$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa File: f3242823-2b2c-394d-b738-86d40bb02316.roa (raw, json) Hash identifier: rqm+lYVw5V72KUlcs7urxTKxBBfhQqxSNgvHKUD+Woo= Subject key identifier: 3D:EC:DE:35:33:C1:5A:76:D0:B8:F5:BE:26:67:6F:71:40:AB:09:35 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584E7FFA31FB37338E5AA6D8D480 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 138699 IP address blocks: 71.18.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:31:fb:37:33:8e:5a:a6:d8:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=7e18dbfc-f807-40a9-af80-9f101ea53ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:0d:c6:94:79:1e:17:f8:f6:36:d4:db:65: 79:f0:34:e9:27:94:bf:5a:36:40:7b:69:22:31:dd: 5b:13:ba:cf:04:0d:4a:45:24:d8:6e:d2:80:78:cf: 8b:47:0d:8a:46:e4:15:0a:24:4c:d9:a0:c4:29:02: cd:cf:04:66:25:8d:84:fa:27:bf:22:98:12:85:40: 6e:83:77:be:af:a8:db:51:8e:87:f6:1e:d7:ee:7f: 31:02:2a:b0:8a:c2:a1:39:9e:0f:0f:47:83:62:5e: f2:1c:5d:46:32:4f:16:bc:cc:31:31:a2:45:44:2e: 72:8a:43:b2:a6:ca:9a:ba:c7:bc:9a:03:24:03:bd: 5c:98:c7:6f:51:f6:45:90:da:9b:22:47:d2:9d:c5: 17:ac:74:48:8c:5c:1b:e1:d3:ac:ae:9c:72:05:74: f0:b5:c7:c8:33:63:50:84:6e:04:1e:a0:01:2e:d2: c0:4f:46:45:95:70:a5:13:58:e1:ed:a7:7b:a9:06: 69:4c:c7:e1:48:58:3f:3a:08:89:b7:80:a4:99:9b: c0:3b:16:56:cf:59:c5:c3:4f:08:de:e4:78:2d:d1: 91:37:c4:f0:8e:a4:d5:2e:eb:57:85:b5:db:99:6f: bf:54:0d:fd:ff:fc:43:fd:3b:e2:1c:41:90:79:d4: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EC:DE:35:33:C1:5A:76:D0:B8:F5:BE:26:67:6F:71:40:AB:09:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:0e:fb:0f:ab:79:45:a3:88:f4:65:a5:e1:12:1e:52:d4:43: 4a:fb:d8:61:31:0a:61:3c:b8:90:67:05:64:7e:87:a4:2e:42: 62:57:37:29:c7:e1:d7:48:b1:5d:4f:fa:49:02:fa:0b:53:af: 8f:b5:c4:9c:fb:55:49:bc:f3:62:e0:89:c6:d8:69:34:ac:f6: e9:b9:88:1e:ea:9d:9a:26:61:82:ce:f6:33:c2:ae:6f:2c:79: ec:b1:cd:06:91:e7:81:28:5c:75:8c:f5:03:9c:d7:7d:59:a2: f8:81:65:95:f4:c9:7e:f7:3d:d3:49:26:d7:5d:e9:be:23:d5: b8:c0:2d:5c:16:96:61:09:65:85:e6:0d:72:5b:19:5c:b3:30: 5e:c3:e1:99:06:34:9e:4c:65:63:e2:58:f9:91:ca:9b:74:a1: ef:37:68:57:f9:9e:6d:39:76:87:05:41:f6:a7:e7:b5:07:53: 75:09:47:b8:15:b2:32:c5:82:18:13:be:e8:67:ad:81:31:11: 1f:70:5b:9c:6c:ff:58:76:91:4a:e8:1f:d7:c5:80:48:34:92: f6:bd:c8:e8:e9:ea:31:97:02:38:bb:84:2a:15:cf:ba:28:90: d2:76:da:16:c9:9f:dc:0b:18:38:70:71:b2:0a:68:1f:9d:26: e8:28:59:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jH7NzOOWqbY1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk N2UxOGRiZmMtZjgwNy00MGE5LWFmODAtOWYxMDFlYTUzYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrsNxpR5Hhf49jbU22V58DTpJ5S/WjZAe2ki Md1bE7rPBA1KRSTYbtKAeM+LRw2KRuQVCiRM2aDEKQLNzwRmJY2E+ie/IpgShUBu g3e+r6jbUY6H9h7X7n8xAiqwisKhOZ4PD0eDYl7yHF1GMk8WvMwxMaJFRC5yikOy psqause8mgMkA71cmMdvUfZFkNqbIkfSncUXrHRIjFwb4dOsrpxyBXTwtcfIM2NQ hG4EHqABLtLAT0ZFlXClE1jh7ad7qQZpTMfhSFg/OgiJt4CkmZvAOxZWz1nFw08I 3uR4LdGRN8TwjqTVLutXhbXbmW+/VA39//xD/TviHEGQedQonwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3s3jUzwVp20Lj1viZnb3FAqwk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvZjMyNDI4MjMtMmIyYy0z OTRkLWI3MzgtODZkNDBiYjAyMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoO+w+reUWjiPRlpeESHlLUQ0r72GExCmE8uJBnBWR+h6QuQmJXNynH 4ddIsV1P+kkC+gtTr4+1xJz7VUm882LgicbYaTSs9um5iB7qnZomYYLO9jPCrm8s eeyxzQaR54EoXHWM9QOc131ZoviBZZX0yX73PdNJJtdd6b4j1bjALVwWlmEJZYXm DXJbGVyzMF7D4ZkGNJ5MZWPiWPmRypt0oe83aFf5nm05docFQfan57UHU3UJR7gV sjLFghgTvuhnrYExER9wW5xs/1h2kUroH9fFgEg0kva9yOjp6jGXAji7hCoVz7oo kNJ22hbJn9wLGDhwcbIKaB+dJugoWYs= -----END CERTIFICATE-----Generated at Thu Jul 23 23:25:26 2026 by rpki-client