$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f667669b-a44c-3bca-bb94-60a011a886cb.roa File: f667669b-a44c-3bca-bb94-60a011a886cb.roa (raw, json) Hash identifier: qUmdsgrCtsYnmAD+DXyDb8X/+FrBsdIxQkuFH3TMn4A= Subject key identifier: 90:B9:1C:5D:26:EE:AC:83:65:E4:09:F1:6D:C3:F5:47:5A:96:CC:5F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556E95B39954E44ABF07940 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f667669b-a44c-3bca-bb94-60a011a886cb.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 216.71.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e9:5b:39:95:4e:44:ab:f0:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=d83e9529-05ed-450c-a614-4a21d7d2105d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:6b:23:1b:1d:a7:2e:59:34:8e:a6:a9:a7: 0b:d2:0f:ec:58:3f:9b:b4:47:92:c5:20:43:d0:8d: 94:67:0b:cb:8e:71:31:22:7a:86:67:f5:5e:d8:91: dd:f2:e4:70:85:35:de:d1:c9:8c:c4:ff:f8:7c:9a: 10:88:9f:68:21:02:d5:b5:dc:18:6d:63:e9:54:b5: 94:78:a6:d8:71:ba:bf:c2:8d:67:31:7f:44:0f:65: 9d:ee:40:4e:e1:8b:72:01:ea:81:b1:84:eb:7f:6f: 76:e7:04:3b:32:29:61:8c:34:f4:75:66:0b:0d:47: 66:38:41:be:71:8d:38:91:ec:20:ab:3c:80:96:cc: f9:1d:d9:ea:f1:63:2b:c4:ee:41:ce:65:02:9e:c5: 51:68:16:aa:35:33:61:93:a4:eb:1e:58:c3:77:d3: 11:c2:20:ff:b7:d7:9e:c0:2f:34:8a:a7:96:be:cb: 67:36:a0:6f:44:a1:a4:25:1b:42:1b:f7:56:72:5e: 5c:5d:5a:37:66:7e:11:d1:e2:9a:af:91:79:06:dd: f6:ce:21:2a:fb:17:9d:20:60:db:87:a7:01:9c:9f: fd:c6:d3:2a:25:93:31:19:4e:f0:d9:f1:ed:e3:60: 66:0c:ec:0c:33:1d:f3:39:a2:19:3f:e7:34:63:2f: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B9:1C:5D:26:EE:AC:83:65:E4:09:F1:6D:C3:F5:47:5A:96:CC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f667669b-a44c-3bca-bb94-60a011a886cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a2:bc:2b:f1:1e:6b:11:38:7d:5b:9b:fb:ee:1e:a1:d0:7c: 7a:e8:0a:4a:ab:f0:aa:e9:80:e9:b4:82:2f:2c:a2:f4:5a:88: c8:7b:de:c6:2d:20:89:b0:c4:9e:b7:d3:16:c0:b2:73:96:8f: b7:0f:b4:64:6a:7e:3c:ac:b6:79:06:05:25:7b:4a:c7:70:40: 77:cf:e7:9c:09:d2:98:71:8e:38:df:06:c8:f0:6e:04:a2:84: ce:38:f2:e2:90:fc:ee:de:9c:73:d3:0d:09:b9:50:9b:9a:f5: 4d:fb:b7:66:75:68:ce:04:7b:ae:8b:b3:e3:a5:8e:c4:d7:5b: b4:e6:87:ae:b9:68:2d:16:67:b4:25:88:37:1f:da:fc:cb:d0: 54:aa:1d:f9:da:c3:95:a4:1d:b2:0f:ca:7a:f4:8e:0f:e0:20: 98:45:22:dc:fa:a4:c1:7d:50:eb:08:b5:20:1e:49:4d:2b:b7: 05:b9:90:8c:64:f7:7f:0e:b6:ac:ed:10:58:49:4c:5a:b0:c6: 12:a3:91:53:2b:23:7c:be:82:ed:94:c8:00:b7:ae:4c:50:a0: ac:9d:91:0f:70:70:d3:60:47:7b:e7:16:03:be:d9:89:b8:1b: 72:94:a5:f9:f1:a4:c4:d2:08:ae:82:f1:7d:45:7d:76:04:6a: 6e:2b:7c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VulbOZVORKvweUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDgzZTk1MjktMDVlZC00NTBjLWE2MTQtNGEyMWQ3ZDIxMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd1rIxsdpy5ZNI6mqacL0g/sWD+btEeSxSBD 0I2UZwvLjnExInqGZ/Ve2JHd8uRwhTXe0cmMxP/4fJoQiJ9oIQLVtdwYbWPpVLWU eKbYcbq/wo1nMX9ED2Wd7kBO4YtyAeqBsYTrf2925wQ7MilhjDT0dWYLDUdmOEG+ cY04kewgqzyAlsz5Hdnq8WMrxO5BzmUCnsVRaBaqNTNhk6TrHljDd9MRwiD/t9ee wC80iqeWvstnNqBvRKGkJRtCG/dWcl5cXVo3Zn4R0eKar5F5Bt32ziEq+xedIGDb h6cBnJ/9xtMqJZMxGU7w2fHt42BmDOwMMx3zOaIZP+c0Yy/2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC5HF0m7qyDZeQJ8W3D9UdalsxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZjY2NzY2OWItYTQ0Yy0z YmNhLWJiOTQtNjBhMDExYTg4NmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqivCvxHmsROH1bm/vuHqHQfHroCkqr8KrpgOm0gi8sovRaiMh73sYt IImwxJ630xbAsnOWj7cPtGRqfjystnkGBSV7SsdwQHfP55wJ0phxjjjfBsjwbgSi hM448uKQ/O7enHPTDQm5UJua9U37t2Z1aM4Ee66Ls+OljsTXW7Tmh665aC0WZ7Ql iDcf2vzL0FSqHfnaw5WkHbIPynr0jg/gIJhFItz6pMF9UOsItSAeSU0rtwW5kIxk 938OtqztEFhJTFqwxhKjkVMrI3y+gu2UyAC3rkxQoKydkQ9wcNNgR3vnFgO+2Ym4 G3KUpfnxpMTSCK6C8X1FfXYEam4rfI0= -----END CERTIFICATE-----Generated at Tue Sep 16 02:38:03 2025 by rpki-client