$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/2a1dbe88-930d-3fb4-9bff-c9c72c15535b.roa File: 2a1dbe88-930d-3fb4-9bff-c9c72c15535b.roa (raw, json) Hash identifier: QoE7oxeuOMIAnwmR0Ia2V/xyNeQAfXNJtaxqM8DzITs= Subject key identifier: 4A:89:8C:13:8D:52:41:65:DC:04:FF:CB:B0:A0:75:B1:0D:80:85:00 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584F348278BF2EEDFCC3B16B9E40 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/2a1dbe88-930d-3fb4-9bff-c9c72c15535b.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 11983 IP address blocks: 71.18.206.0/24 maxlen: 24 71.18.207.0/24 maxlen: 24 71.18.208.0/24 maxlen: 24 2605:340:f0d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:78:bf:2e:ed:fc:c3:b1:6b:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=127154c2-5dc7-4a99-932d-e52f7d86294e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:ea:6d:23:fb:da:de:4c:d1:3b:91:7b:ff: c2:8c:b4:81:44:a8:c9:d0:7b:26:db:fd:96:d8:10: 7d:b8:a1:02:2b:6c:72:7e:ed:9e:d7:71:c1:cf:31: 06:50:dc:62:aa:17:6f:d3:e9:00:2c:c9:d0:b0:fe: cf:65:fc:08:32:f5:4b:1b:66:c6:84:e4:2c:3d:60: 18:26:88:7e:a9:9c:4e:53:1e:b2:91:38:b7:e2:3b: fc:e7:2e:ba:54:7f:43:26:ea:3c:89:27:92:71:bf: 38:38:5e:ce:7c:e1:9a:cb:e8:ed:cb:d7:b3:15:01: ba:16:7e:03:48:8e:f8:43:79:71:a1:46:8c:21:a9: ad:db:5c:d2:71:83:62:6d:82:a7:3c:42:18:fa:56: 3b:bc:af:2f:65:9b:71:ba:3a:12:df:07:1a:9c:9b: bb:af:ed:13:96:95:ad:17:03:4d:94:ad:7f:a3:c7: 96:d8:f4:2f:bc:36:4f:50:cc:80:2e:a7:46:e5:a7: ff:1f:d4:28:5f:6d:d0:19:2a:8a:fa:dd:83:3a:f0: 48:d6:d9:78:da:18:e2:89:18:c2:93:d9:8e:77:57: cf:96:bc:fc:84:a3:11:bb:71:e7:be:b2:92:2a:43: da:a9:16:b4:b4:4a:6c:e5:08:36:68:a1:27:68:92: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:89:8C:13:8D:52:41:65:DC:04:FF:CB:B0:A0:75:B1:0D:80:85:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/2a1dbe88-930d-3fb4-9bff-c9c72c15535b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.206.0-71.18.208.255 IPv6: 2605:340:f0d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9e:03:d4:af:d6:1c:d2:58:eb:b3:86:e9:0e:db:4f:53:9d: b7:47:b1:4f:19:ab:5b:0c:8d:d9:b2:1a:cf:77:93:06:5e:67: fd:0e:fb:49:3e:3b:46:c2:ea:8f:3f:99:2e:85:e7:eb:8e:d2: b8:11:ff:c6:c0:a0:f8:41:1a:40:9c:9e:98:d8:76:91:b3:06: e2:57:f1:92:20:cb:f3:9d:f9:75:49:b2:81:d8:0d:2e:1c:69: fe:33:ff:1e:51:c3:c6:8b:1d:d9:7b:10:dc:87:c3:9a:d4:31: f1:a1:6b:3a:03:57:28:66:0c:37:52:89:02:b7:65:b3:b7:64: bf:e5:ce:f0:3d:d3:57:17:4b:3d:f4:9e:9d:07:30:3c:fc:95: 09:ac:6a:7c:ed:56:ba:f4:85:5a:31:f5:2d:37:ef:67:71:a3: 79:6b:b8:19:32:ba:a8:12:29:86:4c:d3:e1:7c:02:8a:34:9d: 47:c6:8b:6d:12:ee:36:5a:e7:f8:b2:ed:a2:d8:3b:b5:b7:57: 79:9d:53:e2:3a:a4:44:92:48:d1:81:95:00:dc:ad:3e:1a:04: a6:ae:66:88:34:4e:32:9a:0e:c7:0c:29:90:97:70:97:b7:9c: d2:e0:1c:3d:0c:53:b7:3d:85:38:18:c6:9b:ac:66:23:91:af: f6:b0:39:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE80gni/Lu38w7FrnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk MTI3MTU0YzItNWRjNy00YTk5LTkzMmQtZTUyZjdkODYyOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgjqbSP72t5M0TuRe//CjLSBRKjJ0Hsm2/2W 2BB9uKECK2xyfu2e13HBzzEGUNxiqhdv0+kALMnQsP7PZfwIMvVLG2bGhOQsPWAY Joh+qZxOUx6ykTi34jv85y66VH9DJuo8iSeScb84OF7OfOGay+jty9ezFQG6Fn4D SI74Q3lxoUaMIamt21zScYNibYKnPEIY+lY7vK8vZZtxujoS3wcanJu7r+0TlpWt FwNNlK1/o8eW2PQvvDZPUMyALqdG5af/H9QoX23QGSqK+t2DOvBI1tl42hjiiRjC k9mOd1fPlrz8hKMRu3HnvrKSKkPaqRa0tEps5Qg2aKEnaJK52QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEqJjBONUkFl3AT/y7CgdbENgIUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvMmExZGJlODgtOTMwZC0z ZmI0LTliZmYtYzljNzJjMTU1MzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAFHEs4D BABHEtAwDwQCAAIwCQMHACYFA0Dw2TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbngPUr9Yc0ljrs4bpDttP U523R7FPGatbDI3ZshrPd5MGXmf9DvtJPjtGwuqPP5kuhefrjtK4Ef/GwKD4QRpA nJ6Y2HaRswbiV/GSIMvznfl1SbKB2A0uHGn+M/8eUcPGix3ZexDch8Oa1DHxoWs6 A1coZgw3UokCt2Wzt2S/5c7wPdNXF0s99J6dBzA8/JUJrGp87Va69IVaMfUtN+9n caN5a7gZMrqoEimGTNPhfAKKNJ1HxottEu42Wuf4su2i2Du1t1d5nVPiOqREkkjR gZUA3K0+GgSmrmaINE4ymg7HDCmQl3CXt5zS4Bw9DFO3PYU4GMabrGYjka/2sDlu -----END CERTIFICATE-----Generated at Mon Sep 21 18:31:11 2026 by rpki-client