$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/425098bb-36f7-385b-bbd6-5f541c7388b1.roa File: 425098bb-36f7-385b-bbd6-5f541c7388b1.roa (raw, json) Hash identifier: HOu4cTKxCk27SUoshwNufP+QS07XkABHt3SX6P3rLJ8= Subject key identifier: 7F:5A:BE:66:91:0B:A0:09:C5:4C:6E:29:7F:B0:4A:29:A3:43:1F:FA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EC7A1D4E201919E5332884080 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/425098bb-36f7-385b-bbd6-5f541c7388b1.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16417 IP address blocks: 216.71.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d4:e2:01:91:9e:53:32:88:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=33a6c6ee-0fe4-4914-b779-4599a6e009f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:6b:f7:71:ee:b1:1e:f9:14:a0:c7:90:6c: 2c:46:b5:b6:36:74:38:aa:95:41:ba:7c:6a:f2:8f: b4:32:f5:d3:32:d1:b0:5f:bf:bb:56:b1:e5:f7:2a: ca:13:79:2d:16:25:8a:c6:c4:d2:43:95:26:ac:94: c5:c5:26:b7:00:bd:00:5b:e6:a3:0a:aa:ce:6c:98: c0:11:eb:4b:97:95:b2:43:74:c1:fb:7e:23:1e:d9: f9:fd:df:a2:11:d3:ee:99:f2:48:1f:91:95:04:20: ae:2c:d1:f4:55:0c:24:93:a2:8e:42:fa:aa:9b:59: 48:f3:cd:d0:ae:c7:f9:0b:db:fe:2a:ca:76:25:ab: 6d:b0:a0:c2:3a:f5:0c:a4:9e:65:3e:cd:32:d1:6b: 5e:82:6f:d6:e2:f9:1a:b2:54:6f:6f:9c:f6:5d:ad: ec:7b:5f:07:19:6e:af:9e:10:83:1a:96:54:83:c6: a4:c1:00:2f:fb:f4:9b:91:16:db:65:e4:35:66:27: f3:51:36:c0:87:21:9e:dc:e0:bb:20:38:78:ea:98: 69:cb:33:1b:69:76:10:df:99:11:a2:24:92:68:1e: 4e:31:37:90:d6:06:4e:63:3a:a6:02:bf:5c:3a:44: c5:3e:28:22:70:02:1b:be:c6:53:4a:9a:2e:f6:8b: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:BE:66:91:0B:A0:09:C5:4C:6E:29:7F:B0:4A:29:A3:43:1F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/425098bb-36f7-385b-bbd6-5f541c7388b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:92:3e:db:f4:be:db:f3:e3:65:12:20:76:f4:29:65:fc:0b: 92:99:11:69:b9:2b:eb:f4:67:43:b1:c3:b4:69:c0:93:90:8e: 4a:0f:e9:ad:10:a4:74:26:09:a8:9b:18:fc:93:74:f5:08:0a: 4d:7c:ec:90:a1:05:09:7c:1f:22:8a:d4:d8:91:76:45:31:5d: b7:d9:1a:0f:94:21:65:7e:91:c2:8d:af:22:dc:bf:7f:92:eb: 46:3b:8f:4d:b6:00:29:36:da:37:da:f0:99:44:53:47:7c:7d: aa:1c:00:18:ec:da:b7:5a:7a:29:56:bd:b2:45:4e:5a:c9:30: 6f:d5:d9:bc:3e:10:67:58:18:5d:37:bf:35:e5:92:45:e8:1b: b0:24:9f:f0:e7:db:bc:3d:6b:64:0e:52:7a:75:cd:db:55:2e: 90:12:b5:9b:31:fd:84:f6:aa:d0:26:92:43:cb:a5:d4:2e:ad: 59:78:0a:6b:1a:57:82:02:7c:74:bc:2d:6b:69:a7:96:cd:ce: 06:5f:02:db:99:bb:1b:95:ee:15:c9:c4:45:37:3c:b6:d5:2a: b8:5d:81:a7:51:f8:fe:ea:e3:b2:50:b6:49:85:ad:b8:77:21: e9:fe:68:8d:b4:ab:10:f9:de:88:65:df:74:48:10:ce:40:72: 9d:80:27:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodTiAZGeUzKIQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MzNhNmM2ZWUtMGZlNC00OTE0LWI3NzktNDU5OWE2ZTAwOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqpr93HusR75FKDHkGwsRrW2NnQ4qpVBunxq 8o+0MvXTMtGwX7+7VrHl9yrKE3ktFiWKxsTSQ5UmrJTFxSa3AL0AW+ajCqrObJjA EetLl5WyQ3TB+34jHtn5/d+iEdPumfJIH5GVBCCuLNH0VQwkk6KOQvqqm1lI883Q rsf5C9v+Ksp2JattsKDCOvUMpJ5lPs0y0Wtegm/W4vkaslRvb5z2Xa3se18HGW6v nhCDGpZUg8akwQAv+/SbkRbbZeQ1ZifzUTbAhyGe3OC7IDh46phpyzMbaXYQ35kR oiSSaB5OMTeQ1gZOYzqmAr9cOkTFPigicAIbvsZTSpou9osdDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9avmaRC6AJxUxuKX+wSimjQx/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDI1MDk4YmItMzZmNy0z ODViLWJiZDYtNWY1NDFjNzM4OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKSPtv0vtvz42USIHb0KWX8C5KZEWm5K+v0Z0Oxw7RpwJOQjkoP6a0Q pHQmCaibGPyTdPUICk187JChBQl8HyKK1NiRdkUxXbfZGg+UIWV+kcKNryLcv3+S 60Y7j022ACk22jfa8JlEU0d8faocABjs2rdaeilWvbJFTlrJMG/V2bw+EGdYGF03 vzXlkkXoG7Akn/Dn27w9a2QOUnp1zdtVLpAStZsx/YT2qtAmkkPLpdQurVl4Cmsa V4ICfHS8LWtpp5bNzgZfAtuZuxuV7hXJxEU3PLbVKrhdgadR+P7q47JQtkmFrbh3 Ien+aI20qxD53ohl33RIEM5Acp2AJ3k= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:59 2026 by rpki-client