$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a8c9f994-02b6-3834-b860-c161f0dc51ab.roa File: a8c9f994-02b6-3834-b860-c161f0dc51ab.roa (raw, json) Hash identifier: ydrWoDn0YMiUIDsFZDEiej5PmxGVKKHZqztL+fGCmdA= Subject key identifier: 25:B9:C3:D0:C9:C8:C5:4B:ED:2E:A1:C4:AE:3D:34:1B:FC:6B:78:75 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584DB4A5B22AAB76852897390960 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a8c9f994-02b6-3834-b860-c161f0dc51ab.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 11983 IP address blocks: 71.18.43.0/24 maxlen: 24 2605:340:f097::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:b2:2a:ab:76:85:28:97:39:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=4e1b6b3b-c044-4a42-89d2-0f135734bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:fe:a3:6f:11:df:e9:57:18:83:60:93:ba: e0:51:53:1d:c9:86:42:59:f6:45:c2:9d:92:d9:48: 30:03:2e:7f:df:36:c3:dc:e4:ae:f5:d1:01:7b:c2: 6f:35:49:f9:57:07:cb:ac:00:a8:4f:da:64:18:4b: 44:ee:c0:6e:7e:96:67:b8:fe:bd:f3:04:f0:f1:68: e8:cc:bc:ea:75:37:8c:49:2f:8a:37:8e:fd:3c:e3: fb:4a:79:a0:ec:16:e1:e4:3d:8c:c8:44:3f:79:36: 3e:c7:e5:39:94:6b:6d:96:d3:33:6a:d0:44:45:b3: 25:c9:ea:15:b1:aa:99:b5:da:e7:e6:70:7e:98:59: 25:0f:35:f8:32:77:c8:f9:43:81:73:20:18:69:b0: 67:4c:4e:89:cf:0f:c1:f3:55:f1:c6:9e:22:70:62: cc:0a:dc:7e:24:77:e9:14:e5:ec:86:39:da:93:a9: 5f:0b:dd:af:59:99:e4:01:3c:a6:d5:8b:3c:2a:0f: dc:e5:4f:89:13:e5:c4:5d:7b:1d:f6:94:9d:25:92: b3:20:83:24:c0:91:59:31:dd:c1:11:06:04:8b:79: 30:c7:5b:00:c7:21:c9:97:f2:11:dd:34:6d:82:78: 4e:f5:5d:a9:1a:6c:f7:ba:bb:41:07:fe:c2:ba:2a: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B9:C3:D0:C9:C8:C5:4B:ED:2E:A1:C4:AE:3D:34:1B:FC:6B:78:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a8c9f994-02b6-3834-b860-c161f0dc51ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.43.0/24 IPv6: 2605:340:f097::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:87:d5:15:ed:9a:99:08:96:ac:7d:34:9c:10:d4:74:2d:61: d7:c8:c0:a4:9b:80:06:59:ad:e8:c8:b1:e3:20:3e:92:73:48: 68:4a:43:91:53:c6:22:f9:87:b6:c7:f1:b3:f1:fe:8b:80:41: 96:1f:e9:b0:36:3e:c8:da:b2:2c:dd:a1:87:1a:32:8a:1c:8f: 72:5f:6e:30:98:ad:2e:a6:f8:fe:82:93:52:84:ab:d5:74:5f: f2:ad:90:c0:0a:78:c9:de:b0:ba:94:ed:0d:6f:f4:71:a8:7c: 1e:3e:ae:8f:58:a0:01:45:bf:5a:49:b5:08:a1:a9:57:51:1c: e6:33:b6:ef:eb:4d:68:aa:eb:3e:95:26:a9:e7:99:a5:00:ce: 3f:2c:0c:60:6e:2e:13:e7:b9:dd:30:ec:0e:67:32:16:5e:79: f7:f6:19:e1:ab:0e:69:62:8c:b4:9e:e4:21:01:74:c4:0f:83: 45:9b:03:75:e7:14:be:0d:6c:2e:74:2b:7c:2d:d1:e5:25:2b: 89:5e:75:ac:f4:a8:d0:f1:00:ce:5f:a2:3a:a4:e2:f4:b1:40: 33:1c:e5:cf:59:97:dc:2d:88:3b:a1:de:8d:81:10:e5:39:d9: f6:b6:35:8a:c9:50:63:f5:57:5c:00:50:78:07:6f:b7:68:8e: ff:b5:cd:b5 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE20pbIqq3aFKJc5CWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NGUxYjZiM2ItYzA0NC00YTQyLTg5ZDItMGYxMzU3MzRiZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodX+o28R3+lXGINgk7rgUVMdyYZCWfZFwp2S 2UgwAy5/3zbD3OSu9dEBe8JvNUn5VwfLrACoT9pkGEtE7sBufpZnuP698wTw8Wjo zLzqdTeMSS+KN479POP7Snmg7Bbh5D2MyEQ/eTY+x+U5lGttltMzatBERbMlyeoV saqZtdrn5nB+mFklDzX4MnfI+UOBcyAYabBnTE6Jzw/B81Xxxp4icGLMCtx+JHfp FOXshjnak6lfC92vWZnkATym1Ys8Kg/c5U+JE+XEXXsd9pSdJZKzIIMkwJFZMd3B EQYEi3kwx1sAxyHJl/IR3TRtgnhO9V2pGmz3urtBB/7Cuio0/QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCW5w9DJyMVL7S6hxK49NBv8a3h1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvYThjOWY5OTQtMDJiNi0z ODM0LWI4NjAtYzE2MWYwZGM1MWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQARxIrMA8E AgACMAkDBwAmBQNA8JcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIYfVFe2amQiWrH00nBDUdC1h18jApJuA Blmt6Mix4yA+knNIaEpDkVPGIvmHtsfxs/H+i4BBlh/psDY+yNqyLN2hhxoyihyP cl9uMJitLqb4/oKTUoSr1XRf8q2QwAp4yd6wupTtDW/0cah8Hj6uj1igAUW/Wkm1 CKGpV1Ec5jO27+tNaKrrPpUmqeeZpQDOPywMYG4uE+e53TDsDmcyFl559/YZ4asO aWKMtJ7kIQF0xA+DRZsDdecUvg1sLnQrfC3R5SUriV51rPSo0PEAzl+iOqTi9LFA Mxzlz1mX3C2IO6HejYEQ5TnZ9rY1islQY/VXXABQeAdvt2iO/7XNtQ== -----END CERTIFICATE-----Generated at Wed May 13 13:37:51 2026 by rpki-client