$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/ac061efe-921a-330f-9ca2-1ced323fe1aa.roa File: ac061efe-921a-330f-9ca2-1ced323fe1aa.roa (raw, json) Hash identifier: Em8YP6m2R58rj4+RJTluX5imcTCxef9IJ6Q17EsGNnU= Subject key identifier: BA:7C:55:4C:01:97:EF:17:6F:91:43:C5:59:1C:61:2E:A5:65:2F:7A Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Certificate serial: 010D0C9F4328584EF3FF87423DC32CE193A9D5BE Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/ac061efe-921a-330f-9ca2-1ced323fe1aa.roa Signing time: Tue 25 Aug 2026 10:24:48 +0000 ROA not before: Tue 25 Aug 2026 10:24:48 +0000 ROA not after: Mon 23 Nov 2026 11:24:48 +0000 asID: 33667 IP address blocks: 71.19.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:ff:87:42:3d:c3:2c:e1:93:a9:d5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Validity Not Before: Aug 25 10:24:48 2026 GMT Not After : Nov 23 11:24:48 2026 GMT Subject: CN=ecea1a45-0380-421e-85b5-d2bd9e95b723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:95:d7:db:0e:f3:04:ab:b0:23:2c:56:27:d1: b6:fe:53:ec:24:3f:18:c6:03:ce:5f:c7:ab:1d:70: 28:7f:32:b7:ad:c1:34:1c:12:0a:76:8f:f3:1a:64: e4:1e:12:a7:90:41:d9:38:a8:d6:14:36:34:80:dd: 20:fe:29:d2:fd:da:44:1d:94:03:11:b4:8f:84:c3: 3e:9e:ee:e4:bd:2e:8f:3f:88:59:05:52:cd:07:39: d2:f1:57:91:45:a4:1b:0d:8d:90:c2:4e:fa:3b:74: 45:58:07:67:cf:38:8f:d6:83:eb:79:47:93:ec:f5: 15:e2:17:37:2d:a4:08:92:1a:af:05:7e:83:49:5f: d1:e6:9a:e0:7d:a4:42:2e:a0:1c:21:f1:a0:bd:09: 3d:f6:c5:25:4c:b6:9d:c4:06:23:0e:e6:39:71:60: 2c:11:97:1a:ba:d0:c4:12:f7:6e:cb:ef:24:91:96: a1:94:49:ef:d3:e9:32:25:46:c1:27:f8:a0:c4:9a: 39:be:7f:9d:bd:87:75:eb:69:e0:9a:13:ec:9b:ce: 8f:59:35:df:1a:36:99:2f:7e:d9:5b:27:dc:64:c8: b8:20:27:4d:7a:9c:e4:46:04:26:14:b1:6e:8a:0d: 1b:85:33:af:ce:af:40:81:29:f5:3f:83:f8:df:41: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7C:55:4C:01:97:EF:17:6F:91:43:C5:59:1C:61:2E:A5:65:2F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/ac061efe-921a-330f-9ca2-1ced323fe1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl X509v3 Authority Key Identifier: keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer sbgp-ipAddrBlock: critical IPv4: 71.19.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:92:18:f7:24:e2:03:69:e6:76:b2:13:0b:85:f9:d3:1f:83: ec:b4:c8:ef:b8:8d:07:41:ce:e4:45:b0:91:c6:c6:b3:b7:28: f9:08:f3:47:d1:20:72:b5:a7:ec:61:54:07:d6:35:c1:b3:7a: 28:20:ef:36:be:c6:df:41:51:04:07:91:5c:73:36:10:d8:5c: ae:80:be:19:93:37:64:a2:0a:d9:bf:72:69:46:d7:8f:88:9c: 10:0f:b1:09:02:47:44:69:2e:fc:17:9d:a1:ba:9e:29:02:19: a0:25:f5:e6:7d:19:44:c6:eb:15:98:a4:7e:02:21:f1:c9:22: d8:ea:e5:ec:8a:e0:69:96:11:97:0c:9d:26:4c:db:f7:9b:2e: 0a:24:91:6c:e1:06:a2:5b:fb:9f:8f:24:f9:4f:26:6b:fd:b7: db:37:e9:d9:40:0b:50:09:89:57:1e:10:51:0d:d9:38:d0:1c: a3:26:8c:4b:ee:29:63:b2:f4:46:22:dd:4e:14:ad:9e:61:9d: 82:a0:a6:e1:f2:60:97:3f:59:58:9a:e8:24:37:03:07:c4:a1: 88:1c:dd:84:ca:f6:5a:a1:c7:ad:7e:af:7d:0d:47:cc:0a:19: d9:62:3c:86:4d:52:e8:f4:81:c5:df:5e:94:c7:17:e2:e0:0c: c3:f5:63:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7z/4dCPcMs4ZOp1b4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0 YjI2MB4XDTI2MDgyNTEwMjQ0OFoXDTI2MTEyMzExMjQ0OFowLzEtMCsGA1UEAxMk ZWNlYTFhNDUtMDM4MC00MjFlLTg1YjUtZDJiZDllOTViNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pXX2w7zBKuwIyxWJ9G2/lPsJD8YxgPOX8er HXAofzK3rcE0HBIKdo/zGmTkHhKnkEHZOKjWFDY0gN0g/inS/dpEHZQDEbSPhMM+ nu7kvS6PP4hZBVLNBznS8VeRRaQbDY2Qwk76O3RFWAdnzziP1oPreUeT7PUV4hc3 LaQIkhqvBX6DSV/R5prgfaRCLqAcIfGgvQk99sUlTLadxAYjDuY5cWAsEZcautDE Evduy+8kkZahlEnv0+kyJUbBJ/igxJo5vn+dvYd162ngmhPsm86PWTXfGjaZL37Z WyfcZMi4ICdNepzkRgQmFLFuig0bhTOvzq9AgSn1P4P430Gq9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp8VUwBl+8Xb5FDxVkcYS6lZS96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvYWMwNjFlZmUtOTIxYS0z MzBmLTljYTItMWNlZDMyM2ZlMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4 NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3 OWEzODRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKSGPck4gNp5nayEwuF+dMfg+y0yO+4jQdBzuRFsJHGxrO3KPkI80fR IHK1p+xhVAfWNcGzeigg7za+xt9BUQQHkVxzNhDYXK6AvhmTN2SiCtm/cmlG14+I nBAPsQkCR0RpLvwXnaG6nikCGaAl9eZ9GUTG6xWYpH4CIfHJItjq5eyK4GmWEZcM nSZM2/ebLgokkWzhBqJb+5+PJPlPJmv9t9s36dlAC1AJiVceEFEN2TjQHKMmjEvu KWOy9EYi3U4UrZ5hnYKgpuHyYJc/WVia6CQ3AwfEoYgc3YTK9lqhx61+r30NR8wK GdliPIZNUuj0gcXfXpTHF+LgDMP1Y8w= -----END CERTIFICATE-----Generated at Sun Sep 13 07:07:42 2026 by rpki-client