$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/1039c988-ca90-3aee-aa3d-f7a83b374967.roa File: 1039c988-ca90-3aee-aa3d-f7a83b374967.roa (raw, json) Hash identifier: fj5tnxKfHO2ML4gktpvX8DGJWP/Fs3rsbe6tEozyNkA= Subject key identifier: A7:95:DB:A1:03:52:EF:44:8D:D2:A7:49:12:A6:7D:77:BF:C5:21:0A Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Certificate serial: 010D0C9F4328584F96385CF5A4AF9B864A596C40 Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/1039c988-ca90-3aee-aa3d-f7a83b374967.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 33651 IP address blocks: 71.19.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:5c:f5:a4:af:9b:86:4a:59:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=8be49a60-8e5a-4a64-8a26-2b141f7b4ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:da:73:16:a7:f6:00:41:66:69:8b:b4:96:2e: 69:8a:3a:de:23:13:11:02:db:be:57:34:43:75:db: 3d:20:ef:51:d4:c2:11:4d:43:b7:32:1f:4a:bb:49: 5e:18:b5:4c:15:9b:26:b9:ac:a1:eb:c8:10:93:f4: f1:9a:ab:39:77:0d:65:9d:1c:53:c6:01:67:d0:4c: 0c:83:83:5e:07:30:f4:f1:81:ab:11:a2:47:31:86: cc:46:45:66:06:43:7b:e7:88:02:a2:db:bb:8b:03: d5:fb:90:88:6c:a9:0b:c0:1b:e8:bc:8b:a5:d3:bc: c8:79:d1:a9:43:4d:07:8f:0e:28:dc:a3:64:49:f1: 5e:6d:06:c5:5c:89:76:01:55:3b:92:6c:35:f7:ad: 33:ba:99:6f:ff:86:03:17:b3:71:be:36:89:1a:87: 96:bb:4b:6a:34:8e:6f:4d:a7:27:30:dd:99:2e:ea: 9b:6b:3b:a0:a9:48:59:aa:36:43:f7:cd:44:73:e0: 2c:94:9f:97:b9:80:4a:e4:19:f6:2b:7e:5e:2e:bd: 3b:17:ec:c0:4c:9f:0f:06:37:a2:fb:80:e1:b4:87: 37:e3:f6:3b:52:cc:6d:78:c6:01:67:5a:0e:ee:80: 4c:a0:2c:7d:2a:43:75:31:14:b8:35:65:eb:0f:0b: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:95:DB:A1:03:52:EF:44:8D:D2:A7:49:12:A6:7D:77:BF:C5:21:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/1039c988-ca90-3aee-aa3d-f7a83b374967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl X509v3 Authority Key Identifier: keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer sbgp-ipAddrBlock: critical IPv4: 71.19.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f8:27:18:bf:46:cb:c2:a5:5b:2d:5a:a3:4b:4a:ac:ee:f4: b4:e9:e2:10:ed:df:1e:ea:2d:70:4e:32:08:32:30:41:9a:47: c1:11:47:37:3d:6c:ba:af:83:a0:80:27:06:78:46:18:76:44: 0b:eb:96:d8:e1:4c:76:e0:f7:7d:1d:1b:d8:c0:59:c6:bb:3d: 7b:20:4b:e9:b5:81:29:90:39:ac:f9:37:8a:e8:ee:ac:df:8b: 09:85:cf:8a:64:13:1e:15:75:41:1c:48:d6:43:cd:df:6e:e4: 88:b9:32:57:4f:38:c6:97:e1:84:a7:54:84:4e:c1:55:f3:b6: 8a:af:3b:b7:0e:ad:91:81:02:41:ac:e5:91:f1:af:20:d6:ab: 98:e1:d2:d0:3e:86:52:60:ad:d9:6c:a2:a8:e1:ad:35:eb:0a: d7:e9:0e:ef:5b:28:72:b7:98:d9:5f:ea:73:9c:be:a4:e4:db: ca:fb:3d:26:20:6f:c8:95:94:57:4d:b3:74:a2:7d:d8:ce:8a: a0:ac:21:bc:a0:6f:df:25:9a:55:72:a8:f4:01:1b:0e:c5:50: 7d:24:cb:8d:b0:82:cf:c9:ba:cb:41:db:8f:97:44:60:02:8a: 46:f8:77:89:16:a1:44:88:b4:42:a3:f4:c8:d2:6d:0c:80:42: f3:ac:fe:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOFz1pK+bhkpZbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0 YjI2MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk OGJlNDlhNjAtOGU1YS00YTY0LThhMjYtMmIxNDFmN2I0Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9pzFqf2AEFmaYu0li5pijreIxMRAtu+VzRD dds9IO9R1MIRTUO3Mh9Ku0leGLVMFZsmuayh68gQk/Txmqs5dw1lnRxTxgFn0EwM g4NeBzD08YGrEaJHMYbMRkVmBkN754gCotu7iwPV+5CIbKkLwBvovIul07zIedGp Q00Hjw4o3KNkSfFebQbFXIl2AVU7kmw1960zuplv/4YDF7NxvjaJGoeWu0tqNI5v TacnMN2ZLuqbazugqUhZqjZD981Ec+AslJ+XuYBK5Bn2K35eLr07F+zATJ8PBjei +4DhtIc34/Y7UsxteMYBZ1oO7oBMoCx9KkN1MRS4NWXrDwux2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeV26EDUu9EjdKnSRKmfXe/xSEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvMTAzOWM5ODgtY2E5MC0z YWVlLWFhM2QtZjdhODNiMzc0OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4 NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3 OWEzODRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/4Jxi/RsvCpVstWqNLSqzu9LTp4hDt3x7qLXBOMggyMEGaR8ERRzc9 bLqvg6CAJwZ4Rhh2RAvrltjhTHbg930dG9jAWca7PXsgS+m1gSmQOaz5N4ro7qzf iwmFz4pkEx4VdUEcSNZDzd9u5Ii5MldPOMaX4YSnVIROwVXztoqvO7cOrZGBAkGs 5ZHxryDWq5jh0tA+hlJgrdlsoqjhrTXrCtfpDu9bKHK3mNlf6nOcvqTk28r7PSYg b8iVlFdNs3SifdjOiqCsIbygb98lmlVyqPQBGw7FUH0ky42wgs/JustB24+XRGAC ikb4d4kWoUSItEKj9MjSbQyAQvOs/ow= -----END CERTIFICATE-----Generated at Wed Oct 28 05:07:37 2026 by rpki-client