$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa File: 0344eba0-5400-3727-a9b4-12f7e7edd770.roa (raw, json) Hash identifier: pdWCncBV4KzqK+76gabHEHIGA6oRzrCS8QOcxMqCYGk= Subject key identifier: FE:4E:05:7C:55:AE:3F:7E:7C:FF:99:51:43:09:40:15:8A:FD:FA:AA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556E99761B40FE459EF87F0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 216.71.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e9:97:61:b4:0f:e4:59:ef:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=c8a51ea7-c278-46d8-84ee-76451f9db96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:11:53:aa:db:4e:6a:d4:e0:09:d1:38:b8: ee:ea:24:77:d9:05:e1:95:34:13:f0:d0:77:7f:fe: c5:5f:2a:57:93:2f:15:c5:a0:7b:8b:f5:6b:e2:c6: d8:f4:45:cd:8a:41:6e:d1:c5:cb:27:f3:67:78:c0: 4b:14:e9:f3:44:d8:55:eb:43:2f:77:06:a8:bb:27: 68:87:d2:d2:f6:e0:7e:2f:ff:03:88:5c:0b:fd:ca: 0c:9e:1e:61:c6:c1:e9:1c:9a:39:9e:07:70:90:70: 97:b5:4e:2b:86:05:98:37:53:3a:68:02:f6:7c:00: 53:28:b6:31:68:3e:53:c7:3d:a8:82:0d:27:d1:c7: ce:5d:61:15:bb:b4:46:94:4f:d8:ee:e9:62:fc:d8: ef:e5:2b:d4:56:de:75:8b:a5:b5:3f:fe:98:7a:e3: 1e:32:55:57:01:99:47:97:bb:3e:27:11:e0:25:32: 09:3c:47:dd:90:cf:29:fc:3d:21:05:be:a1:c9:1b: 09:fb:b2:01:a6:87:cc:5a:2a:54:f3:1d:33:a7:38: 78:49:9a:ec:78:c2:90:23:83:e2:ea:13:bd:c6:1b: 03:51:38:08:06:43:20:26:44:a2:d3:56:e7:9d:2e: c4:c0:32:9d:c1:ef:d4:f0:7e:8d:c0:72:29:d5:29: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4E:05:7C:55:AE:3F:7E:7C:FF:99:51:43:09:40:15:8A:FD:FA:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:bc:94:2d:ba:a6:0b:fb:21:f9:6d:16:69:b9:6c:66:9b:41: ed:69:5c:09:9f:db:86:af:c8:28:d0:29:76:11:19:f5:fc:66: 15:e8:a1:02:7f:db:8c:d8:4e:2b:b0:15:e3:a5:ff:6e:2c:db: 2d:66:d4:5c:8e:b3:8e:52:f6:45:b5:ed:5d:87:30:e1:a6:6d: f2:7a:ae:df:4a:94:94:6f:d3:41:03:69:33:05:d9:ad:0b:53: 2d:b7:32:c7:5d:86:c7:86:86:b2:df:d2:bc:4a:37:03:47:dd: 4b:ce:d3:5d:10:02:12:4b:7c:53:ba:ff:4d:7b:28:e1:b0:ee: 73:95:62:31:45:02:2e:05:3a:59:5d:3a:e0:9b:51:a1:66:4b: 52:8d:c2:46:f9:10:05:3e:aa:d3:4c:cf:a1:4d:f3:dd:f4:7c: d8:24:84:a8:5e:fd:7e:93:77:f3:25:f1:94:63:d9:d2:b9:25: fc:7e:d0:ac:32:c2:a0:1d:02:ba:23:9a:7a:b7:cc:93:70:50: 34:cb:85:0c:4c:82:68:05:07:7b:11:22:ca:c5:57:25:23:b8: 3d:3c:c6:cf:7e:b4:b8:29:ce:c2:33:4e:a7:c3:f2:8f:25:00: 7f:34:0b:c2:99:44:bb:6b:ac:35:29:2a:fd:69:ee:ef:84:df: 4f:d6:1b:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VumXYbQP5Fnvh/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YzhhNTFlYTctYzI3OC00NmQ4LTg0ZWUtNzY0NTFmOWRiOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5YRU6rbTmrU4AnROLju6iR32QXhlTQT8NB3 f/7FXypXky8VxaB7i/Vr4sbY9EXNikFu0cXLJ/NneMBLFOnzRNhV60Mvdwaouydo h9LS9uB+L/8DiFwL/coMnh5hxsHpHJo5ngdwkHCXtU4rhgWYN1M6aAL2fABTKLYx aD5Txz2ogg0n0cfOXWEVu7RGlE/Y7uli/Njv5SvUVt51i6W1P/6YeuMeMlVXAZlH l7s+JxHgJTIJPEfdkM8p/D0hBb6hyRsJ+7IBpofMWipU8x0zpzh4SZrseMKQI4Pi 6hO9xhsDUTgIBkMgJkSi01bnnS7EwDKdwe/U8H6NwHIp1SkkrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5OBXxVrj9+fP+ZUUMJQBWK/fqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDM0NGViYTAtNTQwMC0z NzI3LWE5YjQtMTJmN2U3ZWRkNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa8lC26pgv7IfltFmm5bGabQe1pXAmf24avyCjQKXYRGfX8ZhXooQJ/ 24zYTiuwFeOl/24s2y1m1FyOs45S9kW17V2HMOGmbfJ6rt9KlJRv00EDaTMF2a0L Uy23MsddhseGhrLf0rxKNwNH3UvO010QAhJLfFO6/017KOGw7nOVYjFFAi4FOlld OuCbUaFmS1KNwkb5EAU+qtNMz6FN8930fNgkhKhe/X6Td/Ml8ZRj2dK5Jfx+0Kwy wqAdArojmnq3zJNwUDTLhQxMgmgFB3sRIsrFVyUjuD08xs9+tLgpzsIzTqfD8o8l AH80C8KZRLtrrDUpKv1p7u+E30/WGzY= -----END CERTIFICATE-----Generated at Tue Sep 16 02:33:01 2025 by rpki-client