$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa File: 3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa (raw, json) Hash identifier: f8sLHPTgex1E8tIA6PN8PNH52TP4aUDqm27knJaGxwk= Subject key identifier: C4:2C:D6:B7:EA:BB:7D:25:C3:EB:A9:BF:F9:1B:01:AC:6B:2C:03:DA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E5A4A0179309FA17EB01BD300 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 30238 IP address blocks: 216.71.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:01:79:30:9f:a1:7e:b0:1b:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=a409cc86-bec9-4b43-8480-31e4720ae629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:8f:0a:08:da:9f:9a:f5:f3:94:e8:5d:36: f9:87:1a:4f:be:d8:fb:ad:d5:9f:36:ad:e6:cf:a5: 03:cb:56:32:0e:de:33:3a:b8:97:0e:68:bc:22:84: e5:f1:30:23:7d:58:0b:d4:3d:e0:f2:49:e0:33:b7: 01:d1:34:d9:88:9f:f5:d6:89:60:d7:78:22:af:40: 82:9a:85:e8:eb:fd:ae:55:91:b5:fd:58:0a:b0:dd: 10:7c:ea:35:42:ed:52:d9:f9:db:95:96:37:4c:e8: 4f:12:7a:e7:8c:28:cf:3a:6b:e9:7f:3b:1b:61:fe: 8c:39:1b:75:bc:68:3e:51:07:87:16:04:cd:dc:b8: 24:c1:72:e1:44:29:ee:37:a6:82:3c:20:c9:ec:ea: 42:16:0e:b0:87:a4:f1:38:7d:ae:9b:13:66:ec:11: 3e:cb:a3:fe:19:9c:fe:03:81:64:50:1c:8f:eb:5f: 97:52:da:25:1c:d6:08:4d:af:49:79:aa:cd:80:9f: 8a:62:16:8f:35:3c:9a:d7:ec:b5:1a:21:fa:8e:84: 58:e3:7b:47:81:93:79:12:8a:61:61:f6:87:fb:7c: a0:bb:6a:e4:1d:5f:91:29:49:d0:f2:34:83:5c:f9: f4:90:a2:32:3a:1e:1c:d0:11:66:ab:de:34:ed:cc: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2C:D6:B7:EA:BB:7D:25:C3:EB:A9:BF:F9:1B:01:AC:6B:2C:03:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4b:e6:7a:32:8c:cb:8f:b9:a1:1b:d3:8d:5d:69:d0:ce:60: b2:ea:51:15:ad:1c:55:11:34:d7:28:c3:aa:89:2f:26:88:79: bd:d4:36:0b:36:cf:9b:85:61:59:3d:f0:38:0b:2f:9c:42:03: 45:93:a6:06:60:25:1b:ff:0e:86:93:9d:a9:17:52:e6:4e:74: e3:47:c5:c6:23:6f:3b:c4:8e:f5:4c:60:e5:3b:db:2b:37:f0: c1:97:a9:2e:ec:e4:42:0f:34:30:df:e3:44:97:60:5b:85:53: 89:07:96:48:de:f7:3b:06:4b:7b:40:cc:b6:52:78:b5:ff:7d: 6e:90:52:5d:65:bf:3a:06:70:f6:8f:4e:8c:df:12:5c:73:3b: 8c:dc:2b:8e:4a:09:63:5e:ae:fc:e3:11:26:d4:f8:74:ac:bf: 29:cb:49:c3:92:42:5f:f2:14:4b:b4:25:c4:2a:ac:ac:45:ea: 18:a3:af:aa:ad:d4:3c:94:27:24:ea:4e:8b:d1:0a:49:4f:31: 4c:70:83:c6:67:b8:89:e2:36:7a:ff:b8:8f:ae:95:d2:36:39: d7:5d:fa:f1:71:9e:dd:62:a8:d9:9b:bd:3e:55:7f:4c:e0:f2: 30:bc:b9:50:49:a0:21:7f:26:c8:06:1c:5b:31:9d:bc:19:ad: 77:1e:8d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgF5MJ+hfrAb0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk YTQwOWNjODYtYmVjOS00YjQzLTg0ODAtMzFlNDcyMGFlNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumCPCgjan5r185ToXTb5hxpPvtj7rdWfNq3m z6UDy1YyDt4zOriXDmi8IoTl8TAjfVgL1D3g8kngM7cB0TTZiJ/11olg13gir0CC moXo6/2uVZG1/VgKsN0QfOo1Qu1S2fnblZY3TOhPEnrnjCjPOmvpfzsbYf6MORt1 vGg+UQeHFgTN3LgkwXLhRCnuN6aCPCDJ7OpCFg6wh6TxOH2umxNm7BE+y6P+GZz+ A4FkUByP61+XUtolHNYITa9JearNgJ+KYhaPNTya1+y1GiH6joRY43tHgZN5Eoph YfaH+3ygu2rkHV+RKUnQ8jSDXPn0kKIyOh4c0BFmq9407cyikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQs1rfqu30lw+upv/kbAaxrLAPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2JiZjg1ZDQtMjBjZi0z NTJlLTk4ZTgtOWQ3OTI2ZGQ3MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFL5noyjMuPuaEb041dadDOYLLqURWtHFURNNcow6qJLyaIeb3UNgs2 z5uFYVk98DgLL5xCA0WTpgZgJRv/DoaTnakXUuZOdONHxcYjbzvEjvVMYOU72ys3 8MGXqS7s5EIPNDDf40SXYFuFU4kHlkje9zsGS3tAzLZSeLX/fW6QUl1lvzoGcPaP TozfElxzO4zcK45KCWNervzjESbU+HSsvynLScOSQl/yFEu0JcQqrKxF6hijr6qt 1DyUJyTqTovRCklPMUxwg8ZnuIniNnr/uI+uldI2Oddd+vFxnt1iqNmbvT5Vf0zg 8jC8uVBJoCF/JsgGHFsxnbwZrXcejaM= -----END CERTIFICATE-----Generated at Tue Jul 14 11:55:33 2026 by rpki-client