$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa File: 43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa (raw, json) Hash identifier: 9R1pg/GmWCbVngsB+ZADObCwM2sb0A8gwEDP+018zO8= Subject key identifier: FC:55:57:EB:CF:D7:B3:D6:99:CD:78:3B:D8:62:E7:A0:53:E5:12:2F Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584DDBBB0AC01B24E5992DBEFFE0 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa Signing time: Sun 17 May 2026 01:00:24 +0000 ROA not before: Sun 17 May 2026 01:00:24 +0000 ROA not after: Sat 15 Aug 2026 01:00:24 +0000 asID: 138699 IP address blocks: 71.18.248.0/24 maxlen: 24 71.18.249.0/24 maxlen: 24 71.18.250.0/24 maxlen: 24 71.18.251.0/24 maxlen: 24 71.18.252.0/24 maxlen: 24 71.18.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:bb:0a:c0:1b:24:e5:99:2d:be:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: May 17 01:00:24 2026 GMT Not After : Aug 15 01:00:24 2026 GMT Subject: CN=c3fe6c3e-9853-4d12-a7d8-a410123bb48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2d:06:a6:bb:0e:a0:40:fc:4f:05:a3:29:3c: 8f:ba:4e:6f:f8:9b:6b:95:68:0c:5d:32:e8:85:86: 1b:8e:98:bf:4b:41:0a:e4:93:f6:16:cc:aa:f1:f4: 99:2c:8f:63:7c:0c:05:1d:71:56:b3:5b:98:29:78: 98:64:7a:63:de:e2:c5:fa:0f:72:ca:c8:fb:d3:23: 45:7b:75:f8:e5:37:d6:cd:0e:ff:95:bb:e0:64:92: 2f:46:a7:ed:37:82:44:61:04:90:71:53:81:c7:b8: 91:48:64:4c:26:27:90:81:9b:43:49:91:6a:32:17: ae:80:56:d7:28:2d:29:c5:06:76:61:d6:92:3d:65: 87:1c:39:7b:d9:cc:0b:37:6c:af:2c:a3:4a:09:93: 05:2b:d5:8d:3b:c6:95:3b:2d:ee:54:28:21:6d:dc: a1:06:c0:9c:1d:3e:7f:01:b7:e5:da:a5:54:30:80: 13:42:19:c3:fd:38:19:ec:6e:b0:ba:e3:53:59:19: 23:6b:c6:88:0d:3b:75:80:63:7e:23:cf:81:0d:39: 32:63:d9:20:f2:6d:b3:73:70:1b:cf:18:c7:5f:b7: 95:8e:12:1b:9e:63:4c:59:96:d5:bf:34:b5:5b:09: 36:74:34:e5:03:2c:06:f2:d3:a7:b3:ce:c4:e2:1e: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:55:57:EB:CF:D7:B3:D6:99:CD:78:3B:D8:62:E7:A0:53:E5:12:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.248.0-71.18.253.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:2d:5b:0a:c6:a0:6e:7f:f6:d1:d4:77:53:b4:f4:d0:a5:35: f2:c2:1c:85:d9:27:9b:c1:50:9d:9d:fb:ed:67:cd:a3:97:3c: c0:48:2a:dc:75:83:e5:c7:08:6c:8a:e1:c9:ee:b8:cc:5e:4f: f8:e8:b8:b0:ff:cf:4a:fc:6c:18:54:c7:d1:24:3f:a4:64:b8: 43:27:db:56:e2:86:e8:0c:66:a5:df:91:90:f8:e2:0d:63:b3: 09:b7:73:cf:e9:f8:32:40:d7:fe:92:03:6f:a1:0d:93:79:96: 87:ae:ff:da:2e:57:12:f6:cd:35:d3:aa:a3:c2:a2:67:c1:d6: 55:1a:41:45:2b:d6:d6:5e:40:81:8d:fb:8f:61:76:b0:87:6e: 55:73:72:4a:1d:c0:9a:db:57:f7:79:ac:3d:98:a8:9c:d9:c2: 6f:92:6f:ed:96:d5:e1:c4:33:81:26:a7:80:a8:88:96:46:b5: 30:87:b9:e6:42:bd:99:66:b0:cc:b3:ba:9a:1f:81:67:c3:29: b5:ea:89:b5:7b:b9:e0:d2:d3:90:92:6f:a6:8b:37:7f:5d:40: 7a:90:47:50:9f:aa:59:76:bb:80:29:bd:75:72:cc:ea:01:a3: 28:6a:69:75:39:33:43:74:65:ee:bb:5b:cd:82:6c:5e:d8:41: fe:3d:20:1c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE3buwrAGyTlmS2+/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk YzNmZTZjM2UtOTg1My00ZDEyLWE3ZDgtYTQxMDEyM2JiNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i0GprsOoED8TwWjKTyPuk5v+JtrlWgMXTLo hYYbjpi/S0EK5JP2Fsyq8fSZLI9jfAwFHXFWs1uYKXiYZHpj3uLF+g9yysj70yNF e3X45TfWzQ7/lbvgZJIvRqftN4JEYQSQcVOBx7iRSGRMJieQgZtDSZFqMheugFbX KC0pxQZ2YdaSPWWHHDl72cwLN2yvLKNKCZMFK9WNO8aVOy3uVCghbdyhBsCcHT5/ Abfl2qVUMIATQhnD/TgZ7G6wuuNTWRkja8aIDTt1gGN+I8+BDTkyY9kg8m2zc3Ab zxjHX7eVjhIbnmNMWZbVvzS1Wwk2dDTlAywG8tOns87E4h6hNwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPxVV+vP17PWmc14O9hi56BT5RIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNDNjOTBhYTYtM2RmMy0z YTI3LTg0MzAtZmUxYWE5N2JkMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANHEvgD BAFHEvwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAwC1bCsagbn/20dR3U7T00KU18sIchdknm8FQnZ377WfN o5c8wEgq3HWD5ccIbIrhye64zF5P+Oi4sP/PSvxsGFTH0SQ/pGS4QyfbVuKG6Axm pd+RkPjiDWOzCbdzz+n4MkDX/pIDb6ENk3mWh67/2i5XEvbNNdOqo8KiZ8HWVRpB RSvW1l5AgY37j2F2sIduVXNySh3AmttX93msPZionNnCb5Jv7ZbV4cQzgSangKiI lka1MIe55kK9mWawzLO6mh+BZ8MpteqJtXu54NLTkJJvpos3f11AepBHUJ+qWXa7 gCm9dXLM6gGjKGppdTkzQ3Rl7rtbzYJsXthB/j0gHA== -----END CERTIFICATE-----Generated at Thu May 28 16:46:24 2026 by rpki-client