$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/7e7bca19-cd3b-3399-bae1-65fc2f534e1c.roa File: 7e7bca19-cd3b-3399-bae1-65fc2f534e1c.roa (raw, json) Hash identifier: 1GueMnN+Ut9Z8yoSewV6PCs5e2IFHIdrlaImDJdibJw= Subject key identifier: BA:CA:DA:07:F8:2F:03:6D:3D:31:06:9B:0D:47:52:77:F4:C6:62:F8 Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Certificate serial: 010D0C9F4328584EF3FFEAE1FA314E9716702F80 Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/7e7bca19-cd3b-3399-bae1-65fc2f534e1c.roa Signing time: Tue 25 Aug 2026 10:25:35 +0000 ROA not before: Tue 25 Aug 2026 10:25:35 +0000 ROA not after: Mon 23 Nov 2026 11:25:35 +0000 asID: 33651 IP address blocks: 71.19.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:ff:ea:e1:fa:31:4e:97:16:70:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Validity Not Before: Aug 25 10:25:35 2026 GMT Not After : Nov 23 11:25:35 2026 GMT Subject: CN=e9739c2f-0fdd-4ebe-8c58-bf84c6f9aed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:0d:b6:6a:bb:73:d5:03:d2:b3:68:71:7e: d4:c0:10:67:d3:d0:c7:4d:ef:02:d3:31:af:73:e0: f2:7b:3d:ac:d0:c7:5d:49:02:e5:17:09:2a:c4:bf: 30:75:4f:b4:31:92:aa:2d:c9:5c:60:c3:34:12:d4: 19:11:04:9f:47:a5:e9:b1:be:d4:eb:2f:de:d7:b8: 07:33:63:68:1c:cb:5d:ac:91:ac:5e:75:1e:f6:1c: 45:86:7b:36:41:26:9a:27:42:42:cc:72:f1:01:76: 48:b0:55:7f:f7:e1:88:8a:b5:4c:55:d7:d8:1a:8c: 76:71:2d:e5:3d:92:3e:f4:7d:6e:d0:fd:d0:49:ca: e2:bc:22:18:dc:bf:ba:dc:1c:a3:05:49:91:b2:9d: b6:32:c8:11:a2:82:5b:ea:ff:b9:74:4c:7b:57:fe: 2e:c6:7b:99:79:29:c0:2c:c3:4f:d8:f8:c3:77:9d: 97:0e:ef:b8:97:5b:fa:73:ae:cc:4f:2a:0e:00:00: 3a:fc:22:54:d6:ca:c5:f5:43:66:33:bf:ee:92:2b: 8d:4c:52:55:ff:ab:db:1e:05:c3:25:58:51:54:49: 6a:c0:d2:49:09:63:13:ae:96:6b:6c:69:cf:c8:d7: 8d:ff:4d:30:ad:d2:f9:37:ad:00:4b:ca:01:ba:e6: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CA:DA:07:F8:2F:03:6D:3D:31:06:9B:0D:47:52:77:F4:C6:62:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/7e7bca19-cd3b-3399-bae1-65fc2f534e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl X509v3 Authority Key Identifier: keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer sbgp-ipAddrBlock: critical IPv4: 71.19.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0a:2a:c9:e4:9f:aa:0f:c6:2f:9a:55:95:7f:a5:90:8e:63: 27:fc:90:7f:68:57:dc:9e:15:cb:35:07:b5:dc:81:43:3e:e1: 6d:41:f5:a6:59:c9:85:ec:bf:c6:5d:9a:70:30:9a:ab:ef:ba: 2d:52:7d:67:2b:b4:e1:a3:8b:eb:92:a9:62:7a:6d:d0:7e:63: de:bb:60:bf:86:3e:27:2f:6b:73:24:92:da:2e:b1:4c:f7:9b: 83:7b:b0:4e:6b:d1:87:73:f4:d0:67:b6:fe:66:28:af:9d:ce: 4e:9d:ea:83:bf:3a:09:fd:87:bf:19:d0:d4:47:c0:cf:18:2a: 6a:ef:a0:f4:43:d5:21:44:6d:f2:72:5d:7d:b5:18:d3:f1:b7: a1:ed:97:b8:63:da:13:2f:f7:a0:d3:21:45:8b:ff:32:c2:03: 11:e8:15:b3:f5:ec:e7:03:33:2d:7e:71:d8:86:b9:f5:37:08: 6c:37:26:37:02:b8:e5:a4:f1:63:8f:9a:3d:c2:11:6e:d4:7d: a8:3f:2f:ee:9c:d7:67:43:d9:6b:7b:01:0b:e1:f0:4e:42:56: 72:29:d3:05:fa:b1:2a:84:eb:42:d9:5b:72:54:9b:8d:7d:29: d6:51:26:0b:1d:24:36:58:f5:1a:f7:22:06:a2:f1:a4:1d:25: 91:42:ca:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7z/+rh+jFOlxZwL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0 YjI2MB4XDTI2MDgyNTEwMjUzNVoXDTI2MTEyMzExMjUzNVowLzEtMCsGA1UEAxMk ZTk3MzljMmYtMGZkZC00ZWJlLThjNTgtYmY4NGM2ZjlhZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktkNtmq7c9UD0rNocX7UwBBn09DHTe8C0zGv c+Dyez2s0MddSQLlFwkqxL8wdU+0MZKqLclcYMM0EtQZEQSfR6Xpsb7U6y/e17gH M2NoHMtdrJGsXnUe9hxFhns2QSaaJ0JCzHLxAXZIsFV/9+GIirVMVdfYGox2cS3l PZI+9H1u0P3QScrivCIY3L+63ByjBUmRsp22MsgRooJb6v+5dEx7V/4uxnuZeSnA LMNP2PjDd52XDu+4l1v6c67MTyoOAAA6/CJU1srF9UNmM7/ukiuNTFJV/6vbHgXD JVhRVElqwNJJCWMTrpZrbGnPyNeN/00wrdL5N60AS8oBuub8FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrK2gf4LwNtPTEGmw1HUnf0xmL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvN2U3YmNhMTktY2QzYi0z Mzk5LWJhZTEtNjVmYzJmNTM0ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4 NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3 OWEzODRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEKKsnkn6oPxi+aVZV/pZCOYyf8kH9oV9yeFcs1B7XcgUM+4W1B9aZZ yYXsv8ZdmnAwmqvvui1SfWcrtOGji+uSqWJ6bdB+Y967YL+GPicva3MkktousUz3 m4N7sE5r0Ydz9NBntv5mKK+dzk6d6oO/Ogn9h78Z0NRHwM8YKmrvoPRD1SFEbfJy XX21GNPxt6Htl7hj2hMv96DTIUWL/zLCAxHoFbP17OcDMy1+cdiGufU3CGw3JjcC uOWk8WOPmj3CEW7Ufag/L+6c12dD2Wt7AQvh8E5CVnIp0wX6sSqE60LZW3JUm419 KdZRJgsdJDZY9Rr3Igai8aQdJZFCyvI= -----END CERTIFICATE-----Generated at Fri Sep 4 22:48:49 2026 by rpki-client