$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa File: 3842dcc3-b68c-317f-a314-9bd4be8788b0.roa (raw, json) Hash identifier: uqAAHkNZnI2QI3AgAHN6ySjQ+qKBjf9f2cdva0TVBBY= Subject key identifier: 83:FD:DC:1A:45:B9:71:0C:CF:A8:D6:92:DB:76:1E:5C:F7:02:75:D0 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA46CC4A536024A575E380 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 216.71.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:46:cc:4a:53:60:24:a5:75:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=11a24280-57a1-460e-b361-ef5dffd04f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:d4:5f:a6:c8:cd:1b:64:20:09:b2:78:76: dc:b1:87:26:c8:8e:0d:bb:41:a4:59:38:43:84:e3: ad:34:fb:cf:74:74:70:7d:40:18:e6:44:9f:da:96: 5b:bd:53:12:26:a6:56:34:d2:e3:7a:c3:97:49:df: 7e:e5:63:3e:f4:cc:c8:f5:36:eb:f7:8b:8c:c8:dd: 01:a3:f8:03:4c:43:2a:5d:e4:5b:dd:ac:ad:be:e6: 9d:45:bd:55:b1:ed:29:09:e7:c4:3a:30:d1:74:11: c5:b1:4f:ad:72:0d:6a:62:e2:b5:d9:de:92:d4:e2: 08:67:0f:cc:4f:d6:5c:b2:9d:b0:4c:1a:22:83:a4: af:de:18:1c:61:ed:44:a5:bc:4f:f8:56:c7:4c:86: 13:9e:74:5f:07:81:73:90:2b:fd:23:e2:56:c8:ae: a0:a8:ee:23:52:7f:31:d1:d1:d2:a3:c7:39:8d:18: b0:86:65:46:bc:56:7c:03:17:97:4c:24:4c:48:c2: e5:94:80:89:35:c1:9a:57:69:8b:40:9a:3e:a2:0b: b4:04:0b:b6:f6:bb:ed:9d:f9:0e:b5:a0:05:b2:92: 6f:3a:b1:76:90:99:e3:d0:04:f2:ae:ef:92:49:5a: 87:b7:f7:40:f1:5f:ae:76:4a:8e:a3:9a:b1:f3:7f: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FD:DC:1A:45:B9:71:0C:CF:A8:D6:92:DB:76:1E:5C:F7:02:75:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3842dcc3-b68c-317f-a314-9bd4be8788b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e4:43:aa:cb:5a:cf:f6:bd:6a:20:1e:40:18:63:0f:17:88: ad:cc:5c:a0:3f:68:5e:0e:9c:b3:ab:86:17:38:74:fb:e8:90: d6:63:64:a7:d2:4e:f1:98:0e:a8:6b:2a:3b:c1:fe:fc:ed:f3: b1:d0:8a:6c:1c:82:8a:17:7a:13:b5:07:96:87:f4:6f:18:ba: 86:33:3d:72:80:41:d7:59:a3:a2:78:6c:ff:a7:4d:e5:4a:fc: 20:96:40:f2:15:4f:42:3b:4b:5d:fc:60:6e:ba:24:b1:a9:ef: cb:88:26:8c:74:75:f7:06:5a:fd:62:e5:c8:56:47:4b:c8:bf: f4:cc:38:92:a5:67:3e:c7:bb:63:f7:86:7e:a1:38:16:59:ed: d8:4b:1d:05:14:f5:a8:b7:f3:ac:c7:76:94:ed:ec:84:f5:4b: 4c:9d:05:6e:32:ed:44:cd:2b:3e:cd:6d:f3:80:8c:b7:c3:ee: bd:67:38:d1:3c:b5:f8:1a:52:73:84:4d:eb:96:91:41:6d:1a: 34:10:bc:3d:2d:f6:07:0b:07:88:9f:b4:f6:4b:45:c7:2a:f5: c0:3e:ca:45:47:10:95:cb:a2:d3:b3:f9:93:f2:c7:22:dd:3e: 51:98:d1:a2:8e:8d:fb:03:8a:51:c1:a4:f9:fc:62:cd:8f:ca: de:9a:0d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kbMSlNgJKV144AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTFhMjQyODAtNTdhMS00NjBlLWIzNjEtZWY1ZGZmZDA0ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7zUX6bIzRtkIAmyeHbcsYcmyI4Nu0GkWThD hOOtNPvPdHRwfUAY5kSf2pZbvVMSJqZWNNLjesOXSd9+5WM+9MzI9Tbr94uMyN0B o/gDTEMqXeRb3aytvuadRb1Vse0pCefEOjDRdBHFsU+tcg1qYuK12d6S1OIIZw/M T9Zcsp2wTBoig6Sv3hgcYe1EpbxP+FbHTIYTnnRfB4FzkCv9I+JWyK6gqO4jUn8x 0dHSo8c5jRiwhmVGvFZ8AxeXTCRMSMLllICJNcGaV2mLQJo+ogu0BAu29rvtnfkO taAFspJvOrF2kJnj0ATyru+SSVqHt/dA8V+udkqOo5qx83+x0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP93BpFuXEMz6jWktt2Hlz3AnXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzg0MmRjYzMtYjY4Yy0z MTdmLWEzMTQtOWJkNGJlODc4OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHkQ6rLWs/2vWogHkAYYw8XiK3MXKA/aF4OnLOrhhc4dPvokNZjZKfS TvGYDqhrKjvB/vzt87HQimwcgooXehO1B5aH9G8YuoYzPXKAQddZo6J4bP+nTeVK /CCWQPIVT0I7S138YG66JLGp78uIJox0dfcGWv1i5chWR0vIv/TMOJKlZz7Hu2P3 hn6hOBZZ7dhLHQUU9ai386zHdpTt7IT1S0ydBW4y7UTNKz7NbfOAjLfD7r1nONE8 tfgaUnOETeuWkUFtGjQQvD0t9gcLB4iftPZLRccq9cA+ykVHEJXLotOz+ZPyxyLd PlGY0aKOjfsDilHBpPn8Ys2Pyt6aDfk= -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:59 2026 by rpki-client