$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/cb27ae1c-8e00-37ef-a93e-044b930c1411.roa File: cb27ae1c-8e00-37ef-a93e-044b930c1411.roa (raw, json) Hash identifier: S5mH745BqDbrggsw4yIlX2tYxCzbTxe0nCQiJ1rrIQ8= Subject key identifier: 24:00:6B:83:37:37:38:EE:9D:A3:F0:20:B1:CD:47:96:77:E9:73:24 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584F34827039C86333E9D798CCC0 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/cb27ae1c-8e00-37ef-a93e-044b930c1411.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 11983 IP address blocks: 71.18.8.0/24 maxlen: 24 71.18.95.0/24 maxlen: 24 2605:340:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:70:39:c8:63:33:e9:d7:98:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=426f3ade-c2c5-43e7-924b-00d3d143cb21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:30:0f:88:81:16:b0:5c:74:94:fc:8b:ac:48: 06:12:ab:be:e1:68:dc:1d:d6:42:b8:89:bb:9a:02: f6:6f:22:39:60:f7:7e:77:bc:57:1e:92:b0:6d:a3: 19:32:50:7f:50:f6:ff:86:fa:65:7f:95:f1:f8:4b: 1a:55:fe:1a:28:71:a5:86:8c:6e:95:92:5f:22:b0: 16:9e:31:0e:cd:d6:8b:36:3a:a1:09:c6:09:e3:a2: dd:bd:20:2b:9a:25:e7:08:64:c2:93:e9:db:2d:57: 68:ac:eb:b8:96:6e:39:b3:7b:07:12:d5:d3:d1:b3: 5d:88:ae:e6:05:31:4e:29:0e:b0:27:37:ae:68:e5: 21:53:4e:20:33:a2:d8:5a:02:1e:12:8c:b8:f1:03: b0:08:16:6d:7d:dd:2f:f3:dc:46:81:36:66:01:4d: b4:5e:ff:ab:58:21:0c:57:5b:a5:c7:d4:74:f1:70: aa:36:51:60:1f:fa:e7:d3:ac:75:90:6a:ed:2c:37: 3a:e6:b6:82:30:a5:15:10:b6:fd:28:78:d0:52:e7: e6:20:44:e3:84:0e:a0:46:91:c2:c4:e2:dd:1e:9d: 61:da:84:61:2d:54:82:6b:e7:17:9a:64:60:3f:2b: d7:7a:b4:b5:30:0d:19:0c:5a:2e:a1:e9:58:70:54: d6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:6B:83:37:37:38:EE:9D:A3:F0:20:B1:CD:47:96:77:E9:73:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/cb27ae1c-8e00-37ef-a93e-044b930c1411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.8.0/24 71.18.95.0/24 IPv6: 2605:340:f080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:3d:40:63:04:0c:92:b1:28:9b:06:71:b8:02:25:6e:06:1b: 3a:8c:dc:af:d1:f9:ee:83:ed:b7:7d:88:94:cd:59:ec:2d:9f: a1:2b:4f:87:db:5d:d9:1f:97:11:45:34:54:f9:5a:46:3d:34: 91:c6:27:d9:65:69:19:f8:95:22:b8:87:ee:2e:14:2d:f1:3d: f7:f9:53:95:5f:ac:ac:30:b3:41:16:80:9c:7c:e8:ba:62:44: b7:c8:52:a9:59:9e:32:86:a0:17:be:d2:08:6d:5d:23:86:b0: 74:c8:3d:a5:47:ca:19:15:29:62:b6:49:fa:a5:9c:ff:78:8d: 6f:d3:ae:49:43:b4:d3:0f:87:4a:1a:1e:85:c2:ce:c9:6c:d0: 24:14:7f:38:98:1b:49:25:ad:4a:17:38:62:2d:47:22:40:e7: 86:43:85:6d:79:5a:fd:91:88:70:9c:99:67:6a:6c:74:37:92: 18:88:ca:ee:47:a2:f6:84:72:19:8d:c2:f1:b8:cf:7b:47:db: e8:81:95:46:92:cf:85:2b:b0:d6:b3:f8:cd:fd:84:c3:95:05: 76:66:c7:6c:f9:3d:5c:35:85:dc:62:40:21:5b:94:e8:94:74: 1c:df:d4:63:84:dd:ea:b5:f0:69:b1:e0:e3:c0:8b:b9:12:c3: 05:3e:11:0a -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE80gnA5yGMz6deYzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NDI2ZjNhZGUtYzJjNS00M2U3LTkyNGItMDBkM2QxNDNjYjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zAPiIEWsFx0lPyLrEgGEqu+4WjcHdZCuIm7 mgL2byI5YPd+d7xXHpKwbaMZMlB/UPb/hvplf5Xx+EsaVf4aKHGlhoxulZJfIrAW njEOzdaLNjqhCcYJ46LdvSArmiXnCGTCk+nbLVdorOu4lm45s3sHEtXT0bNdiK7m BTFOKQ6wJzeuaOUhU04gM6LYWgIeEoy48QOwCBZtfd0v89xGgTZmAU20Xv+rWCEM V1ulx9R08XCqNlFgH/rn06x1kGrtLDc65raCMKUVELb9KHjQUufmIETjhA6gRpHC xOLdHp1h2oRhLVSCa+cXmmRgPyvXerS1MA0ZDFouoelYcFTW8QIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFCQAa4M3NzjunaPwILHNR5Z36XMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvY2IyN2FlMWMtOGUwMC0z N2VmLWE5M2UtMDQ0YjkzMGMxNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQARxIIAwQA RxJfMA8EAgACMAkDBwAmBQNA8IAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsz1AYwQMkrEomwZxuAIlbgYb Oozcr9H57oPtt32IlM1Z7C2foStPh9td2R+XEUU0VPlaRj00kcYn2WVpGfiVIriH 7i4ULfE99/lTlV+srDCzQRaAnHzoumJEt8hSqVmeMoagF77SCG1dI4awdMg9pUfK GRUpYrZJ+qWc/3iNb9OuSUO00w+HShoehcLOyWzQJBR/OJgbSSWtShc4Yi1HIkDn hkOFbXla/ZGIcJyZZ2psdDeSGIjK7kei9oRyGY3C8bjPe0fb6IGVRpLPhSuw1rP4 zf2Ew5UFdmbHbPk9XDWF3GJAIVuU6JR0HN/UY4Td6rXwabHg48CLuRLDBT4RCg== -----END CERTIFICATE-----Generated at Tue Sep 22 18:32:08 2026 by rpki-client