$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/4d048d12-e7c7-3dab-adf4-898c9e60433c.roa File: 4d048d12-e7c7-3dab-adf4-898c9e60433c.roa (raw, json) Hash identifier: 4LAQ3HoebR6yMicppeOVE2sMnwo5dUsc2Z7AunTaHgE= Subject key identifier: F1:20:11:89:5B:EB:E1:0C:65:C9:D4:B1:8C:1B:83:4E:00:18:B1:09 Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Certificate serial: 010D0C9F4328584F0AA6634FA7380739152B9900 Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/4d048d12-e7c7-3dab-adf4-898c9e60433c.roa Signing time: Wed 02 Sep 2026 13:08:47 +0000 ROA not before: Wed 02 Sep 2026 13:08:47 +0000 ROA not after: Tue 01 Dec 2026 14:08:47 +0000 asID: 148996 IP address blocks: 71.19.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a6:63:4f:a7:38:07:39:15:2b:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Validity Not Before: Sep 2 13:08:47 2026 GMT Not After : Dec 1 14:08:47 2026 GMT Subject: CN=aef27c3a-4807-4599-9afa-f14c611ebd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:75:b6:fa:cc:64:8b:dc:50:6e:6e:75:c6:8b: cb:32:d1:6d:29:db:22:b6:7a:fd:3d:95:51:cb:2f: ad:13:bb:c5:e7:e1:76:39:01:90:b2:32:a5:4e:a8: 0a:94:38:db:c0:92:bb:aa:69:d7:22:44:91:56:9e: f6:a8:eb:b3:3b:46:b7:32:23:39:0b:61:72:85:15: 3f:02:f7:5b:2a:f4:d2:15:24:98:c0:91:37:d6:3c: 4d:80:7e:42:ec:ae:05:89:57:0d:71:14:12:dd:75: ae:4a:95:86:e3:4d:11:0a:f2:a6:c2:ae:cd:71:65: 3f:f5:a8:32:d5:a6:83:06:e0:8d:d5:6f:b3:06:f7: 29:25:e7:c2:92:f5:4d:ba:f6:ee:ff:f2:f5:48:af: 76:da:37:9a:df:42:e6:2a:54:50:c7:92:56:84:01: 0d:e7:6d:ab:97:2c:fc:3f:bc:ab:b6:69:48:d9:44: fb:2f:cc:e7:7a:27:3a:1a:5b:86:ec:cc:73:5b:3d: 75:e2:e8:9a:c0:d1:75:b3:88:40:5e:2f:80:23:c9: dd:84:2e:5d:c5:a6:d1:d7:1d:ab:cc:4b:83:80:cb: 5a:a5:f9:63:eb:0f:6b:60:14:f1:53:88:23:33:50: 92:bd:30:e7:a1:11:57:b5:28:7d:d7:98:fb:dd:f1: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:20:11:89:5B:EB:E1:0C:65:C9:D4:B1:8C:1B:83:4E:00:18:B1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/4d048d12-e7c7-3dab-adf4-898c9e60433c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl X509v3 Authority Key Identifier: keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer sbgp-ipAddrBlock: critical IPv4: 71.19.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:99:c7:26:51:dc:d5:30:6d:e4:31:6c:8a:46:a4:88:08:a5: 90:ab:40:55:f7:56:8c:fb:32:af:b9:83:11:96:43:42:1a:a9: 3d:b3:ea:48:1c:50:eb:e8:c3:7d:59:d7:da:01:d6:8d:b3:c3: c1:87:27:da:a0:40:b7:ab:bf:8e:f6:a1:00:f1:34:ed:0b:27: b0:0e:dc:96:3a:b6:32:38:29:40:b2:b9:39:d8:36:a4:05:5a: e2:11:53:59:6f:25:80:bd:e9:ba:a3:2b:0f:9f:6c:fc:d8:21: 46:06:bc:d8:58:48:c2:fe:2d:eb:f1:84:fb:71:bc:71:39:e2: 21:ef:e0:17:cf:a9:e0:b1:a5:cc:91:3a:cf:22:42:69:8b:c9: 07:27:0d:ab:6f:6c:1b:2e:80:68:5c:2c:29:3f:b6:ee:0f:85: c5:b0:61:0a:3d:64:91:e5:e9:95:f1:95:d0:d9:7c:9a:e4:a3: e7:10:c6:6a:a8:2d:9f:70:ce:8f:d4:36:06:da:99:a2:20:04: 50:27:d0:89:b9:f9:6c:5a:e5:fd:86:17:8a:bf:bc:77:1c:23: d3:de:73:af:b5:6c:95:e3:93:9f:3d:68:3a:d1:6c:0c:2b:07: 17:69:83:a5:c9:c2:35:68:fd:1e:ab:e0:e9:12:b9:69:63:bd: d1:71:1c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KpmNPpzgHORUrmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0 YjI2MB4XDTI2MDkwMjEzMDg0N1oXDTI2MTIwMTE0MDg0N1owLzEtMCsGA1UEAxMk YWVmMjdjM2EtNDgwNy00NTk5LTlhZmEtZjE0YzYxMWViZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3W2+sxki9xQbm51xovLMtFtKdsitnr9PZVR yy+tE7vF5+F2OQGQsjKlTqgKlDjbwJK7qmnXIkSRVp72qOuzO0a3MiM5C2FyhRU/ AvdbKvTSFSSYwJE31jxNgH5C7K4FiVcNcRQS3XWuSpWG400RCvKmwq7NcWU/9agy 1aaDBuCN1W+zBvcpJefCkvVNuvbu//L1SK922jea30LmKlRQx5JWhAEN522rlyz8 P7yrtmlI2UT7L8zneic6GluG7MxzWz114uiawNF1s4hAXi+AI8ndhC5dxabR1x2r zEuDgMtapflj6w9rYBTxU4gjM1CSvTDnoRFXtSh915j73fEqwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEgEYlb6+EMZcnUsYwbg04AGLEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvNGQwNDhkMTItZTdjNy0z ZGFiLWFkZjQtODk4YzllNjA0MzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4 NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3 OWEzODRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxOHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOZxyZR3NUwbeQxbIpGpIgIpZCrQFX3Voz7Mq+5gxGWQ0IaqT2z6kgc UOvow31Z19oB1o2zw8GHJ9qgQLerv472oQDxNO0LJ7AO3JY6tjI4KUCyuTnYNqQF WuIRU1lvJYC96bqjKw+fbPzYIUYGvNhYSML+LevxhPtxvHE54iHv4BfPqeCxpcyR Os8iQmmLyQcnDatvbBsugGhcLCk/tu4PhcWwYQo9ZJHl6ZXxldDZfJrko+cQxmqo LZ9wzo/UNgbamaIgBFAn0Im5+Wxa5f2GF4q/vHccI9Pec6+1bJXjk589aDrRbAwr Bxdpg6XJwjVo/R6r4OkSuWljvdFxHHo= -----END CERTIFICATE-----Generated at Sun Sep 13 07:06:55 2026 by rpki-client