$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa File: 4206828a-08cf-3ab8-8041-7bebab088add.roa (raw, json) Hash identifier: 6p/Iss5/sTlNQsyw1vBAOAnNQ+vTB2c+cz9qPm+KXfo= Subject key identifier: 03:64:1A:B1:A6:14:D1:B9:8A:84:D6:E9:7B:57:7C:76:94:1D:80:AC Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584DF6409A858BCA04B6F0236C80 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 138699 IP address blocks: 71.18.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:9a:85:8b:ca:04:b6:f0:23:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=a212ab07-0c1b-4292-aec5-4098c4c33bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:92:1f:13:2e:55:23:98:b2:a9:14:d7:67: 60:f3:24:18:b7:a2:5b:a8:29:81:8a:f1:b9:3a:13: 8a:c7:68:62:a9:90:f0:3a:f9:71:11:16:1a:c5:96: 59:94:16:53:87:01:35:fb:d1:18:ba:f4:0b:7e:c5: 51:0b:ef:4c:ce:f3:a5:e8:07:55:ed:6d:e6:14:59: f8:a4:e6:4a:c8:46:d0:16:35:f3:d4:f3:33:d6:2b: 47:68:c0:4c:62:3d:dc:04:b9:4a:ea:82:0f:ae:62: 0d:12:07:6b:30:92:21:95:7e:17:80:a4:84:37:82: 5c:33:03:66:f2:a2:71:97:ae:a6:12:e9:0e:28:e3: df:47:5a:8c:7f:78:a0:16:cf:52:4f:3f:70:14:c8: cf:ac:eb:49:c9:37:ac:81:a2:04:2f:b6:c9:ba:43: 3f:a5:83:63:fe:16:bf:95:8d:4a:97:4b:54:fa:ac: ae:73:8a:ef:4e:1a:22:3d:a7:89:a3:e2:79:ff:53: 5f:11:fd:71:18:a3:86:18:84:a6:52:d5:f7:e5:25: cf:b1:15:22:ae:e8:69:43:9d:85:e0:cd:c6:11:8d: 8e:6d:82:27:56:76:6a:04:13:f6:8c:1b:7d:8c:0a: d6:83:86:8f:8d:49:0b:2b:72:c7:95:1e:fe:df:f2: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:64:1A:B1:A6:14:D1:B9:8A:84:D6:E9:7B:57:7C:76:94:1D:80:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bd:c0:27:6a:7c:1d:9e:8a:1d:af:f8:d9:26:df:be:b5:85: 2c:47:2a:c2:74:c5:8d:1c:5c:58:f5:52:bf:f6:9d:95:64:01: 22:c7:7f:b1:f2:06:45:34:eb:2b:27:b1:f2:ac:21:8c:60:c3: 90:17:9d:d2:6a:7c:50:a6:dd:40:81:7b:d7:aa:b7:90:55:42: 91:ba:02:bd:eb:e0:df:90:4c:94:bb:14:ae:ea:13:46:dc:e1: 87:0e:b3:1a:ef:a5:fa:ef:69:6b:e3:e2:f6:31:a1:25:4a:a7: 8b:89:65:54:9a:10:6d:61:00:b2:a8:4a:e6:49:4a:97:e2:81: 3d:65:71:b6:b9:be:2a:21:58:e1:bc:75:27:66:39:69:5a:f6: 0e:b6:d1:13:fd:38:11:ed:8b:f9:35:61:ab:37:7d:96:c6:61: 59:d0:dd:a7:08:aa:c0:04:93:32:d6:fa:20:03:7d:0c:b2:5e: b8:73:b7:c0:c6:9c:17:c1:12:bb:b7:5e:f7:4f:a8:5e:2e:8f: 77:74:3b:f7:c0:d5:90:21:dc:43:48:16:43:4c:1d:f7:fb:68: ee:63:00:3d:11:68:39:40:ca:74:f4:bb:91:b5:71:5c:ea:8d: 4f:42:78:f2:9f:b9:9e:6d:fe:fd:30:a5:5e:0b:cf:d4:25:f5: 42:05:71:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QJqFi8oEtvAjbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk YTIxMmFiMDctMGMxYi00MjkyLWFlYzUtNDA5OGM0YzMzYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYeSHxMuVSOYsqkU12dg8yQYt6JbqCmBivG5 OhOKx2hiqZDwOvlxERYaxZZZlBZThwE1+9EYuvQLfsVRC+9MzvOl6AdV7W3mFFn4 pOZKyEbQFjXz1PMz1itHaMBMYj3cBLlK6oIPrmINEgdrMJIhlX4XgKSEN4JcMwNm 8qJxl66mEukOKOPfR1qMf3igFs9STz9wFMjPrOtJyTesgaIEL7bJukM/pYNj/ha/ lY1Kl0tU+qyuc4rvThoiPaeJo+J5/1NfEf1xGKOGGISmUtX35SXPsRUiruhpQ52F 4M3GEY2ObYInVnZqBBP2jBt9jArWg4aPjUkLK3LHlR7+3/J7iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANkGrGmFNG5ioTW6XtXfHaUHYCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNDIwNjgyOGEtMDhjZi0z YWI4LTgwNDEtN2JlYmFiMDg4YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxL3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC9wCdqfB2eih2v+Nkm3761hSxHKsJ0xY0cXFj1Ur/2nZVkASLHf7Hy BkU06ysnsfKsIYxgw5AXndJqfFCm3UCBe9eqt5BVQpG6Ar3r4N+QTJS7FK7qE0bc 4YcOsxrvpfrvaWvj4vYxoSVKp4uJZVSaEG1hALKoSuZJSpfigT1lcba5viohWOG8 dSdmOWla9g620RP9OBHti/k1Yas3fZbGYVnQ3acIqsAEkzLW+iADfQyyXrhzt8DG nBfBEru3XvdPqF4uj3d0O/fA1ZAh3ENIFkNMHff7aO5jAD0RaDlAynT0u5G1cVzq jU9CePKfuZ5t/v0wpV4Lz9Ql9UIFcQs= -----END CERTIFICATE-----Generated at Thu May 28 16:47:32 2026 by rpki-client