$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa File: 7c9c0f53-d891-3144-bfee-1bcb12654926.roa (raw, json) Hash identifier: Xh1D3+tPgWY86no9qr3RZ04znu/0DOSO0XYZpAhAnk4= Subject key identifier: 87:A1:59:1C:AA:E7:1B:FF:68:4F:E4:C7:98:81:60:9D:1E:CD:14:63 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA4717A4266043F962E900 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 216.71.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:47:17:a4:26:60:43:f9:62:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=67fd8b91-9dd0-479b-b637-f9976bac3a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:46:c6:13:5e:04:a5:5f:3d:b5:67:e1:b9: c7:82:77:4a:41:0d:b8:df:35:4f:4e:b5:5f:f9:d4: dc:b6:4e:44:25:04:2c:98:ce:7a:ee:fd:e2:0e:a2: 55:8f:6a:91:52:ef:34:12:f6:5d:f8:1d:23:f8:1e: d8:08:33:f2:7c:11:2e:82:53:be:f7:e3:d1:5f:15: b1:47:da:1d:08:12:79:3d:66:0f:29:3e:58:89:05: a6:75:d5:60:3d:1a:d1:7d:8d:4d:0e:47:90:99:8e: 49:58:5c:16:ce:36:43:e9:2e:d8:6b:eb:a8:2a:3a: 99:3d:35:d1:78:bc:14:9d:ed:29:ad:7f:92:9e:bd: 86:59:0e:33:69:13:cb:ab:38:4c:23:a5:9d:f6:71: 4c:c0:7b:50:aa:19:a8:ab:b6:12:bc:59:16:86:ac: 9e:ab:2c:28:a4:fa:b6:70:33:e8:b6:34:92:81:d8: 34:e4:e8:08:6e:aa:77:75:6d:c2:0c:52:2f:ca:ec: 59:82:76:77:28:ca:61:89:bf:c8:5f:37:1e:42:50: 13:e6:28:3c:a1:4e:20:e1:db:b8:5b:2f:74:cf:bb: f4:1d:a2:41:0e:b7:93:f1:d2:ef:1a:50:ee:2c:e7: 4b:a4:a7:aa:f7:2d:6e:48:26:df:c5:2c:95:2a:1a: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A1:59:1C:AA:E7:1B:FF:68:4F:E4:C7:98:81:60:9D:1E:CD:14:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:89:f7:2f:d4:0f:37:e3:4f:57:e9:2c:c8:91:36:63:b2:b8: df:f7:d1:5b:14:c0:a3:ec:28:e0:de:20:ac:af:d4:d1:16:e0: de:9d:e0:11:85:f4:ae:1d:b2:8f:dd:86:e4:8d:56:2b:28:42: 69:86:c0:e3:e1:cf:11:82:46:76:44:46:bc:58:5c:9b:78:28: 57:4f:2f:ca:9b:b7:30:62:96:7b:c7:99:e4:0f:0c:ce:d0:bb: 4a:a7:fc:84:52:be:8a:12:0b:a1:e1:22:c2:ea:51:69:19:96: 23:bc:d4:d8:71:bb:15:78:4d:13:8b:31:8c:cc:34:08:63:c6: e6:e0:e0:9c:90:a6:3d:77:15:11:46:2a:65:3e:39:1c:e3:f3: 9a:8f:6e:04:43:d9:e6:1e:ad:9b:f0:84:3f:6a:46:85:03:28: 38:44:5f:6a:a1:40:f9:e9:b7:05:a8:14:8c:7a:3b:86:d4:29: b1:b0:40:50:4f:72:4b:36:7b:06:6a:e3:bd:32:79:2d:6a:ee: 7f:e9:12:83:25:e6:78:2e:d9:c3:32:39:ea:ac:99:7e:ec:99: 9a:47:ba:2f:da:68:24:29:e5:c0:a8:3b:a8:f8:2e:6f:bc:ce: 44:ad:b8:ab:98:99:b0:90:eb:b7:9a:f1:1c:48:e7:dd:d1:92: 48:a1:0e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kcXpCZgQ/li6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjdmZDhiOTEtOWRkMC00NzliLWI2MzctZjk5NzZiYWMzYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSFGxhNeBKVfPbVn4bnHgndKQQ243zVPTrVf +dTctk5EJQQsmM567v3iDqJVj2qRUu80EvZd+B0j+B7YCDPyfBEuglO+9+PRXxWx R9odCBJ5PWYPKT5YiQWmddVgPRrRfY1NDkeQmY5JWFwWzjZD6S7Ya+uoKjqZPTXR eLwUne0prX+Snr2GWQ4zaRPLqzhMI6Wd9nFMwHtQqhmoq7YSvFkWhqyeqywopPq2 cDPotjSSgdg05OgIbqp3dW3CDFIvyuxZgnZ3KMphib/IXzceQlAT5ig8oU4g4du4 Wy90z7v0HaJBDreT8dLvGlDuLOdLpKeq9y1uSCbfxSyVKhoaLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIehWRyq5xv/aE/kx5iBYJ0ezRRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2M5YzBmNTMtZDg5MS0z MTQ0LWJmZWUtMWJjYjEyNjU0OTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+J9y/UDzfjT1fpLMiRNmOyuN/30VsUwKPsKODeIKyv1NEW4N6d4BGF 9K4dso/dhuSNVisoQmmGwOPhzxGCRnZERrxYXJt4KFdPL8qbtzBilnvHmeQPDM7Q u0qn/IRSvooSC6HhIsLqUWkZliO81NhxuxV4TROLMYzMNAhjxubg4JyQpj13FRFG KmU+ORzj85qPbgRD2eYerZvwhD9qRoUDKDhEX2qhQPnptwWoFIx6O4bUKbGwQFBP cks2ewZq470yeS1q7n/pEoMl5ngu2cMyOeqsmX7smZpHui/aaCQp5cCoO6j4Lm+8 zkStuKuYmbCQ67ea8RxI593RkkihDoI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:01:51 2026 by rpki-client