$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa File: 5c71001e-a55c-33db-bcc0-223bccba2b97.roa (raw, json) Hash identifier: emNoi4WnoUGadWqltP1l70Cm5hfSiCJq+MagyEvX+MY= Subject key identifier: D6:D2:61:64:77:D8:6D:31:B1:19:53:39:0E:46:D1:6B:CF:AF:BA:FE Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584F225D00C4638FB3C457452400 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 393220 IP address blocks: 199.71.0.0/24 maxlen: 24 2001:500:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:00:c4:63:8f:b3:c4:57:45:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=ea530d31-b26e-4f91-88a5-99cf68ea847b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:50:f5:21:57:19:b7:80:8f:93:fb:69:46: 16:1f:a6:43:79:ac:37:03:2f:fe:ea:bd:03:4a:50: ea:0c:8d:51:af:56:ec:bc:27:80:09:e8:bf:53:e7: a6:5f:68:d0:73:30:45:66:36:97:5f:f6:9d:e0:c0: ac:45:e3:e1:3b:25:03:ce:b3:9c:b2:ef:6c:af:de: 2d:ab:c0:bd:7f:db:a7:15:5c:77:82:d0:64:6f:c9: de:c4:11:c5:73:41:e5:f4:f4:de:3c:d2:9e:fd:4e: ca:83:0c:56:01:43:a8:19:f2:26:3f:0b:70:7b:85: 02:59:09:ef:54:5b:92:6d:dc:a5:bc:8b:40:07:34: 50:81:f5:dd:66:fd:91:82:88:57:ac:5d:c8:24:dd: 04:20:9b:c6:fb:88:27:ea:bf:1f:f6:c4:ae:e6:c3: db:55:06:8f:9f:b9:d1:9a:ff:bb:00:2c:67:3c:6b: d4:c0:6b:d2:5b:03:a2:f2:b2:8a:60:6f:3e:e1:7f: 8a:fd:73:d2:f0:08:45:aa:35:d4:ed:9f:bc:fa:ed: e6:72:60:5d:55:c0:c4:50:0b:68:ee:c1:bf:cc:88: 24:b9:8a:f9:79:66:2d:ca:2d:36:cf:94:fd:28:47: 37:3d:8f:cb:3a:e1:59:3b:2c:eb:ed:b1:ea:39:08: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D2:61:64:77:D8:6D:31:B1:19:53:39:0E:46:D1:6B:CF:AF:BA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.71.0.0/24 IPv6: 2001:500:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:73:93:f8:b9:68:31:5e:e0:3a:ee:e8:5c:97:d2:67:bd:9c: f1:95:25:19:7e:66:13:8e:89:6d:40:19:53:75:52:1b:11:cf: a3:07:24:c4:14:bb:e1:7a:bf:9c:c5:dc:2c:69:90:3b:51:9e: a9:4d:d0:d1:e0:60:2b:28:5b:45:69:82:4e:e1:01:40:87:a2: 18:39:f3:28:2b:6d:a1:f8:65:5b:c7:b6:a6:2e:59:c0:4c:ee: 44:1d:02:2d:51:eb:9a:f5:0e:c9:06:0e:b0:e9:0f:e1:e1:27: b8:af:78:42:9c:64:de:3a:33:27:45:9e:4b:d7:20:03:3c:c1: cd:73:cd:a8:6f:bb:2b:47:64:51:a8:8c:f2:ed:15:1c:d5:4f: 5c:6b:61:11:ce:33:c6:e5:bf:76:81:30:07:f0:84:ca:33:e1: 7f:f6:e1:2f:e5:19:79:9a:f8:cf:7f:25:ab:04:40:89:e3:16: c1:a5:4f:3b:2a:be:34:5a:0e:19:97:a3:f6:9c:73:99:2e:ad: 37:1b:fe:86:c5:37:58:a4:fa:a3:b4:51:97:31:72:66:6a:be: 98:b2:5d:dc:ce:be:a4:5d:a6:f8:4a:31:13:43:2d:ef:72:fd: 67:7c:02:e9:0a:21:3f:ba:b0:1c:26:53:5e:e1:ab:bf:c3:1b: ca:d0:ec:a6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8iXQDEY4+zxFdFJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWE1MzBkMzEtYjI2ZS00ZjkxLTg4YTUtOTljZjY4ZWE4NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxepQ9SFXGbeAj5P7aUYWH6ZDeaw3Ay/+6r0D SlDqDI1Rr1bsvCeACei/U+emX2jQczBFZjaXX/ad4MCsRePhOyUDzrOcsu9sr94t q8C9f9unFVx3gtBkb8nexBHFc0Hl9PTePNKe/U7KgwxWAUOoGfImPwtwe4UCWQnv VFuSbdylvItABzRQgfXdZv2RgohXrF3IJN0EIJvG+4gn6r8f9sSu5sPbVQaPn7nR mv+7ACxnPGvUwGvSWwOi8rKKYG8+4X+K/XPS8AhFqjXU7Z+8+u3mcmBdVcDEUAto 7sG/zIgkuYr5eWYtyi02z5T9KEc3PY/LOuFZOyzr7bHqOQhAJwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNbSYWR32G0xsRlTOQ5G0WvPr7r+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNWM3MTAwMWUtYTU1Yy0z M2RiLWJjYzAtMjIzYmNjYmEyYjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx0cAMA8E AgACMAkDBwAgAQUAADEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgXOT+LloMV7gOu7oXJfSZ72c8ZUlGX5m E46JbUAZU3VSGxHPowckxBS74Xq/nMXcLGmQO1GeqU3Q0eBgKyhbRWmCTuEBQIei GDnzKCttofhlW8e2pi5ZwEzuRB0CLVHrmvUOyQYOsOkP4eEnuK94Qpxk3jozJ0We S9cgAzzBzXPNqG+7K0dkUaiM8u0VHNVPXGthEc4zxuW/doEwB/CEyjPhf/bhL+UZ eZr4z38lqwRAieMWwaVPOyq+NFoOGZej9pxzmS6tNxv+hsU3WKT6o7RRlzFyZmq+ mLJd3M6+pF2m+EoxE0Mt73L9Z3wC6QohP7qwHCZTXuGrv8MbytDspg== -----END CERTIFICATE-----Generated at Tue Sep 29 00:46:03 2026 by rpki-client