$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa File: 43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa (raw, json) Hash identifier: y2CCgbm7i/6cnm9XP7K4JPeXzRLj+Re/3BhGHsU1JCU= Subject key identifier: E8:3E:EC:1E:CF:13:02:9D:52:7C:D7:B2:4E:F7:68:D8:96:E2:A8:95 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584F4973E3367C9CE019E0676480 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 138699 IP address blocks: 71.18.248.0/24 maxlen: 24 71.18.249.0/24 maxlen: 24 71.18.250.0/24 maxlen: 24 71.18.251.0/24 maxlen: 24 71.18.252.0/24 maxlen: 24 71.18.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e3:36:7c:9c:e0:19:e0:67:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d8c9ea5-7c97-4dea-839d-860f42753fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:17:f1:ae:9b:0f:a8:23:4a:ba:55:cd:35: 4d:64:88:e6:82:ba:cb:40:bb:1e:5c:aa:9f:f8:81: 18:70:bb:f5:86:3c:eb:2c:b9:8f:cb:14:17:48:6e: c4:9f:c8:d0:e6:58:00:9e:ea:60:ad:64:11:09:83: f8:6f:f1:cf:53:e0:ee:87:bd:45:1e:c2:af:9c:81: 92:66:60:89:b0:c4:35:bf:c8:08:72:23:d5:86:4e: bd:78:cc:94:82:e5:b0:82:a1:f8:5f:bb:07:23:3c: eb:f4:3c:56:ad:30:1c:4c:07:e3:0c:52:12:1a:e1: 98:63:8d:5f:2e:e2:8f:0e:fe:46:8a:b2:14:68:2a: d7:3f:0a:c2:e9:06:c3:65:a5:28:11:a5:44:88:e5: 7c:9f:2a:1e:de:b5:54:cd:a6:b9:e5:d0:f3:d7:72: 35:18:94:95:26:24:2a:05:7b:ba:2b:6b:a2:d5:79: 78:2f:38:d0:37:fd:90:10:30:ea:e3:cb:d0:f2:bd: aa:33:5e:a2:0f:18:eb:9e:57:15:9f:74:a9:73:d5: dd:90:d1:e3:b9:c9:cb:18:8a:2f:7a:27:33:fe:c3: c0:c9:e8:cb:25:89:64:e2:d2:ca:52:63:ab:7f:64: c2:5f:19:4b:d5:63:50:0e:e1:cf:17:a5:49:5f:04: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3E:EC:1E:CF:13:02:9D:52:7C:D7:B2:4E:F7:68:D8:96:E2:A8:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.248.0-71.18.253.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e8:be:8b:44:1e:24:33:6b:95:eb:30:d0:35:79:2c:95:3c: 86:15:66:d5:f3:f9:ac:d6:58:7d:04:f8:70:5f:ce:8f:1b:df: b3:dc:ff:97:f9:68:d8:fc:11:9c:d6:de:58:70:e8:97:cb:39: d1:cc:10:8e:9f:d5:a1:0b:65:84:20:32:56:46:fd:a5:0c:22: 6d:ee:26:23:fe:74:ef:22:63:22:b9:95:0f:f1:a9:55:e5:72: f2:fd:a4:bd:0a:13:2b:8b:56:d5:14:5d:6a:fc:3d:c1:c9:b3: 2d:08:89:18:b9:cf:a0:63:9a:dd:bb:4a:bc:b5:ab:15:d7:14: 51:3d:6b:08:db:ed:53:17:35:dc:63:ec:07:94:47:52:4c:35: a1:17:46:3f:6a:04:09:c8:8c:ec:3c:e4:e9:e8:75:4d:5a:59: 01:bd:66:e1:81:5e:a3:b1:45:23:67:61:27:38:50:f9:19:e4: 39:8c:77:c7:53:3b:fa:a7:5d:f3:25:ce:a2:8b:97:b1:55:49: 16:af:bc:12:35:59:6c:e1:27:a0:0a:ed:72:ca:4e:d0:a9:3f: c0:94:d8:a1:9f:17:65:ad:5b:e3:65:b8:cf:f0:12:3d:81:19: e4:ef:e0:ce:a0:05:dd:25:e5:d6:6e:38:35:ca:3c:fe:9b:35: 2a:5c:56:65 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9Jc+M2fJzgGeBnZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Q4YzllYTUtN2M5Ny00ZGVhLTgzOWQtODYwZjQyNzUzZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke8X8a6bD6gjSrpVzTVNZIjmgrrLQLseXKqf +IEYcLv1hjzrLLmPyxQXSG7En8jQ5lgAnupgrWQRCYP4b/HPU+Duh71FHsKvnIGS ZmCJsMQ1v8gIciPVhk69eMyUguWwgqH4X7sHIzzr9DxWrTAcTAfjDFISGuGYY41f LuKPDv5GirIUaCrXPwrC6QbDZaUoEaVEiOV8nyoe3rVUzaa55dDz13I1GJSVJiQq BXu6K2ui1Xl4LzjQN/2QEDDq48vQ8r2qM16iDxjrnlcVn3Spc9XdkNHjucnLGIov eicz/sPAyejLJYlk4tLKUmOrf2TCXxlL1WNQDuHPF6VJXwQB4QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOg+7B7PEwKdUnzXsk73aNiW4qiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNDNjOTBhYTYtM2RmMy0z YTI3LTg0MzAtZmUxYWE5N2JkMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANHEvgD BAFHEvwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGui+i0QeJDNrlesw0DV5LJU8hhVm1fP5rNZYfQT4cF/O jxvfs9z/l/lo2PwRnNbeWHDol8s50cwQjp/VoQtlhCAyVkb9pQwibe4mI/507yJj IrmVD/GpVeVy8v2kvQoTK4tW1RRdavw9wcmzLQiJGLnPoGOa3btKvLWrFdcUUT1r CNvtUxc13GPsB5RHUkw1oRdGP2oECciM7Dzk6eh1TVpZAb1m4YFeo7FFI2dhJzhQ +RnkOYx3x1M7+qdd8yXOoouXsVVJFq+8EjVZbOEnoArtcspO0Kk/wJTYoZ8XZa1b 42W4z/ASPYEZ5O/gzqAF3SXl1m44Nco8/ps1KlxWZQ== -----END CERTIFICATE-----Generated at Sun Sep 27 18:40:09 2026 by rpki-client