$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa File: dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa (raw, json) Hash identifier: pYh8sVFgxOeakosaA+4rbxZSoH32nP0J0qYH/VzTUDA= Subject key identifier: 10:61:E3:7D:50:41:60:2D:97:E0:BF:6A:74:C2:16:73:19:41:45:07 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E5A4A016DCB6A48586F45CF40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 30238 IP address blocks: 216.71.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:01:6d:cb:6a:48:58:6f:45:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=844abfbd-43b8-4ce4-acd5-f02d4a824896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:e2:b1:10:ec:14:be:91:c7:5c:5b:ab:be: e7:cd:72:c1:dc:cb:e5:a6:6e:e1:21:37:6c:e0:fb: c9:7f:a5:91:80:3d:e2:16:e4:34:dc:c9:88:38:f1: dd:20:75:db:dd:08:16:5a:23:91:ec:c2:35:55:0e: e0:1b:1a:2b:af:17:9c:6a:49:d8:9e:5d:6a:69:31: 94:11:ba:7d:8d:d7:b0:dc:ef:f8:e5:ca:18:18:d4: f0:a5:f3:19:cd:81:24:85:a5:f8:08:85:d5:da:9e: 83:fe:86:0b:db:50:a0:55:80:4b:0b:5d:b4:88:e0: 80:94:6d:05:3f:07:fb:26:54:91:12:7e:3e:49:82: 52:ff:ef:6a:f5:41:50:08:f6:a5:4d:43:f4:2c:3c: 38:95:e6:78:64:b0:01:b4:29:da:7b:d8:ea:4b:78: 1f:00:eb:4b:a7:32:6b:62:e5:16:44:3e:7f:df:c3: ee:74:c0:e0:93:a0:10:7d:b7:da:bb:44:5b:e1:5f: 28:e5:cf:25:50:c9:1b:ea:e9:a2:9b:81:bf:6c:d0: 18:c9:4e:23:34:a2:32:02:8e:22:33:c8:f4:4d:24: a9:4b:6d:49:5a:d0:5d:9b:80:bc:91:b4:1d:d7:82: 98:f1:17:22:2b:7d:68:c9:6e:5b:e3:52:3e:b1:c7: 64:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:61:E3:7D:50:41:60:2D:97:E0:BF:6A:74:C2:16:73:19:41:45:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:91:be:3d:2b:f3:87:12:3c:44:9d:04:6d:e9:4b:39:76:d2: 48:98:82:14:44:0a:a4:7d:af:0a:39:1f:3f:bd:1b:85:44:aa: 96:64:d6:35:06:65:19:61:e1:f4:f0:52:2a:65:79:b2:e0:12: 75:e6:4e:b4:25:4c:a6:3e:f4:85:83:20:81:20:1b:01:43:56: a2:15:11:7d:69:ed:f0:d5:19:d8:17:c6:00:97:9c:7e:d1:b6: 35:c5:27:7e:cf:e6:88:c2:d7:45:c8:57:64:67:cb:7c:9c:51: 99:ae:f5:3d:03:79:f3:da:83:ce:16:26:4f:45:94:6c:8a:cc: e7:ee:22:fd:90:98:59:35:d0:2a:c4:d2:bb:6b:46:75:24:b9: bb:0f:96:28:76:e5:10:c1:c3:45:be:ec:fd:01:f4:86:c2:f9: fd:a3:43:96:0b:92:9c:b5:a8:c0:f4:47:51:e4:0d:c6:08:9f: 46:ed:02:4c:a1:11:8c:b8:dc:54:71:fc:58:94:5f:3f:97:7a: c7:34:21:c8:fe:37:1a:c0:35:7f:cb:ca:22:73:41:c8:23:8c: 55:66:57:23:6b:5f:07:7c:06:21:eb:b4:f4:39:a1:f0:d5:2b: 99:ac:8f:95:8b:e7:4b:88:03:44:3e:1b:67:9f:5c:6a:d0:68: 6b:bb:a6:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgFty2pIWG9Fz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ODQ0YWJmYmQtNDNiOC00Y2U0LWFjZDUtZjAyZDRhODI0ODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4/isRDsFL6Rx1xbq77nzXLB3Mvlpm7hITds 4PvJf6WRgD3iFuQ03MmIOPHdIHXb3QgWWiOR7MI1VQ7gGxorrxecaknYnl1qaTGU Ebp9jdew3O/45coYGNTwpfMZzYEkhaX4CIXV2p6D/oYL21CgVYBLC120iOCAlG0F Pwf7JlSREn4+SYJS/+9q9UFQCPalTUP0LDw4leZ4ZLABtCnae9jqS3gfAOtLpzJr YuUWRD5/38PudMDgk6AQfbfau0Rb4V8o5c8lUMkb6umim4G/bNAYyU4jNKIyAo4i M8j0TSSpS21JWtBdm4C8kbQd14KY8RciK31oyW5b41I+scdk5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBh431QQWAtl+C/anTCFnMZQUUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGZmY2Q0NGItNzZlNC0z OWRhLWIxYmYtYTgzMTBjYmFmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGRvj0r84cSPESdBG3pSzl20kiYghRECqR9rwo5Hz+9G4VEqpZk1jUG ZRlh4fTwUiplebLgEnXmTrQlTKY+9IWDIIEgGwFDVqIVEX1p7fDVGdgXxgCXnH7R tjXFJ37P5ojC10XIV2Rny3ycUZmu9T0DefPag84WJk9FlGyKzOfuIv2QmFk10CrE 0rtrRnUkubsPlih25RDBw0W+7P0B9IbC+f2jQ5YLkpy1qMD0R1HkDcYIn0btAkyh EYy43FRx/FiUXz+Xesc0Icj+NxrANX/LyiJzQcgjjFVmVyNrXwd8BiHrtPQ5ofDV K5msj5WL50uIA0Q+G2efXGrQaGu7png= -----END CERTIFICATE-----Generated at Tue Jul 14 11:53:51 2026 by rpki-client