$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa File: d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa (raw, json) Hash identifier: IpJSMixfH4bBrs9mSkOkv7VGcFnKY8bh/7xdplKsIaA= Subject key identifier: 27:41:99:E4:47:E0:E1:04:6D:58:BA:17:4D:D0:6C:1E:B2:F2:C6:68 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F119D12FCDF579C042BDDB460 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 30238 IP address blocks: 216.71.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:12:fc:df:57:9c:04:2b:dd:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=66168720-4ba7-4b2f-9763-6814b12721e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:fc:26:e8:06:97:45:0f:5f:a5:c4:66:3e: d0:7a:a6:ba:8e:86:d6:57:57:dd:66:42:a3:1f:14: 0e:0f:0b:12:70:e9:2c:7c:b5:74:8c:9a:c5:43:f2: 29:ca:56:a7:3f:62:c7:0b:c3:e8:01:b6:44:9d:53: 03:2c:3a:dd:4d:9e:45:7b:13:99:2b:33:24:69:11: 23:9e:40:31:b9:24:79:60:b7:29:5d:66:0f:be:56: 5a:0f:c4:40:bf:84:12:23:5d:ab:2a:52:25:c2:28: 8b:90:f7:7c:6a:18:17:de:29:06:e5:57:df:40:78: fc:35:af:3d:da:a1:d4:fe:b8:d4:8e:d9:83:d2:15: 41:58:69:b3:c7:41:7d:cd:0a:a7:53:f2:ea:34:8e: 62:7b:61:e0:aa:f4:6d:92:ab:af:94:55:f0:90:1d: 1b:82:a8:eb:9c:45:a6:dc:4b:57:77:a2:6f:20:21: 15:84:b8:06:b5:18:3a:3b:60:aa:5b:66:fa:ab:b6: f7:63:60:8e:51:ee:7b:ee:0f:cc:30:4f:b7:8f:98: 7f:a0:59:67:42:2c:a6:ce:19:71:17:43:a6:82:d4: 2d:45:b4:d2:84:9a:4c:2e:95:db:e8:c9:80:3a:5a: 6b:60:c6:55:93:c1:63:23:7a:73:22:b7:e1:9c:b6: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:99:E4:47:E0:E1:04:6D:58:BA:17:4D:D0:6C:1E:B2:F2:C6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d09cfdbd-bb6a-31a2-93a5-890db9aa1de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:10:ba:16:ce:56:12:27:0c:4b:7e:b4:e5:9f:8f:16:30:da: c8:32:2e:d8:53:b1:18:d7:fd:88:ad:66:e8:08:7e:c5:17:19: 99:b7:83:2f:8d:0b:ea:ef:63:65:49:89:cf:27:7b:e3:5c:b8: fb:7f:94:20:e5:33:96:75:cd:35:bf:bd:3d:8b:e2:33:48:c5: 65:96:5c:9a:ac:07:05:fb:46:f4:81:fe:9b:e5:ad:0b:bb:a4: 0d:23:27:95:3f:ab:fc:65:90:9d:8f:22:78:b3:1f:cc:33:4e: 80:a2:a6:b6:81:91:ed:20:73:52:be:33:f5:ec:55:2f:60:9a: d5:75:61:13:03:91:c0:b5:0c:c3:41:d9:ec:ff:02:9b:6d:61: 2e:19:4d:c1:73:6e:6c:20:bd:f5:ec:83:89:82:5a:1d:13:28: 60:33:54:52:d5:12:3b:52:d7:c6:38:b0:ca:cd:6b:42:c5:c7: 1d:cb:02:0d:ca:4a:d8:20:39:73:4c:3b:9f:6d:8a:70:34:51: 73:27:af:68:af:2e:44:42:1a:6c:5e:38:ad:ba:59:ea:fd:3a: c4:a2:a4:3f:fa:0f:90:a0:f6:8c:ba:9d:19:3b:83:7b:1b:48: 91:47:41:f0:6a:03:25:0f:02:21:39:18:4e:cf:cb:95:d7:92: c9:fa:6c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRL831ecBCvdtGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NjYxNjg3MjAtNGJhNy00YjJmLTk3NjMtNjgxNGIxMjcyMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OL8JugGl0UPX6XEZj7Qeqa6jobWV1fdZkKj HxQODwsScOksfLV0jJrFQ/IpylanP2LHC8PoAbZEnVMDLDrdTZ5FexOZKzMkaREj nkAxuSR5YLcpXWYPvlZaD8RAv4QSI12rKlIlwiiLkPd8ahgX3ikG5VffQHj8Na89 2qHU/rjUjtmD0hVBWGmzx0F9zQqnU/LqNI5ie2HgqvRtkquvlFXwkB0bgqjrnEWm 3EtXd6JvICEVhLgGtRg6O2CqW2b6q7b3Y2COUe577g/MME+3j5h/oFlnQiymzhlx F0OmgtQtRbTShJpMLpXb6MmAOlprYMZVk8FjI3pzIrfhnLZNlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdBmeRH4OEEbVi6F03QbB6y8sZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDA5Y2ZkYmQtYmI2YS0z MWEyLTkzYTUtODkwZGI5YWExZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMQuhbOVhInDEt+tOWfjxYw2sgyLthTsRjX/YitZugIfsUXGZm3gy+N C+rvY2VJic8ne+NcuPt/lCDlM5Z1zTW/vT2L4jNIxWWWXJqsBwX7RvSB/pvlrQu7 pA0jJ5U/q/xlkJ2PInizH8wzToCipraBke0gc1K+M/XsVS9gmtV1YRMDkcC1DMNB 2ez/ApttYS4ZTcFzbmwgvfXsg4mCWh0TKGAzVFLVEjtS18Y4sMrNa0LFxx3LAg3K StggOXNMO59tinA0UXMnr2ivLkRCGmxeOK26Wer9OsSipD/6D5Cg9oy6nRk7g3sb SJFHQfBqAyUPAiE5GE7Py5XXksn6bF8= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:41 2026 by rpki-client