvibCdCz640+F7 uqmvKDF6SjsEzfn5inz9mfkZecjeEUcdHb2Tyv5ZQR14pzYqne6k5faTp9/NRr+L KIHqG+PTgUeAvjGev9lymB2d990jaNTEWIIlRRjAzeNewB49W5ziwazpsBKASoM/ +Fk0iD1X7+Jj1n2zouJQPhZC7MzWbeHQUa4eCP69745HvxVE4/Q6C/x0qUZmNwtl Rq3YjItRoxFM7BqNc01CQmJCmO1g1yZtQNCJWpmOzNHn0olW88G2oXvQPRnUvn2/ Di7x8wzET5HZeRlM5AvZVFEzoLQfqDs= -----END CERTIFICATE-----Generated at Sun Aug 24 04:20:31 2025 by rpki-client