$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/629734fc-8070-3d45-9d2e-371f45d21f12.roa File: 629734fc-8070-3d45-9d2e-371f45d21f12.roa (raw, json) Hash identifier: XtXRBToGFmtlJO40zsTKUSTfx1rfRfdwesG5kdkN5Dw= Subject key identifier: AE:00:D3:2D:2D:EC:CA:C2:A1:34:E0:4D:B8:34:8E:21:52:AF:34:5D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D8EF57200591ACF240DEE5300 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/629734fc-8070-3d45-9d2e-371f45d21f12.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 30238 IP address blocks: 216.71.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:72:00:59:1a:cf:24:0d:ee:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7aa17141-118f-4367-bc5d-ca1935381bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:15:87:7f:1a:01:3b:70:94:a2:ff:19:6c: a4:74:8c:de:91:04:8d:ba:be:34:ed:24:9f:cf:35: db:92:25:2a:bc:97:77:dc:0e:01:bd:83:d2:11:8a: af:9a:4f:1b:8c:2e:e8:f5:96:b1:30:d1:26:8f:6e: 4d:68:03:61:57:19:4a:33:96:64:9b:88:b3:a5:a1: dd:97:46:41:bd:86:9b:51:37:a2:c0:12:de:a1:90: 62:c7:92:a4:66:7d:0f:8e:be:9c:2e:79:02:9f:9f: 10:38:30:71:64:f8:fa:c7:21:2f:38:2d:53:02:c0: 73:d4:c9:36:ab:d6:d8:85:b7:04:5e:c7:53:7e:a9: 04:cb:fc:96:15:b6:92:f5:49:70:ec:5a:32:47:61: 79:54:6a:0e:7a:6b:da:1e:d8:9f:89:4b:84:c9:77: 09:5d:56:40:20:fc:fe:4a:1e:0f:d2:cc:8c:b5:96: e2:8d:db:a0:1a:b3:bc:94:b4:72:b3:c0:3e:10:67: 35:a4:7d:61:c2:d1:b5:e0:43:2f:3e:08:67:5d:36: 58:9d:9b:8a:61:48:aa:1f:a8:26:50:b8:01:44:48: 40:43:3b:25:63:b1:3f:1c:ea:88:da:8d:b2:45:39: f2:ad:07:db:c7:af:75:86:83:56:a3:b2:dd:f5:a3: 6c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:00:D3:2D:2D:EC:CA:C2:A1:34:E0:4D:B8:34:8E:21:52:AF:34:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/629734fc-8070-3d45-9d2e-371f45d21f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:25:8e:c3:a7:30:3f:ab:b5:57:5c:58:d8:31:b6:c9:21:dd: df:db:a5:d8:ff:9c:20:52:89:14:2f:f5:a9:10:c9:a3:58:d9: c6:1e:c3:54:be:01:e9:76:e2:6b:62:1e:37:8a:c0:98:8f:6e: 23:28:51:14:f2:2f:b5:da:1d:ce:e2:68:d7:fa:68:1b:db:e7: 02:74:e1:3a:65:6b:0c:41:b5:e4:af:e9:54:ee:7e:c3:9b:b1: 52:d6:62:31:47:a0:be:78:90:9e:5c:6e:b2:aa:af:e2:86:69: 4e:3a:bb:be:8f:02:d6:c0:cd:34:85:f6:80:78:20:6f:d6:a1: e3:44:fd:73:58:86:ce:05:ff:8e:f4:00:9d:ff:16:f4:db:7d: 7f:b3:18:1a:ed:d1:a4:b9:45:fa:6e:5d:e0:be:3f:7f:22:63: a1:c6:f2:21:f1:54:f9:39:d8:2f:69:65:82:c7:53:a3:5d:c3: c5:ca:e8:c9:ff:84:40:59:0b:e0:73:57:34:a9:e5:fe:51:f6: 7a:2b:1a:44:ad:20:8e:9f:2e:2e:45:c7:ec:ec:02:bd:d4:3f: ae:5a:83:d0:33:b1:51:8a:a1:a7:6c:fd:80:10:b3:47:cc:40: 88:5b:cf:6d:fd:56:00:16:e9:f2:48:12:57:90:22:70:46:5b: bb:47:db:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XIAWRrPJA3uUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk N2FhMTcxNDEtMTE4Zi00MzY3LWJjNWQtY2ExOTM1MzgxYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2MVh38aATtwlKL/GWykdIzekQSNur407SSf zzXbkiUqvJd33A4BvYPSEYqvmk8bjC7o9ZaxMNEmj25NaANhVxlKM5Zkm4izpaHd l0ZBvYabUTeiwBLeoZBix5KkZn0Pjr6cLnkCn58QODBxZPj6xyEvOC1TAsBz1Mk2 q9bYhbcEXsdTfqkEy/yWFbaS9Ulw7FoyR2F5VGoOemvaHtifiUuEyXcJXVZAIPz+ Sh4P0syMtZbijdugGrO8lLRys8A+EGc1pH1hwtG14EMvPghnXTZYnZuKYUiqH6gm ULgBREhAQzslY7E/HOqI2o2yRTnyrQfbx691hoNWo7Ld9aNsWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4A0y0t7MrCoTTgTbg0jiFSrzRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNjI5NzM0ZmMtODA3MC0z ZDQ1LTlkMmUtMzcxZjQ1ZDIxZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4ljsOnMD+rtVdcWNgxtskh3d/bpdj/nCBSiRQv9akQyaNY2cYew1S+ Ael24mtiHjeKwJiPbiMoURTyL7XaHc7iaNf6aBvb5wJ04TplawxBteSv6VTufsOb sVLWYjFHoL54kJ5cbrKqr+KGaU46u76PAtbAzTSF9oB4IG/WoeNE/XNYhs4F/470 AJ3/FvTbfX+zGBrt0aS5RfpuXeC+P38iY6HG8iHxVPk52C9pZYLHU6Ndw8XK6Mn/ hEBZC+BzVzSp5f5R9norGkStII6fLi5Fx+zsAr3UP65ag9AzsVGKoads/YAQs0fM QIhbz239VgAW6fJIEleQInBGW7tH238= -----END CERTIFICATE-----Generated at Wed May 13 11:07:20 2026 by rpki-client