$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa File: d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa (raw, json) Hash identifier: 3U4cUie2nJ9W2XgDg2Do7nKhOShlhUfQhlu73o1MnA4= Subject key identifier: 2C:1D:54:C8:31:8E:39:E0:B0:0A:85:DE:1B:BE:34:CB:89:FB:CC:3F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E7839297EDF100F3FFD360 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 216.71.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:92:97:ed:f1:00:f3:ff:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=0435adad-b169-4067-b0de-12f9083d93b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:46:51:dd:85:9e:72:4d:fb:e4:95:f6:5c:1d: b1:3e:a4:fc:8f:9b:cc:ff:ba:a8:d2:e3:a4:87:c1: 21:42:54:e6:70:e1:83:eb:60:b9:a2:ad:0f:b2:ea: 5f:bd:02:f9:1a:f1:cf:20:a7:72:8a:03:82:55:a9: c6:c3:fa:35:87:2f:ff:b4:d9:e1:63:4c:b1:c3:10: d2:98:3f:e4:17:a9:85:54:2b:0f:41:ff:6d:51:f6: d1:ad:c2:86:7f:db:cc:96:61:2e:7f:47:81:11:cc: a5:3e:20:d2:ca:01:05:c9:f8:6a:86:c5:a9:0a:c6: 34:56:39:99:95:10:23:57:86:03:cf:f9:94:d6:86: 98:97:76:c7:ce:b1:80:52:0b:76:3a:6a:f7:89:81: db:08:06:61:9d:5f:7d:c1:f4:8c:19:94:80:9b:31: cc:2f:6e:47:5c:38:39:c6:be:db:64:97:13:36:e6: f0:e3:8e:f2:e1:47:b8:10:eb:1f:fb:42:6a:34:1f: c4:ea:13:04:f7:c1:62:57:f0:e2:2b:58:bc:33:50: 00:52:de:74:ce:ec:63:51:81:31:93:e1:e4:2b:a2: cd:20:42:7f:74:4f:3d:aa:0f:90:82:63:2b:4c:e0: 15:86:82:be:59:21:46:c2:e3:e0:0f:6f:60:27:15: 83:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:54:C8:31:8E:39:E0:B0:0A:85:DE:1B:BE:34:CB:89:FB:CC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c6:97:4d:46:1e:16:30:a3:60:a8:b5:5d:7d:2e:2e:eb:36: 56:76:aa:9d:66:87:b1:f4:55:d1:d4:9c:b3:b0:09:1a:74:9a: cf:72:bb:c1:4a:e0:98:08:62:e0:b2:1b:ea:7c:aa:9f:4d:43: 65:8f:04:90:2d:e8:fe:9f:e2:72:b8:e4:fd:d3:5f:c7:e2:7f: cf:0a:2c:2f:7a:5e:a1:1d:58:1b:4e:b2:18:ad:dc:97:4b:2a: 0a:38:3c:00:3f:39:4d:23:9f:4b:06:df:9f:7f:9e:cd:3b:09: d8:a4:4e:80:11:99:47:62:27:b9:21:1d:83:b2:8a:ac:cf:ea: c3:e9:38:0a:f5:1e:27:ff:ae:33:e0:43:c0:7b:14:3e:b5:6d: 90:c8:29:54:4e:3e:0e:54:fb:f3:d8:e8:1b:83:a2:7e:e4:29: 82:b9:1d:ba:73:eb:e1:8f:ce:88:e3:a1:65:5d:ad:0e:d6:79: ff:f2:62:53:0a:91:ec:6c:35:ce:1c:8f:46:ea:43:4b:6e:fb: b8:a2:5f:74:d6:43:dc:5e:18:f5:ea:f4:7b:fe:9b:b1:b8:8a: 41:43:73:81:d6:ba:5e:a6:b9:e8:53:69:3b:2f:95:7f:1b:e4: 3c:98:4d:ac:a6:57:51:27:47:33:90:fc:f8:30:e8:08:ac:93: 6f:c4:98:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54OSl+3xAPP/02AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDQzNWFkYWQtYjE2OS00MDY3LWIwZGUtMTJmOTA4M2Q5M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/UZR3YWeck375JX2XB2xPqT8j5vM/7qo0uOk h8EhQlTmcOGD62C5oq0PsupfvQL5GvHPIKdyigOCVanGw/o1hy//tNnhY0yxwxDS mD/kF6mFVCsPQf9tUfbRrcKGf9vMlmEuf0eBEcylPiDSygEFyfhqhsWpCsY0VjmZ lRAjV4YDz/mU1oaYl3bHzrGAUgt2Omr3iYHbCAZhnV99wfSMGZSAmzHML25HXDg5 xr7bZJcTNubw447y4Ue4EOsf+0JqNB/E6hME98FiV/DiK1i8M1AAUt50zuxjUYEx k+HkK6LNIEJ/dE89qg+QgmMrTOAVhoK+WSFGwuPgD29gJxWDUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwdVMgxjjngsAqF3hu+NMuJ+8w/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDBmNGUxNGYtNjFiOC0z OTliLWIzMDEtZGQwMDNjZjBkYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITGl01GHhYwo2CotV19Li7rNlZ2qp1mh7H0VdHUnLOwCRp0ms9yu8FK 4JgIYuCyG+p8qp9NQ2WPBJAt6P6f4nK45P3TX8fif88KLC96XqEdWBtOshit3JdL Kgo4PAA/OU0jn0sG359/ns07CdikToARmUdiJ7khHYOyiqzP6sPpOAr1Hif/rjPg Q8B7FD61bZDIKVROPg5U+/PY6BuDon7kKYK5Hbpz6+GPzojjoWVdrQ7Wef/yYlMK kexsNc4cj0bqQ0tu+7iiX3TWQ9xeGPXq9Hv+m7G4ikFDc4HWul6muehTaTsvlX8b 5DyYTaymV1EnRzOQ/Pgw6Aisk2/EmKE= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:00 2025 by rpki-client