$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/1db7d9a9-80a5-31af-bc1e-fab738f3af73.roa File: 1db7d9a9-80a5-31af-bc1e-fab738f3af73.roa (raw, json) Hash identifier: 6Le4cUi9tkAJn5JS/Upn4NWpT+x+Ux3WGWzcs0PuJjg= Subject key identifier: 3D:DA:7C:EA:96:60:AB:9C:F1:8C:E7:11:C8:F7:28:9A:4D:46:AB:7F Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Certificate serial: 010D0C9F4328584EF3FF721656E7A17E00530300 Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/1db7d9a9-80a5-31af-bc1e-fab738f3af73.roa Signing time: Tue 25 Aug 2026 10:24:38 +0000 ROA not before: Tue 25 Aug 2026 10:24:38 +0000 ROA not after: Mon 23 Nov 2026 11:24:38 +0000 asID: 55201 IP address blocks: 71.19.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:ff:72:16:56:e7:a1:7e:00:53:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Validity Not Before: Aug 25 10:24:38 2026 GMT Not After : Nov 23 11:24:38 2026 GMT Subject: CN=9d433d7d-fd1a-4945-8318-1376e7f45086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:04:8e:3e:0c:68:b7:d6:9f:df:b5:14:10: 14:b5:bb:8e:42:2b:79:2d:34:b0:7f:11:06:12:a8: 16:22:df:da:bf:ad:c6:85:cd:0c:65:b2:b5:ff:99: bb:82:ab:54:20:bf:fe:85:91:0c:40:06:b3:d2:6b: 08:35:e6:53:0b:05:de:46:66:a8:c6:62:d2:bc:ec: 1f:3d:a1:96:15:86:05:26:64:8a:7a:a9:ad:47:e2: f7:fb:cc:d7:79:e0:76:0a:9c:aa:f6:08:50:71:24: da:d0:78:f3:d0:75:f3:67:d2:1a:9d:67:d9:0d:d3: 80:c3:60:16:68:1e:8c:9e:03:b4:7f:c9:08:28:69: 5d:2c:5f:3f:13:a2:65:20:36:7a:fd:15:d8:c1:6d: 7e:41:5c:83:c8:cc:fc:66:96:31:88:9b:40:5f:cc: 0e:4e:84:28:88:28:50:a4:c6:68:79:88:36:03:22: c6:e1:20:ab:0d:a7:4d:b2:d9:3c:d3:29:d6:99:7b: 1a:e2:55:31:13:d4:57:ca:3d:64:2c:74:2b:6f:4c: 17:73:ca:82:21:88:5a:76:93:eb:48:05:50:3e:69: f5:cf:c2:58:29:29:45:7c:38:2d:7c:65:05:5f:fe: 1b:9a:a3:bc:27:45:c1:01:24:a5:5b:67:f5:e2:af: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DA:7C:EA:96:60:AB:9C:F1:8C:E7:11:C8:F7:28:9A:4D:46:AB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/1db7d9a9-80a5-31af-bc1e-fab738f3af73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl X509v3 Authority Key Identifier: keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer sbgp-ipAddrBlock: critical IPv4: 71.19.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6e:5a:10:9c:28:36:27:a6:22:ae:3d:9b:27:5b:48:10:2b: d8:90:7e:bd:b9:dc:ff:8a:9d:a6:24:8f:15:c5:1d:6f:f8:c3: 8d:fb:4f:9d:2f:8f:29:97:a7:31:73:fd:26:84:cd:e2:04:ef: 27:c5:b1:32:c5:50:d0:57:3f:e0:68:d0:fa:d8:a9:2e:9d:f7: 33:14:58:35:87:a9:62:75:00:c0:8c:1f:b1:2e:bd:87:83:e2: 5b:63:e5:11:f6:a1:bd:2f:54:94:77:fc:24:e7:15:33:dd:b9: 4d:31:d3:92:52:d9:8d:27:ea:96:fc:4a:0c:07:ab:c1:66:0b: 58:2f:4c:90:d0:77:04:ac:46:0f:60:70:9f:d6:69:ca:37:2f: 28:1d:a8:9b:6d:f2:5a:6e:00:1e:04:c3:12:e8:59:97:9b:a1: 8b:74:a1:39:48:a1:24:89:8e:6b:d1:08:aa:ee:01:72:0b:c1: 74:c0:c3:43:f2:2b:7b:8c:a4:a2:d9:87:2c:bd:56:d5:46:36: 7f:19:ac:6b:50:7a:58:52:b8:c2:ad:f9:87:2e:19:88:cc:74: 25:05:fa:e8:d1:c0:d8:84:0a:5e:82:39:28:05:06:2e:30:0c: b0:37:ac:4f:09:c5:80:d2:b7:7b:17:2d:34:c4:cc:e1:f0:2f: 24:e6:af:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7z/3IWVuehfgBTAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0 YjI2MB4XDTI2MDgyNTEwMjQzOFoXDTI2MTEyMzExMjQzOFowLzEtMCsGA1UEAxMk OWQ0MzNkN2QtZmQxYS00OTQ1LTgzMTgtMTM3NmU3ZjQ1MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYIEjj4MaLfWn9+1FBAUtbuOQit5LTSwfxEG EqgWIt/av63Ghc0MZbK1/5m7gqtUIL/+hZEMQAaz0msINeZTCwXeRmaoxmLSvOwf PaGWFYYFJmSKeqmtR+L3+8zXeeB2Cpyq9ghQcSTa0Hjz0HXzZ9IanWfZDdOAw2AW aB6MngO0f8kIKGldLF8/E6JlIDZ6/RXYwW1+QVyDyMz8ZpYxiJtAX8wOToQoiChQ pMZoeYg2AyLG4SCrDadNstk80ynWmXsa4lUxE9RXyj1kLHQrb0wXc8qCIYhadpPr SAVQPmn1z8JYKSlFfDgtfGUFX/4bmqO8J0XBASSlW2f14q9eLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3afOqWYKuc8YznEcj3KJpNRqt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvMWRiN2Q5YTktODBhNS0z MWFmLWJjMWUtZmFiNzM4ZjNhZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4 NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3 OWEzODRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZuWhCcKDYnpiKuPZsnW0gQK9iQfr253P+KnaYkjxXFHW/4w437T50v jymXpzFz/SaEzeIE7yfFsTLFUNBXP+Bo0PrYqS6d9zMUWDWHqWJ1AMCMH7EuvYeD 4ltj5RH2ob0vVJR3/CTnFTPduU0x05JS2Y0n6pb8SgwHq8FmC1gvTJDQdwSsRg9g cJ/Waco3LygdqJtt8lpuAB4EwxLoWZeboYt0oTlIoSSJjmvRCKruAXILwXTAw0Py K3uMpKLZhyy9VtVGNn8ZrGtQelhSuMKt+YcuGYjMdCUF+ujRwNiECl6COSgFBi4w DLA3rE8JxYDSt3sXLTTEzOHwLyTmr9E= -----END CERTIFICATE-----Generated at Fri Sep 4 17:43:54 2026 by rpki-client