$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa File: dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa (raw, json) Hash identifier: R3CVs7HkHNQOpteW3PcvkIK0GbfIKn7ba3xjgLvLVsY= Subject key identifier: 16:D7:3F:FC:F8:B6:FF:9B:01:5B:04:D4:EB:40:EF:85:78:94:2C:78 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D1214B046FD57BCA7F1400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 216.71.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:21:4b:04:6f:d5:7b:ca:7f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=5fd8527f-d7c7-4be0-b29d-a2a771759b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:78:15:e7:fb:84:e6:cc:a1:0d:7c:68:7f: d6:c7:c9:b8:db:8e:fe:6d:59:b1:03:4a:38:9e:d7: e2:2d:d2:45:95:33:02:6f:ba:41:8a:01:ba:bf:92: 87:bf:fc:32:8b:41:46:9e:57:48:4c:d2:a8:04:14: 24:9e:89:b1:ce:3e:fc:6d:8e:ee:3f:e2:06:03:eb: 40:0f:86:59:12:d3:32:11:70:08:00:fa:04:a2:14: 26:2a:3e:45:ed:32:2f:cf:cd:d5:c7:67:a1:50:82: 7a:30:7a:02:20:70:a1:c4:59:b0:3f:9b:73:bc:34: 75:b5:1c:37:35:97:07:89:f3:e1:e9:72:bd:10:38: 5e:bb:e8:56:6c:5e:bb:d6:04:ec:3c:92:d2:45:dd: 8a:f2:0c:97:d4:a2:f2:5a:a4:62:0c:d3:8d:43:f1: 6c:19:88:f3:e2:68:8a:ce:8b:b7:f4:7a:30:0a:b3: a1:b9:73:ce:d1:0a:d0:32:b4:ea:de:26:03:27:dd: 57:f2:a0:1f:90:aa:e0:94:5b:73:c0:fc:65:84:35: fd:77:2c:22:45:b5:43:d7:93:e1:17:aa:10:68:1f: 2e:8e:a8:39:ad:63:01:3d:e2:a1:42:60:23:e9:27: 11:c3:d1:39:54:4b:09:9c:9a:39:8b:20:2d:8f:d1: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D7:3F:FC:F8:B6:FF:9B:01:5B:04:D4:EB:40:EF:85:78:94:2C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:42:44:6a:44:29:9c:70:a2:07:3f:ec:4d:c0:65:9d:84:a6: bf:d5:b4:89:04:a7:33:86:31:0b:19:75:76:7f:1a:22:c8:ad: c4:7d:b5:79:fe:db:2f:74:67:e9:59:c4:c1:3a:f0:bc:fc:c8: 9b:04:f1:82:50:54:5c:1a:f0:2a:75:60:98:87:42:02:8e:37: 2c:e7:a7:de:6a:2b:dd:82:3b:f6:7a:39:bc:21:74:35:b2:2d: 4a:47:ad:b1:cb:05:f1:69:95:71:7d:0f:ee:09:4c:6c:cd:a0: 38:a5:51:65:2e:2c:d3:f2:c4:6a:04:88:2c:b9:3f:38:3f:94: 0c:3e:19:d8:a6:af:26:5c:bf:73:0e:7c:f1:07:e5:5d:97:cd: da:42:fa:d8:71:0c:21:7b:72:be:29:93:08:8a:52:28:57:36: d5:c4:46:b8:08:7f:6b:1b:25:65:89:5b:2f:f6:2d:a8:04:08: bf:61:4a:25:57:aa:e4:b9:ef:97:86:22:56:e6:53:1c:60:2f: 54:83:c0:6d:0e:12:1d:ca:9c:4c:23:9f:05:ad:12:66:8f:c1: bb:15:fa:91:47:f1:21:19:38:f9:11:c9:2a:68:e6:b2:94:22: bb:85:21:15:07:1a:7b:e5:94:b0:39:b1:fe:d7:54:24:9c:5c: 42:1a:a5:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SFLBG/Ve8p/FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NWZkODUyN2YtZDdjNy00YmUwLWIyOWQtYTJhNzcxNzU5YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2p4Fef7hObMoQ18aH/Wx8m4247+bVmxA0o4 ntfiLdJFlTMCb7pBigG6v5KHv/wyi0FGnldITNKoBBQknomxzj78bY7uP+IGA+tA D4ZZEtMyEXAIAPoEohQmKj5F7TIvz83Vx2ehUIJ6MHoCIHChxFmwP5tzvDR1tRw3 NZcHifPh6XK9EDheu+hWbF671gTsPJLSRd2K8gyX1KLyWqRiDNONQ/FsGYjz4miK zou39HowCrOhuXPO0QrQMrTq3iYDJ91X8qAfkKrglFtzwPxlhDX9dywiRbVD15Ph F6oQaB8ujqg5rWMBPeKhQmAj6ScRw9E5VEsJnJo5iyAtj9H9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbXP/z4tv+bAVsE1OtA74V4lCx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGZmY2Q0NGItNzZlNC0z OWRhLWIxYmYtYTgzMTBjYmFmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJCRGpEKZxwogc/7E3AZZ2Epr/VtIkEpzOGMQsZdXZ/GiLIrcR9tXn+ 2y90Z+lZxME68Lz8yJsE8YJQVFwa8Cp1YJiHQgKONyznp95qK92CO/Z6ObwhdDWy LUpHrbHLBfFplXF9D+4JTGzNoDilUWUuLNPyxGoEiCy5Pzg/lAw+GdimryZcv3MO fPEH5V2XzdpC+thxDCF7cr4pkwiKUihXNtXERrgIf2sbJWWJWy/2LagECL9hSiVX quS575eGIlbmUxxgL1SDwG0OEh3KnEwjnwWtEmaPwbsV+pFH8SEZOPkRySpo5rKU IruFIRUHGnvllLA5sf7XVCScXEIapTs= -----END CERTIFICATE-----Generated at Sun Aug 24 06:13:45 2025 by rpki-client