$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/bc6de5d9-e2de-3092-889f-e190027b8a82.roa File: bc6de5d9-e2de-3092-889f-e190027b8a82.roa (raw, json) Hash identifier: qGOvfWzQeW5zCfLJoIUhEdCQ2xKsA3jDOOm8B6hHhaM= Subject key identifier: 95:70:0F:B1:78:E1:EC:7A:26:29:24:28:FF:0E:C0:8D:9E:85:7D:E8 Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Certificate serial: 010D0C9F4328584F4987B46894F4572202406208 Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/bc6de5d9-e2de-3092-889f-e190027b8a82.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4766 IP address blocks: 71.19.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:b4:68:94:f4:57:22:02:40:62:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=01537149-1ffe-466e-a6a7-0b95798e7dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:f9:73:48:95:3b:13:e8:71:79:71:d6:ff: 79:0d:c7:ae:9d:2c:4e:89:e7:65:58:b1:63:52:97: c0:b1:1f:72:d9:1d:08:b0:8d:cc:ae:13:3e:61:b8: d3:c5:6b:a2:03:e0:ab:15:98:60:f9:8b:7a:0d:fe: 1e:ea:63:2f:85:74:be:8f:9b:9d:09:e6:94:8d:de: 7e:ef:10:f6:dc:d8:d7:58:c1:b6:b8:13:bc:49:23: 2f:3d:e5:fa:3d:be:9f:b0:bf:5a:91:01:3a:a5:16: e1:04:1a:2b:12:58:db:3d:95:60:f8:36:98:9d:39: 36:5a:8e:ee:42:b6:3a:dc:e7:09:8f:f9:d8:f8:cd: 1e:b5:97:dc:b8:af:8a:e3:8e:b3:32:16:17:fe:bb: ee:8c:31:af:ba:e0:98:c7:f2:af:68:c7:5e:75:95: 06:d6:70:79:6d:82:e0:4c:a1:61:75:8d:dc:b0:71: 1c:ad:58:b8:0b:5e:dc:80:fb:58:ac:7e:aa:b0:72: 04:30:48:c9:f8:63:08:39:c9:7f:a5:d4:50:88:1d: 49:88:a7:07:55:da:52:c2:bf:05:7a:ef:fe:d9:fa: 6f:98:b2:62:b7:c4:1a:eb:cd:a0:10:8c:e7:d8:9d: 1d:64:4e:fe:a7:fc:79:b9:49:41:e8:c7:27:3d:3d: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:70:0F:B1:78:E1:EC:7A:26:29:24:28:FF:0E:C0:8D:9E:85:7D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/bc6de5d9-e2de-3092-889f-e190027b8a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl X509v3 Authority Key Identifier: keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer sbgp-ipAddrBlock: critical IPv4: 71.19.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:42:f2:2d:c5:fc:52:c8:d6:9a:ed:f8:c6:ed:28:72:94:f8: d1:a4:46:1c:c4:34:37:cf:57:ec:3c:d8:ff:e0:89:23:cd:80: 52:04:6d:23:29:e3:3c:a4:b9:fb:4b:dd:0a:a5:0e:16:15:60: 4d:a9:2a:d6:f9:e7:cb:01:48:a3:2c:fe:b1:97:63:be:ee:ab: 3d:ba:64:4e:f4:6d:52:22:21:7c:5d:51:8e:09:51:68:ed:a1: f4:ec:d2:a4:32:4f:fb:8e:a1:75:18:26:be:9c:56:3a:52:2c: 98:ef:b3:c9:28:11:f7:4d:4e:6a:80:06:a2:be:3a:ab:3a:fc: 8d:c7:f5:79:31:4d:43:c1:93:86:63:78:b2:5d:98:26:35:9b: 41:2d:69:c6:cc:78:7d:25:82:38:18:df:10:f8:a4:c4:4f:60: 91:3e:38:68:09:5b:8d:a9:49:24:62:ac:27:0b:98:0a:ee:cd: ea:f3:f1:70:18:79:12:0e:e9:51:5e:fb:2e:95:a3:85:6f:f0: 87:00:5b:53:9c:b6:19:e7:83:f5:30:f5:59:1a:58:91:a2:77: 03:4d:c3:39:b2:0e:5f:7a:07:eb:3d:0b:a8:e1:bf:7e:0b:10: 14:ec:83:f2:0a:b1:75:7c:aa:cc:6e:40:c5:57:49:26:5f:b2: 0d:52:bd:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh7RolPRXIgJAYggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0 YjI2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDE1MzcxNDktMWZmZS00NjZlLWE2YTctMGI5NTc5OGU3ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkX5c0iVOxPocXlx1v95DceunSxOiedlWLFj UpfAsR9y2R0IsI3MrhM+YbjTxWuiA+CrFZhg+Yt6Df4e6mMvhXS+j5udCeaUjd5+ 7xD23NjXWMG2uBO8SSMvPeX6Pb6fsL9akQE6pRbhBBorEljbPZVg+DaYnTk2Wo7u QrY63OcJj/nY+M0etZfcuK+K446zMhYX/rvujDGvuuCYx/KvaMdedZUG1nB5bYLg TKFhdY3csHEcrVi4C17cgPtYrH6qsHIEMEjJ+GMIOcl/pdRQiB1JiKcHVdpSwr8F eu/+2fpvmLJit8Qa682gEIzn2J0dZE7+p/x5uUlB6McnPT2nQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVwD7F44ex6JikkKP8OwI2ehX3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvYmM2ZGU1ZDktZTJkZS0z MDkyLTg4OWYtZTE5MDAyN2I4YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4 NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3 OWEzODRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxOHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVC8i3F/FLI1prt+MbtKHKU+NGkRhzENDfPV+w82P/giSPNgFIEbSMp 4zykuftL3QqlDhYVYE2pKtb558sBSKMs/rGXY77uqz26ZE70bVIiIXxdUY4JUWjt ofTs0qQyT/uOoXUYJr6cVjpSLJjvs8koEfdNTmqABqK+Oqs6/I3H9XkxTUPBk4Zj eLJdmCY1m0EtacbMeH0lgjgY3xD4pMRPYJE+OGgJW42pSSRirCcLmAruzerz8XAY eRIO6VFe+y6Vo4Vv8IcAW1Octhnng/Uw9VkaWJGidwNNwzmyDl96B+s9C6jhv34L EBTsg/IKsXV8qsxuQMVXSSZfsg1SvZI= -----END CERTIFICATE-----Generated at Sun Oct 25 11:27:59 2026 by rpki-client