$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/cb27ae1c-8e00-37ef-a93e-044b930c1411.roa File: cb27ae1c-8e00-37ef-a93e-044b930c1411.roa (raw, json) Hash identifier: /otYjgDLCwOIx8FxhG9mKRx2wq4fnSM6WDpjNwFtj1Q= Subject key identifier: B2:E1:42:7A:9E:61:DB:1E:01:36:FA:10:63:4A:C3:4B:09:91:87:2A Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584DB1DAD8AB3D4DEDC536952B00 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/cb27ae1c-8e00-37ef-a93e-044b930c1411.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 11983 IP address blocks: 71.18.8.0/24 maxlen: 24 71.18.95.0/24 maxlen: 24 2605:340:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:d8:ab:3d:4d:ed:c5:36:95:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=045707ec-a2e6-45df-9293-b87e5ca4bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:70:60:a4:d9:91:09:bb:c7:30:81:fa:4e:33: d9:b8:42:af:50:5d:2d:b7:b2:59:7f:28:7b:d0:31: d2:fd:95:5a:56:39:af:72:af:f2:f9:8e:77:4e:71: a8:a8:ec:20:31:db:6f:a3:e5:cb:fe:d5:f4:a8:59: aa:0d:57:36:26:17:18:d3:e5:0e:f7:37:58:de:86: 48:d4:8d:5b:0c:4b:74:de:86:c8:35:1d:b3:b5:7f: f9:5c:3c:c8:49:31:a6:fb:38:e9:c3:49:cd:18:df: f4:b1:aa:89:a0:3a:a5:9a:57:fa:b1:2b:52:8b:e9: 8f:be:d1:02:22:61:ee:e3:00:37:9f:93:2f:f0:f1: 5a:1b:c8:08:14:a0:3c:c4:da:08:ef:2b:72:bf:f9: c5:91:c3:ae:40:12:4f:9f:10:e5:97:f8:8a:bd:00: cc:b1:94:6b:1b:33:ce:5d:bd:6b:89:89:c6:56:1b: 9b:83:45:3d:62:7b:10:94:ab:c6:d9:d9:26:ec:7e: bc:0c:07:4f:3c:51:6a:67:0f:d5:3b:51:93:86:4e: 7f:59:5d:21:13:8a:4c:3d:28:c0:b8:27:f1:5f:14: 1a:ca:09:f4:c2:5a:70:82:05:3d:57:d4:62:2f:3d: ca:15:86:4c:c2:1a:21:87:78:06:e6:33:29:5f:fd: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E1:42:7A:9E:61:DB:1E:01:36:FA:10:63:4A:C3:4B:09:91:87:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/cb27ae1c-8e00-37ef-a93e-044b930c1411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.8.0/24 71.18.95.0/24 IPv6: 2605:340:f080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c1:e9:43:4f:5b:05:fe:02:23:0c:c4:19:0e:fd:53:a8:08: 96:24:c8:6b:3a:30:74:52:3b:db:1f:66:bd:91:27:78:d5:9c: 1a:e4:28:91:3b:e4:d5:27:fb:40:32:4f:f7:4f:7b:92:2a:34: 4d:ef:a6:f7:5a:04:75:1c:fd:f4:f2:67:46:bd:d7:1e:ad:f1: 0b:8d:95:99:c2:06:14:07:ab:2e:74:8d:61:0f:16:53:b3:5e: a9:3b:0a:45:f1:c2:65:39:44:2e:3c:b3:fa:9c:9e:00:62:3b: 69:43:0c:e4:cc:b3:f9:44:5e:f3:fe:7a:f6:3b:4f:94:5d:d2: c8:42:11:ac:d9:02:fb:46:cd:24:b1:87:b4:5b:d9:6b:c4:08: 1f:68:d9:9a:8e:05:ef:a3:56:11:1f:34:2a:5e:08:bf:da:f7: 70:83:f2:80:53:6c:cc:9b:dd:03:e3:9a:f7:e2:33:99:3c:d8: d8:71:7f:ad:3c:ba:57:5b:c9:a4:76:c1:3f:b4:d5:30:d6:cb: 9b:ca:dc:b7:a7:a0:c7:7d:c9:31:d5:b2:6c:1d:5d:35:d8:83: 4f:5b:b6:5d:16:6a:fc:70:22:35:45:ed:0c:0f:53:9d:51:cb: 45:c2:20:04:60:28:14:29:f0:c5:1c:3e:9d:9c:28:56:23:e0: 45:31:ac:1d -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE2x2tirPU3txTaVKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk MDQ1NzA3ZWMtYTJlNi00NWRmLTkyOTMtYjg3ZTVjYTRiZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXBgpNmRCbvHMIH6TjPZuEKvUF0tt7JZfyh7 0DHS/ZVaVjmvcq/y+Y53TnGoqOwgMdtvo+XL/tX0qFmqDVc2JhcY0+UO9zdY3oZI 1I1bDEt03obINR2ztX/5XDzISTGm+zjpw0nNGN/0saqJoDqlmlf6sStSi+mPvtEC ImHu4wA3n5Mv8PFaG8gIFKA8xNoI7ytyv/nFkcOuQBJPnxDll/iKvQDMsZRrGzPO Xb1riYnGVhubg0U9YnsQlKvG2dkm7H68DAdPPFFqZw/VO1GThk5/WV0hE4pMPSjA uCfxXxQaygn0wlpwggU9V9RiLz3KFYZMwhohh3gG5jMpX/3f3wIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFLLhQnqeYdseATb6EGNKw0sJkYcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvY2IyN2FlMWMtOGUwMC0z N2VmLWE5M2UtMDQ0YjkzMGMxNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQARxIIAwQA RxJfMA8EAgACMAkDBwAmBQNA8IAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAasHpQ09bBf4CIwzEGQ79U6gI liTIazowdFI72x9mvZEneNWcGuQokTvk1Sf7QDJP9097kio0Te+m91oEdRz99PJn Rr3XHq3xC42VmcIGFAerLnSNYQ8WU7NeqTsKRfHCZTlELjyz+pyeAGI7aUMM5Myz +URe8/569jtPlF3SyEIRrNkC+0bNJLGHtFvZa8QIH2jZmo4F76NWER80Kl4Iv9r3 cIPygFNszJvdA+Oa9+IzmTzY2HF/rTy6V1vJpHbBP7TVMNbLm8rct6egx33JMdWy bB1dNdiDT1u2XRZq/HAiNUXtDA9TnVHLRcIgBGAoFCnwxRw+nZwoViPgRTGsHQ== -----END CERTIFICATE-----Generated at Wed May 13 09:06:55 2026 by rpki-client