$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/f47923fc-ecfe-3e9c-9894-2c31f0937585.roa File: f47923fc-ecfe-3e9c-9894-2c31f0937585.roa (raw, json) Hash identifier: XjlehmioyAS0Wfvcp2KdQY31yufC5gIrGy/P8YDgW3o= Subject key identifier: CC:5B:99:20:A1:5B:3A:2C:F7:9C:F6:60:26:11:F9:96:19:09:2E:36 Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Certificate serial: 010D0C9F4328584EF40014C88261D0A6B4D1E000 Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/f47923fc-ecfe-3e9c-9894-2c31f0937585.roa Signing time: Tue 25 Aug 2026 10:25:55 +0000 ROA not before: Tue 25 Aug 2026 10:25:55 +0000 ROA not after: Mon 23 Nov 2026 11:25:55 +0000 asID: 33667 IP address blocks: 71.19.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:00:14:c8:82:61:d0:a6:b4:d1:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26 Validity Not Before: Aug 25 10:25:55 2026 GMT Not After : Nov 23 11:25:55 2026 GMT Subject: CN=abf1120a-8093-4580-86d4-eb1d4099577a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:ba:c7:32:68:c2:15:3e:ac:d9:93:22:85: b9:b3:22:5f:1d:39:bb:bb:db:e5:a3:36:78:74:56: c5:54:e3:21:91:6a:6e:80:a8:09:be:4b:74:2e:f4: 05:6e:c6:ee:85:c7:33:43:58:27:ef:b7:6b:33:de: 8a:1c:62:79:c9:c7:db:51:81:c5:f0:87:29:37:88: 6e:d8:2c:81:7f:df:8d:b9:5a:42:03:30:1f:28:87: 44:d6:1e:5a:b0:d7:38:35:78:7f:e8:8c:39:45:1e: a9:4c:4d:d3:c6:fa:63:6d:a3:b5:ba:24:07:70:b2: d8:96:f0:36:1a:71:18:10:d5:3a:14:24:8f:55:2c: 07:66:ac:c2:b2:62:87:bf:71:d4:69:00:fe:97:48: 02:12:1c:09:bc:1b:94:19:a1:49:90:6d:f7:1f:57: 8e:cc:b5:a4:37:30:d9:a2:c1:9b:9c:ba:a0:23:6b: 5f:fe:a9:7c:2f:40:8d:9a:da:cd:1a:62:0c:0d:89: bc:94:f0:b4:e7:81:21:ba:07:26:d3:ba:44:ed:0b: 84:d3:2c:45:5f:e6:38:7b:51:79:71:08:de:23:0f: 41:d2:16:e4:e3:0b:d4:b9:06:85:09:8f:37:a8:f2: c0:b6:67:8e:f4:42:34:5d:7d:ec:45:37:d9:6e:ac: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5B:99:20:A1:5B:3A:2C:F7:9C:F6:60:26:11:F9:96:19:09:2E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/f47923fc-ecfe-3e9c-9894-2c31f0937585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl X509v3 Authority Key Identifier: keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer sbgp-ipAddrBlock: critical IPv4: 71.19.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:fe:8f:85:ce:07:00:b2:c7:a2:7e:32:ca:30:58:20:6e:f4: 34:46:84:98:43:8a:72:bd:35:b8:d0:5c:79:6b:04:22:59:4f: 9a:cf:33:1e:e1:50:95:3e:b1:77:53:19:01:36:a9:28:8a:8b: ba:b5:9e:4d:03:ee:34:cc:14:0a:4d:12:d1:b5:06:ad:15:f3: 1a:d5:f9:3f:8c:93:29:86:d9:07:35:dd:aa:f5:00:ee:40:78: a3:e7:d1:4b:36:05:69:9b:98:33:1c:23:e9:3c:1e:20:ef:64: ae:0a:75:33:e7:0b:85:1d:7e:53:ba:30:d8:18:67:38:72:ca: 86:65:43:77:69:6c:70:4c:09:cd:67:34:db:c6:73:9e:a8:3e: 0e:7d:42:43:81:64:d0:73:63:77:f0:da:f8:c5:e3:64:4f:aa: 78:c3:ea:d7:ce:3c:dc:e5:e2:33:96:44:76:52:f1:8d:e5:16: 7b:82:9d:50:0f:1f:6f:6d:a5:b4:33:1a:b3:b3:b1:64:c5:e1: 14:bc:d5:54:f8:18:0b:6f:4a:ee:02:3e:98:ab:f3:c7:d1:b7: 05:89:05:c3:43:69:7d:88:37:6d:64:53:45:5d:dc:d8:a4:11: a6:d0:65:42:4f:e2:6a:4e:a2:83:41:e2:61:11:91:41:50:36: c2:f0:b8:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70ABTIgmHQprTR4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYWI4YjQtMTZiNi00Y2NiLWJlZmUtYjZkNzlhMzg0 YjI2MB4XDTI2MDgyNTEwMjU1NVoXDTI2MTEyMzExMjU1NVowLzEtMCsGA1UEAxMk YWJmMTEyMGEtODA5My00NTgwLTg2ZDQtZWIxZDQwOTk1NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmm6xzJowhU+rNmTIoW5syJfHTm7u9vlozZ4 dFbFVOMhkWpugKgJvkt0LvQFbsbuhcczQ1gn77drM96KHGJ5ycfbUYHF8IcpN4hu 2CyBf9+NuVpCAzAfKIdE1h5asNc4NXh/6Iw5RR6pTE3TxvpjbaO1uiQHcLLYlvA2 GnEYENU6FCSPVSwHZqzCsmKHv3HUaQD+l0gCEhwJvBuUGaFJkG33H1eOzLWkNzDZ osGbnLqgI2tf/ql8L0CNmtrNGmIMDYm8lPC054Ehugcm07pE7QuE0yxFX+Y4e1F5 cQjeIw9B0hbk4wvUuQaFCY83qPLAtmeO9EI0XX3sRTfZbqwtnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxbmSChWzos95z2YCYR+ZYZCS42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFh YjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3OWEzODRiMjYvZjQ3OTIzZmMtZWNmZS0z ZTljLTk4OTQtMmMzMWYwOTM3NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDlhYWI4YjQtMTZiNi00Y2NiLWJl ZmUtYjZkNzlhMzg0YjI2L2Q5YWFiOGI0LTE2YjYtNGNjYi1iZWZlLWI2ZDc5YTM4 NGIyNi5jcmwwHwYDVR0jBBgwFoAUmh7OwqhkbG3soYWQ/yS1oLJEIckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOWFhYjhiNC0xNmI2LTRjY2ItYmVmZS1iNmQ3 OWEzODRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALT+j4XOBwCyx6J+MsowWCBu9DRGhJhDinK9NbjQXHlrBCJZT5rPMx7h UJU+sXdTGQE2qSiKi7q1nk0D7jTMFApNEtG1Bq0V8xrV+T+MkymG2Qc13ar1AO5A eKPn0Us2BWmbmDMcI+k8HiDvZK4KdTPnC4UdflO6MNgYZzhyyoZlQ3dpbHBMCc1n NNvGc56oPg59QkOBZNBzY3fw2vjF42RPqnjD6tfOPNzl4jOWRHZS8Y3lFnuCnVAP H29tpbQzGrOzsWTF4RS81VT4GAtvSu4CPpir88fRtwWJBcNDaX2IN21kU0Vd3Nik EabQZUJP4mpOooNB4mERkUFQNsLwuAQ= -----END CERTIFICATE-----Generated at Sun Sep 13 07:07:44 2026 by rpki-client