$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa File: c5544001-80a2-3d37-a385-da4ad0a51bab.roa (raw, json) Hash identifier: yp2Qwdyk1woxPGJN/YF0tVzcDTjUmRhlj2jHiI38fQ4= Subject key identifier: D7:08:8F:DE:34:C1:9A:C4:4B:A2:6E:10:A7:14:40:53:C8:66:31:A9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584DD625B596C7ACBC964AF93180 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 16417 IP address blocks: 216.71.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b5:96:c7:ac:bc:96:4a:f9:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=ca3ca127-7214-4b28-8f9b-8b49ae992de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:f7:8d:63:ac:7c:ee:ab:6b:c7:59:9a:79: 7e:32:93:eb:59:1b:3e:41:cd:87:0c:90:29:ad:e3: ca:ea:20:d2:d0:fe:f0:a7:e9:06:10:a5:67:cc:9e: 02:cf:37:ad:2e:9c:36:6c:c8:e8:e7:3a:66:6b:e2: 2b:cf:e0:6e:c2:72:d7:7f:e0:22:a7:d4:07:de:f8: 15:a8:3e:61:e2:a2:16:21:1d:ca:c7:6a:53:7d:82: c6:67:b8:32:42:4f:7d:95:02:72:59:56:f3:d4:8e: 48:71:14:d0:e7:36:65:b1:31:6d:36:26:d1:93:f0: 5a:31:e5:a4:d5:b4:8a:2c:22:f0:08:9b:fc:bc:79: e5:00:1a:2e:d7:88:e9:94:4d:c5:3a:cd:d0:28:af: ce:7e:21:81:3e:55:1d:1f:e0:9a:34:0f:53:81:0e: 3b:4e:e6:a2:ec:9e:3e:2e:15:43:cc:20:98:6d:5a: 3c:d9:11:78:6a:4e:ec:2e:88:09:89:64:18:fa:2b: 58:4d:3e:bd:8d:f0:09:cc:05:e8:57:a3:82:27:48: cf:91:94:cd:ca:37:df:32:3f:1a:d4:1e:f1:5e:dd: 63:5b:c7:1f:01:f5:89:be:29:dd:c9:e9:ce:6e:01: 52:a9:eb:88:a8:c1:19:04:ae:60:10:a5:ba:73:48: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:08:8F:DE:34:C1:9A:C4:4B:A2:6E:10:A7:14:40:53:C8:66:31:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:53:49:c4:9c:fd:1b:91:4f:b7:66:14:f0:04:f6:db:53:b2: c5:fc:78:a9:2f:ef:ef:26:b0:8a:98:84:78:45:61:2c:e8:4a: bf:93:07:f7:01:e7:52:03:94:39:ee:ee:f0:95:40:e3:23:99: 80:93:59:09:c7:b9:61:b1:52:18:e0:74:bf:8a:ab:ca:ed:ae: 00:50:4e:1c:1c:15:c3:05:b5:98:e6:f3:30:4a:74:f9:cc:3f: b7:d1:57:20:4a:1e:2f:7b:d9:1a:75:78:5e:ba:fc:41:b1:89: 94:e2:a9:53:46:67:b6:17:08:da:80:74:92:b1:4c:a0:71:42: 9d:2f:c8:9d:5f:c5:2d:b3:9c:7b:00:0b:4a:ca:51:72:39:31: f5:aa:04:c8:29:d6:e3:a1:a9:fb:42:32:6a:ed:6c:be:87:65: 20:fe:a3:e3:92:35:d5:47:1f:ad:16:52:cb:b6:89:3c:16:26: 3e:73:55:d0:58:d0:cd:16:59:c5:a2:52:1c:5f:ed:be:58:53: b5:de:31:09:40:7d:2d:26:3e:26:2b:3b:1b:3c:70:25:a9:0e: 8a:77:7e:1d:72:d9:4f:fb:1d:40:9b:19:b2:e4:83:86:49:7e: 6e:fd:8b:25:ab:fc:e7:62:2c:44:52:c1:0e:02:3f:1a:6e:bd: 1a:b1:58:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbWWx6y8lkr5MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk Y2EzY2ExMjctNzIxNC00YjI4LThmOWItOGI0OWFlOTkyZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmn3jWOsfO6ra8dZmnl+MpPrWRs+Qc2HDJAp rePK6iDS0P7wp+kGEKVnzJ4CzzetLpw2bMjo5zpma+Irz+BuwnLXf+Aip9QH3vgV qD5h4qIWIR3Kx2pTfYLGZ7gyQk99lQJyWVbz1I5IcRTQ5zZlsTFtNibRk/BaMeWk 1bSKLCLwCJv8vHnlABou14jplE3FOs3QKK/OfiGBPlUdH+CaNA9TgQ47Tuai7J4+ LhVDzCCYbVo82RF4ak7sLogJiWQY+itYTT69jfAJzAXoV6OCJ0jPkZTNyjffMj8a 1B7xXt1jW8cfAfWJvindyenObgFSqeuIqMEZBK5gEKW6c0jZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcIj940wZrES6JuEKcUQFPIZjGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYzU1NDQwMDEtODBhMi0z ZDM3LWEzODUtZGE0YWQwYTUxYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1TScSc/RuRT7dmFPAE9ttTssX8eKkv7+8msIqYhHhFYSzoSr+TB/cB 51IDlDnu7vCVQOMjmYCTWQnHuWGxUhjgdL+Kq8rtrgBQThwcFcMFtZjm8zBKdPnM P7fRVyBKHi972Rp1eF66/EGxiZTiqVNGZ7YXCNqAdJKxTKBxQp0vyJ1fxS2znHsA C0rKUXI5MfWqBMgp1uOhqftCMmrtbL6HZSD+o+OSNdVHH60WUsu2iTwWJj5zVdBY 0M0WWcWiUhxf7b5YU7XeMQlAfS0mPiYrOxs8cCWpDop3fh1y2U/7HUCbGbLkg4ZJ fm79iyWr/OdiLERSwQ4CPxpuvRqxWOo= -----END CERTIFICATE-----Generated at Fri May 15 12:15:23 2026 by rpki-client