$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/41cb2d2e-76ca-37ac-86a0-16be5c3a2e61.roa File: 41cb2d2e-76ca-37ac-86a0-16be5c3a2e61.roa (raw, json) Hash identifier: ya7ylekXaXQWN7+PnZKvv3KJFV6zyhhhxnyj+KCAIsQ= Subject key identifier: EE:AA:AD:2E:EA:7B:25:8F:FF:5D:8D:FA:43:D5:4B:60:61:82:3D:98 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584F31B7C026E312549A26E0A7C0 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/41cb2d2e-76ca-37ac-86a0-16be5c3a2e61.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 11983 IP address blocks: 71.18.191.0/24 maxlen: 24 71.18.192.0/24 maxlen: 24 71.18.193.0/24 maxlen: 24 2605:340:f0d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c0:26:e3:12:54:9a:26:e0:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=222814b9-bf56-47a7-b6a6-04e56becf7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:de:94:db:82:84:90:e1:dc:c1:f6:8e:18: 3f:39:e8:e8:27:ac:ad:b8:16:0f:df:4f:c2:57:8d: af:94:99:97:6e:19:14:1b:fd:4f:31:fd:20:46:37: 05:49:d3:a6:27:54:61:fc:a2:05:09:92:f7:69:54: 4e:14:7c:3e:91:21:f2:3d:22:b6:f4:66:8c:d9:04: 3c:c9:5b:66:28:01:3c:0d:5b:50:9e:9d:0f:27:d3: 75:1b:51:8b:23:e9:e7:e0:4e:6e:9b:11:85:16:a6: 49:0f:50:89:6c:4e:a8:66:05:17:4f:68:7f:52:8a: d0:b0:7f:a3:a8:94:92:18:a5:29:09:89:d2:60:97: 2c:b4:74:c8:98:96:b4:b4:07:8b:69:4f:09:5b:46: fe:08:63:cd:58:9a:52:58:d6:9f:d1:05:54:d9:c1: 69:a3:f3:79:6c:7d:62:89:30:e5:ed:5d:b4:4f:df: 72:1f:64:8a:af:43:1c:36:85:31:41:05:83:5d:6f: 4f:b2:1e:9a:aa:57:c0:82:91:06:45:0c:06:99:6a: 48:7c:9e:bd:7d:5a:fd:0a:dc:3d:6f:77:25:48:5b: 67:97:c4:83:60:1d:f1:e3:d9:c7:03:f6:6f:2a:d8: ed:64:a8:ef:c4:4e:13:1f:66:40:d5:86:9e:d3:d2: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AA:AD:2E:EA:7B:25:8F:FF:5D:8D:FA:43:D5:4B:60:61:82:3D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/41cb2d2e-76ca-37ac-86a0-16be5c3a2e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.191.0-71.18.193.255 IPv6: 2605:340:f0d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5f:1b:15:fd:78:3b:6c:6f:98:99:47:05:c6:c4:c5:9b:d0: fc:15:82:b9:30:22:b8:b8:01:a3:53:a2:99:0c:83:ba:7c:26: e8:90:a3:e3:40:b9:56:33:e6:bd:62:34:31:55:50:bd:ff:08: 3d:95:ae:a2:51:98:57:e7:06:fd:44:d8:29:8e:9c:49:69:59: b5:25:42:0f:86:cc:6e:2e:b4:f2:5d:52:73:f1:fa:2a:0b:24: f3:ed:0b:dc:5e:c6:b0:2e:ba:a5:d0:db:e7:0f:bf:a8:0e:66: a5:82:2a:23:b9:3b:d2:7c:96:b4:f4:8c:98:a6:d1:68:43:d4: 16:74:33:67:0c:19:53:64:57:37:aa:74:cf:59:b0:83:af:db: 96:76:9c:a6:37:a2:ea:2f:75:fa:10:cf:98:81:72:7e:c2:3a: 04:e6:dc:62:63:5e:ba:07:66:78:cd:f3:88:49:ae:18:2c:82: c6:0d:24:3d:ec:7c:9c:b1:88:fd:5b:99:42:00:96:b1:cb:82: cc:6d:cb:16:cf:ad:78:c0:15:2d:bf:a2:47:bd:b6:bf:4d:da: f5:dd:47:89:ef:72:11:0d:7b:5b:13:5e:01:d1:7d:06:0b:35: 13:4c:ab:9c:36:35:ec:e3:4c:f9:92:53:6f:24:79:3b:8d:6d: 03:c5:31:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8xt8Am4xJUmibgp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MjIyODE0YjktYmY1Ni00N2E3LWI2YTYtMDRlNTZiZWNmN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlszelNuChJDh3MH2jhg/OejoJ6ytuBYP30/C V42vlJmXbhkUG/1PMf0gRjcFSdOmJ1Rh/KIFCZL3aVROFHw+kSHyPSK29GaM2QQ8 yVtmKAE8DVtQnp0PJ9N1G1GLI+nn4E5umxGFFqZJD1CJbE6oZgUXT2h/UorQsH+j qJSSGKUpCYnSYJcstHTImJa0tAeLaU8JW0b+CGPNWJpSWNaf0QVU2cFpo/N5bH1i iTDl7V20T99yH2SKr0McNoUxQQWDXW9Psh6aqlfAgpEGRQwGmWpIfJ69fVr9Ctw9 b3clSFtnl8SDYB3x49nHA/ZvKtjtZKjvxE4TH2ZA1Yae09LSgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO6qrS7qeyWP/12N+kPVS2Bhgj2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNDFjYjJkMmUtNzZjYS0z N2FjLTg2YTAtMTZiZTVjM2EyZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBABHEr8D BAFHEsAwDwQCAAIwCQMHACYFA0Dw1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/XxsV/Xg7bG+YmUcFxsTF m9D8FYK5MCK4uAGjU6KZDIO6fCbokKPjQLlWM+a9YjQxVVC9/wg9la6iUZhX5wb9 RNgpjpxJaVm1JUIPhsxuLrTyXVJz8foqCyTz7QvcXsawLrql0NvnD7+oDmalgioj uTvSfJa09IyYptFoQ9QWdDNnDBlTZFc3qnTPWbCDr9uWdpymN6LqL3X6EM+YgXJ+ wjoE5txiY166B2Z4zfOISa4YLILGDSQ97HycsYj9W5lCAJaxy4LMbcsWz614wBUt v6JHvba/Tdr13UeJ73IRDXtbE14B0X0GCzUTTKucNjXs40z5klNvJHk7jW0DxTF8 -----END CERTIFICATE-----Generated at Sun Sep 20 17:21:56 2026 by rpki-client