$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa File: 3842dcc3-b68c-317f-a314-9bd4be8788b0.roa (raw, json) Hash identifier: sIwWYLrBihpLXMV7kxvCzHJm+ZrPFHU0cQKNbjLn2ic= Subject key identifier: 65:12:96:EA:BF:46:27:FB:48:B5:BB:2D:0F:B7:89:75:76:29:0D:EB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EC7A1D517AF9AB15A94EE6380 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16417 IP address blocks: 216.71.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d5:17:af:9a:b1:5a:94:ee:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=c6c14e58-2bd4-49ee-9cf7-edb0ed564ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:ac:95:67:c9:c3:30:4a:77:04:7a:ac:b8: 94:dd:e8:96:67:aa:63:14:aa:9f:63:70:ac:b6:14: 16:31:7d:9a:cd:a1:8a:3c:c7:48:c0:cf:8f:26:48: a9:3a:1e:a2:db:88:62:9b:6a:02:00:55:5c:46:0a: aa:00:bb:61:e9:39:2b:16:fa:f9:e9:90:56:54:66: fc:d5:fb:d8:0c:ea:fb:bd:53:e5:4a:a8:4e:4e:be: 84:44:93:aa:ee:c2:85:d2:45:13:11:eb:44:2b:e6: cd:2c:db:f6:8b:f3:3f:fe:6e:c2:52:25:a4:bd:fa: 1d:fb:38:cc:bb:95:d5:87:4d:4c:20:2e:a9:86:d1: 37:ea:c0:d3:fd:36:b8:98:8f:48:77:1e:d3:8d:6a: 19:21:d9:e7:00:53:5c:8d:32:7f:ea:ef:e7:42:a2: d0:85:2f:b0:d9:c2:11:42:61:df:e3:89:21:58:08: 5e:d7:0a:9e:ca:df:b8:7f:e8:6c:f0:0d:2c:a2:f0: 4f:c2:d9:6e:eb:28:8c:ab:2e:06:57:d5:ae:0e:63: 24:92:f5:eb:a5:78:db:87:88:66:4b:e9:94:e3:79: c5:f2:45:4a:b9:36:a9:7b:d3:35:cb:e6:1a:c3:1a: df:64:f2:b7:61:4c:df:2d:59:a0:6e:5e:cc:07:99: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:96:EA:BF:46:27:FB:48:B5:BB:2D:0F:B7:89:75:76:29:0D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e0:f9:5c:33:74:3a:fb:69:5a:43:2d:b2:d3:17:bc:77:88: 6b:83:01:c4:32:95:64:5b:d1:d7:a4:1a:59:70:28:81:a2:0b: 9f:43:e9:09:23:29:84:7c:29:25:83:89:bc:bc:cd:75:da:40: c8:43:64:eb:d5:3b:c5:e7:cd:c7:5d:5f:ff:b6:aa:34:81:7c: d6:1e:e8:09:90:8b:f4:fe:43:33:d5:50:d8:23:7b:83:7e:ee: aa:96:e6:09:36:7a:f9:a3:31:10:70:39:f4:e9:40:71:7d:84: fd:10:8d:21:dd:39:64:54:ff:de:c8:09:99:8a:02:0f:81:38: 65:bf:e9:b5:51:47:c2:fd:74:22:58:3a:bf:55:ac:1d:f5:72: db:5a:14:01:c9:be:9d:39:10:ad:7b:dd:45:b2:fd:cc:f5:b8: 06:bf:52:f6:38:0b:e0:0d:33:99:fa:31:cd:9e:f8:2d:04:03: 08:fe:b4:9f:f1:c8:92:be:17:c8:08:32:ba:6a:37:79:52:8a: 73:b3:23:17:b5:42:ee:d6:c8:c8:1a:17:d4:2c:98:3f:52:63: 00:09:ec:2b:33:b6:81:a3:36:82:9d:ed:83:93:81:eb:5d:d2: e6:f9:2a:3f:09:8f:05:c4:46:0d:77:d6:5e:36:9c:5f:66:73: f0:2a:99:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodUXr5qxWpTuY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzZjMTRlNTgtMmJkNC00OWVlLTljZjctZWRiMGVkNTY0Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtKslWfJwzBKdwR6rLiU3eiWZ6pjFKqfY3Cs thQWMX2azaGKPMdIwM+PJkipOh6i24him2oCAFVcRgqqALth6TkrFvr56ZBWVGb8 1fvYDOr7vVPlSqhOTr6ERJOq7sKF0kUTEetEK+bNLNv2i/M//m7CUiWkvfod+zjM u5XVh01MIC6phtE36sDT/Ta4mI9Idx7TjWoZIdnnAFNcjTJ/6u/nQqLQhS+w2cIR QmHf44khWAhe1wqeyt+4f+hs8A0sovBPwtlu6yiMqy4GV9WuDmMkkvXrpXjbh4hm S+mU43nF8kVKuTape9M1y+YawxrfZPK3YUzfLVmgbl7MB5lTTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUSluq/Rif7SLW7LQ+3iXV2KQ3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzg0MmRjYzMtYjY4Yy0z MTdmLWEzMTQtOWJkNGJlODc4OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHg+VwzdDr7aVpDLbLTF7x3iGuDAcQylWRb0dekGllwKIGiC59D6Qkj KYR8KSWDiby8zXXaQMhDZOvVO8XnzcddX/+2qjSBfNYe6AmQi/T+QzPVUNgje4N+ 7qqW5gk2evmjMRBwOfTpQHF9hP0QjSHdOWRU/97ICZmKAg+BOGW/6bVRR8L9dCJY Or9VrB31cttaFAHJvp05EK173UWy/cz1uAa/UvY4C+ANM5n6Mc2e+C0EAwj+tJ/x yJK+F8gIMrpqN3lSinOzIxe1Qu7WyMgaF9QsmD9SYwAJ7CsztoGjNoKd7YOTgetd 0ub5Kj8JjwXERg131l42nF9mc/AqmZQ= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:20 2026 by rpki-client