$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/e9080b46-a7aa-3efc-ac5f-a3af357d6a70.roa File: e9080b46-a7aa-3efc-ac5f-a3af357d6a70.roa (raw, json) Hash identifier: ZGWYMaq3OIiBWfR8i2ZbjTxEfRQU+tn78NxSs6U/PFY= Subject key identifier: 11:FC:42:8F:3D:E6:6D:C5:A9:22:56:C7:61:EC:55:40:DE:FF:34:06 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584E683F5ED7DD02E7F4FE21C440 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/e9080b46-a7aa-3efc-ac5f-a3af357d6a70.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 138699 IP address blocks: 71.18.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:5e:d7:dd:02:e7:f4:fe:21:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=73f38bde-df8c-4976-8f3e-e1c8a7b88729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:2c:ab:57:92:4f:a4:49:07:fd:b0:15:07: 5f:6d:c4:44:71:ae:ee:ee:15:41:66:62:81:e3:42: ba:1d:73:49:f0:a9:f9:0c:43:db:8b:dd:fd:54:1a: 44:25:ca:b0:87:5c:4c:92:29:f6:7a:9c:ff:b7:67: 56:df:b0:fa:b1:f7:1c:a4:b5:54:14:d8:bb:12:d5: 5c:15:ec:3d:4a:15:6b:7f:75:28:42:af:f6:ba:65: 50:7d:72:ad:93:fd:b7:24:22:56:9d:cf:46:6d:3c: c2:15:25:e6:b3:24:bf:6e:b2:ea:22:7b:96:09:d0: f5:7e:10:56:29:89:99:78:95:ca:e6:fc:73:8c:d4: 9b:c1:ee:5b:53:fa:a7:e6:5b:78:51:51:5c:47:3d: 70:ec:ab:e1:96:4b:6f:41:ef:e7:b4:f4:88:9f:f7: e1:2c:7d:54:f0:49:a3:68:be:d1:44:dc:88:b2:ae: 5d:35:3e:b7:0e:9a:99:4a:2a:dc:2b:d2:52:84:5e: 60:c3:e5:66:96:7b:6b:23:ee:a2:9a:30:ec:09:69: 36:92:b5:bc:3a:f5:66:62:05:58:97:c1:49:06:18: ef:a5:38:01:42:b9:fe:89:bd:5b:5c:ea:a0:bd:12: fc:90:90:7f:30:0f:6d:81:ac:c8:47:17:29:9f:83: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:42:8F:3D:E6:6D:C5:A9:22:56:C7:61:EC:55:40:DE:FF:34:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/e9080b46-a7aa-3efc-ac5f-a3af357d6a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:27:f5:c1:7e:79:d5:4b:f6:7e:1e:f2:6d:05:48:25:47:97: 6b:2b:eb:34:67:57:9c:d2:e0:18:3b:8c:36:9e:44:d9:64:cf: d0:1f:2c:b0:db:9a:cd:70:54:f1:5d:65:2e:ab:b8:c0:aa:72: b2:48:6d:79:5a:9e:d0:a3:4f:1e:4b:34:5f:eb:9d:2a:e9:5e: b6:03:19:7b:1a:eb:c5:43:52:45:7e:fc:e5:c4:db:80:b4:6b: 35:e2:04:03:f6:3a:35:dc:6f:a2:63:ab:5f:2d:22:a7:c6:bc: 70:6a:fa:15:f2:29:47:62:89:b1:3a:f7:3c:0b:77:4e:08:70: 79:47:d6:c1:51:89:6d:45:c4:08:65:79:be:31:4f:02:83:aa: 8c:35:92:a4:e3:a0:3f:96:dd:fa:d1:61:f1:da:3e:c8:e4:04: 87:3b:7f:1d:3c:7c:42:3e:2d:c0:b7:82:6a:ac:8a:b8:b3:b7: cb:51:79:fc:2b:c0:b4:a9:88:10:e0:13:cf:0a:47:1a:39:7b: bc:44:d2:a0:4d:70:98:c1:a8:5f:ed:9a:b8:e2:0a:e5:46:85: 65:49:79:d6:9c:78:9b:b2:e3:18:5f:97:f8:81:c5:de:c4:79: e5:38:78:fb:99:c5:85:17:2c:34:a7:28:0b:37:3e:26:7e:db: 97:96:06:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP17X3QLn9P4hxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk NzNmMzhiZGUtZGY4Yy00OTc2LThmM2UtZTFjOGE3Yjg4NzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCQsq1eST6RJB/2wFQdfbcREca7u7hVBZmKB 40K6HXNJ8Kn5DEPbi939VBpEJcqwh1xMkin2epz/t2dW37D6sfccpLVUFNi7EtVc Few9ShVrf3UoQq/2umVQfXKtk/23JCJWnc9GbTzCFSXmsyS/brLqInuWCdD1fhBW KYmZeJXK5vxzjNSbwe5bU/qn5lt4UVFcRz1w7KvhlktvQe/ntPSIn/fhLH1U8Emj aL7RRNyIsq5dNT63DpqZSircK9JShF5gw+VmlntrI+6imjDsCWk2krW8OvVmYgVY l8FJBhjvpTgBQrn+ib1bXOqgvRL8kJB/MA9tgazIRxcpn4PyzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH8Qo895m3FqSJWx2HsVUDe/zQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvZTkwODBiNDYtYTdhYS0z ZWZjLWFjNWYtYTNhZjM1N2Q2YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcn9cF+edVL9n4e8m0FSCVHl2sr6zRnV5zS4Bg7jDaeRNlkz9AfLLDb ms1wVPFdZS6ruMCqcrJIbXlantCjTx5LNF/rnSrpXrYDGXsa68VDUkV+/OXE24C0 azXiBAP2OjXcb6Jjq18tIqfGvHBq+hXyKUdiibE69zwLd04IcHlH1sFRiW1FxAhl eb4xTwKDqow1kqTjoD+W3frRYfHaPsjkBIc7fx08fEI+LcC3gmqsirizt8tRefwr wLSpiBDgE88KRxo5e7xE0qBNcJjBqF/tmrjiCuVGhWVJedaceJuy4xhfl/iBxd7E eeU4ePuZxYUXLDSnKAs3PiZ+25eWBlw= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:54 2026 by rpki-client