$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa File: 3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa (raw, json) Hash identifier: c3ccqiPJOTzd1MdP94EPCUQUd+yWgsLaE6oZuj+ozbA= Subject key identifier: A5:10:48:EB:74:47:54:BD:7C:35:55:17:E2:34:5B:3E:62:34:31:9E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EFCACCC41D1D672DB73084380 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 30238 IP address blocks: 216.71.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cc:41:d1:d6:72:db:73:08:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=df181752-5b59-40e8-9725-7e0b51981f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:fb:21:31:98:c0:d7:f3:d3:6a:68:ff:14: 59:b0:30:be:b0:0d:29:fb:42:66:4a:32:cb:f0:6c: 25:c9:61:d5:8a:6b:96:7f:40:4d:55:24:5c:00:b6: 51:a4:d9:35:5c:c3:1b:e6:59:6d:93:41:7c:de:f2: bc:d2:2b:20:d3:62:36:6e:4c:53:84:87:eb:e2:9d: 8e:60:67:8a:9c:ad:8a:39:d8:dc:41:68:f5:df:72: bf:81:0b:6c:c4:32:e1:79:fa:f5:5a:8a:de:b0:62: c2:08:99:9c:fc:78:5b:e6:95:c2:d1:16:ca:79:6a: d5:b1:75:3c:67:ed:2f:fb:40:ae:90:90:e8:8f:58: c2:da:6a:fb:79:1f:af:79:76:cc:62:94:29:fc:2c: 3e:b5:47:28:16:12:ba:5e:82:cb:42:4f:42:63:c5: b3:ef:59:d6:1b:03:10:f2:8f:50:e1:2a:ef:44:b3: fe:c6:25:f2:f1:ae:b7:66:be:92:37:4c:3f:0b:b5: 0e:92:5a:de:06:96:54:50:f6:09:09:c3:ea:06:88: 0f:3a:5c:82:93:00:74:d0:0d:f2:f0:83:32:1d:90: b9:80:02:4f:09:25:60:b0:8b:01:77:7f:1d:63:17: 80:1e:66:25:12:e0:23:fa:4d:97:28:eb:72:21:09: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:10:48:EB:74:47:54:BD:7C:35:55:17:E2:34:5B:3E:62:34:31:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a7:50:5c:10:41:44:db:eb:d9:f4:24:12:6f:d2:c2:67:66: 0a:b8:c1:11:96:16:a3:64:a8:07:29:53:d8:7f:f7:ec:3e:f0: d0:c5:71:2c:ba:97:71:9b:b0:2c:bd:99:3d:d3:c0:e6:ea:64: 0b:9f:7e:a4:58:a7:9e:e7:6d:79:a7:d5:04:47:d8:73:c0:6c: 9e:f4:4e:89:53:27:41:26:b4:a2:c4:f7:fe:ff:23:8b:81:6c: d8:76:b5:a2:38:26:48:79:cd:08:a3:1f:19:85:fa:bd:16:d7: 89:06:f1:27:a3:81:73:29:c0:23:00:cf:85:d8:1e:58:a3:03: 1c:49:7a:22:fe:e4:cb:11:3a:62:b3:ea:f0:14:ff:17:17:8f: 47:af:2a:dc:ec:4e:85:8c:06:22:3e:19:a1:62:b8:4c:0d:be: 37:f4:9a:dd:79:47:bd:95:0f:04:b4:aa:2c:61:88:83:0e:8b: 7d:04:ac:63:db:bd:9b:ee:b3:ca:10:19:9e:cf:13:6d:7b:e1: b4:8e:1a:2f:20:95:4e:d4:8d:ff:e0:cd:53:c1:c5:52:d3:9a: bf:4d:18:0d:09:f4:91:57:68:c3:8a:ab:6c:02:d2:df:f1:eb: fa:ee:d9:f3:bf:79:da:52:ce:f6:d5:82:8e:b6:9d:62:9c:3f: 7f:5b:ec:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMxB0dZy23MIQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGYxODE3NTItNWI1OS00MGU4LTk3MjUtN2UwYjUxOTgxZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUf7ITGYwNfz02po/xRZsDC+sA0p+0JmSjLL 8GwlyWHVimuWf0BNVSRcALZRpNk1XMMb5lltk0F83vK80isg02I2bkxThIfr4p2O YGeKnK2KOdjcQWj133K/gQtsxDLhefr1WoresGLCCJmc/Hhb5pXC0RbKeWrVsXU8 Z+0v+0CukJDoj1jC2mr7eR+veXbMYpQp/Cw+tUcoFhK6XoLLQk9CY8Wz71nWGwMQ 8o9Q4SrvRLP+xiXy8a63Zr6SN0w/C7UOklreBpZUUPYJCcPqBogPOlyCkwB00A3y 8IMyHZC5gAJPCSVgsIsBd38dYxeAHmYlEuAj+k2XKOtyIQlnkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUQSOt0R1S9fDVVF+I0Wz5iNDGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2JiZjg1ZDQtMjBjZi0z NTJlLTk4ZTgtOWQ3OTI2ZGQ3MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKanUFwQQUTb69n0JBJv0sJnZgq4wRGWFqNkqAcpU9h/9+w+8NDFcSy6 l3GbsCy9mT3TwObqZAuffqRYp57nbXmn1QRH2HPAbJ70TolTJ0EmtKLE9/7/I4uB bNh2taI4Jkh5zQijHxmF+r0W14kG8SejgXMpwCMAz4XYHlijAxxJeiL+5MsROmKz 6vAU/xcXj0evKtzsToWMBiI+GaFiuEwNvjf0mt15R72VDwS0qixhiIMOi30ErGPb vZvus8oQGZ7PE2174bSOGi8glU7Ujf/gzVPBxVLTmr9NGA0J9JFXaMOKq2wC0t/x 6/ru2fO/edpSzvbVgo62nWKcP39b7BQ= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:02 2026 by rpki-client