$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa File: a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa (raw, json) Hash identifier: 0vELKfxNpqsPd/exya1+JT6KhGXCfKsAqSRYgm0Vv/0= Subject key identifier: CE:6B:65:84:9F:EA:A1:38:0F:79:B0:86:AF:20:DD:80:63:1A:AE:04 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F42781CDC680566FE98A8C080 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16417 IP address blocks: 216.71.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1c:dc:68:05:66:fe:98:a8:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=7c53303c-4f12-4575-bfd9-478baf2e0d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:42:b8:d8:2a:88:a7:81:2e:bc:e0:e2:06: a9:ce:f6:9d:cc:cd:00:c0:18:62:f8:b2:3d:18:ba: 85:2a:86:e0:11:b3:f3:ef:6b:ce:d6:fc:e4:dd:f9: c7:f6:7c:b8:ae:b6:24:46:66:d8:9f:9a:ab:9b:9c: 5b:6d:d9:b0:f9:63:10:bc:f0:cd:3d:e4:7b:f7:9d: c8:e2:80:39:84:c9:72:6c:1f:57:e8:6b:68:df:06: 1a:77:c4:33:a8:58:9c:6b:82:06:84:30:d3:f0:52: 88:83:50:54:ad:60:53:9e:e8:99:67:f0:a6:e3:6f: 39:90:d4:64:d9:95:b8:42:73:be:86:3c:e4:55:97: cb:cd:8b:33:88:4a:2b:23:28:90:87:0e:a1:e4:dc: 2e:7a:9b:05:e5:90:42:7b:93:eb:68:18:72:2f:06: eb:3b:fd:b3:10:ed:eb:fc:a8:7d:4c:ad:61:2d:45: 9c:4b:f2:2c:1c:28:12:52:5e:a1:55:cd:97:1c:8e: 87:47:f1:f5:6c:cb:e1:09:1d:1b:b5:8a:47:be:a1: 87:97:91:e6:b8:0d:e5:5e:b5:d9:8f:10:b3:0a:0c: 18:16:d7:72:05:86:41:9c:cb:d2:df:3e:88:15:47: 1a:60:9a:c0:a9:6c:6d:c8:61:a9:d0:94:18:c5:c7: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:65:84:9F:EA:A1:38:0F:79:B0:86:AF:20:DD:80:63:1A:AE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ab:f3:a8:42:d9:fd:9e:c7:4e:4f:ad:9a:98:80:8c:bb:b1: d1:4d:45:ec:73:d8:64:16:87:b8:50:9b:58:36:76:52:d8:80: 6e:cc:79:90:37:d7:80:f2:51:b5:84:12:80:67:11:48:ad:5e: ba:4a:35:a2:a0:4f:6e:3c:8d:14:a9:b1:77:f5:1c:47:36:4a: 6e:f7:56:9c:9e:82:a2:38:70:36:4a:5d:ce:d9:84:40:1b:14: 77:9c:6f:6e:e1:6f:bc:3a:8d:d9:a0:0f:02:28:f6:5d:45:98: f5:01:39:2e:fe:a5:9f:4a:28:fb:00:75:68:cd:84:f3:d1:64: 69:eb:33:72:76:51:59:89:d5:93:50:f5:19:b9:01:52:53:29: 34:46:9f:a8:0f:a9:bf:4e:97:0b:6f:3f:47:03:9f:a8:b5:3e: c0:17:0d:e7:7a:59:0b:e0:f6:4c:be:a4:50:f5:5f:05:33:25: 05:74:9a:74:4c:b0:58:2e:e3:d5:5d:0f:a5:d5:7c:47:fa:c1: a2:6c:15:c7:8d:bc:e4:00:c1:64:f5:48:dc:18:b6:b5:bc:ea: 7b:25:58:de:44:30:c9:87:e4:bb:6f:78:7e:61:86:0e:0c:e7: d0:51:d4:9a:11:fa:fa:8e:1a:3d:5c:4c:48:c7:d2:2e:87:fb: 9b:01:21:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeBzcaAVm/piowIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk N2M1MzMwM2MtNGYxMi00NTc1LWJmZDktNDc4YmFmMmUwZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglNCuNgqiKeBLrzg4gapzvadzM0AwBhi+LI9 GLqFKobgEbPz72vO1vzk3fnH9ny4rrYkRmbYn5qrm5xbbdmw+WMQvPDNPeR7953I 4oA5hMlybB9X6Gto3wYad8QzqFica4IGhDDT8FKIg1BUrWBTnuiZZ/Cm4285kNRk 2ZW4QnO+hjzkVZfLzYsziEorIyiQhw6h5NwuepsF5ZBCe5PraBhyLwbrO/2zEO3r /Kh9TK1hLUWcS/IsHCgSUl6hVc2XHI6HR/H1bMvhCR0btYpHvqGHl5HmuA3lXrXZ jxCzCgwYFtdyBYZBnMvS3z6IFUcaYJrAqWxtyGGp0JQYxcdbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5rZYSf6qE4D3mwhq8g3YBjGq4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTg2MGY0OTctNTFjMC0z NjFjLWIzZDAtMWUzZGFkNGM3YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKr86hC2f2ex05PrZqYgIy7sdFNRexz2GQWh7hQm1g2dlLYgG7MeZA3 14DyUbWEEoBnEUitXrpKNaKgT248jRSpsXf1HEc2Sm73VpyegqI4cDZKXc7ZhEAb FHecb27hb7w6jdmgDwIo9l1FmPUBOS7+pZ9KKPsAdWjNhPPRZGnrM3J2UVmJ1ZNQ 9Rm5AVJTKTRGn6gPqb9OlwtvP0cDn6i1PsAXDed6WQvg9ky+pFD1XwUzJQV0mnRM sFgu49VdD6XVfEf6waJsFceNvOQAwWT1SNwYtrW86nslWN5EMMmH5LtveH5hhg4M 59BR1JoR+vqOGj1cTEjH0i6H+5sBIZE= -----END CERTIFICATE-----Generated at Mon Sep 28 10:03:10 2026 by rpki-client