$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa File: 71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa (raw, json) Hash identifier: bfTFS6Azn2XhaJWkkGfNaoaSWveeynt5iLn6MePgAUs= Subject key identifier: 38:CD:04:48:A5:30:98:98:50:05:B8:1D:DE:22:8F:25:20:48:95:E7 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584FD0F68D4BEC3C5FCD2342C100 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa Signing time: Thu 12 Nov 2026 14:00:13 +0000 ROA not before: Thu 12 Nov 2026 14:00:13 +0000 ROA not after: Wed 10 Feb 2027 14:00:13 +0000 asID: 19905 IP address blocks: 199.119.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d0:f6:8d:4b:ec:3c:5f:cd:23:42:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Nov 12 14:00:13 2026 GMT Not After : Feb 10 14:00:13 2027 GMT Subject: CN=ba7ae192-f3d9-4c2e-b4b6-14b836c524bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:4a:4f:98:08:38:10:97:cd:4b:cf:53:24: ba:6d:8e:02:db:a0:85:d1:62:a1:74:be:ae:f2:92: a9:e6:76:ba:45:93:6b:fa:fc:65:36:2e:06:95:27: 8f:aa:4f:1a:ae:53:27:7f:97:02:e3:e5:8e:59:b0: 9c:4b:51:4a:19:3b:60:f4:34:d1:b6:05:5d:0e:ee: 23:fc:08:76:06:1e:f3:0b:6f:23:3a:29:fd:05:15: b6:8f:41:2d:3e:f1:96:55:1f:cf:91:8c:1f:fe:0a: 80:44:37:73:98:5d:67:45:0d:ec:f9:5f:02:3e:d2: 83:3c:6d:0e:ea:b3:ac:f3:26:bd:03:c3:5d:95:9a: d0:35:35:8c:4e:a7:8a:38:79:9f:ff:fd:14:04:82: ea:bb:e2:10:e3:00:69:b2:4b:53:4b:73:ae:14:bb: 40:75:85:79:d1:8f:92:ef:33:6e:a6:7d:d7:cf:0f: d2:49:18:3e:1e:2e:1c:34:8a:72:da:28:aa:a4:d4: c6:61:18:c8:bb:92:79:67:5f:c8:89:c5:cc:a4:e6: d0:cc:cf:cc:86:cb:ad:1a:5f:5f:8c:6f:dd:14:f8: b7:e2:05:99:d2:43:6c:b5:ba:94:6e:7c:ec:c2:c6: 9d:0e:a8:a2:13:83:bf:6b:d0:f3:0d:d1:fd:aa:af: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:04:48:A5:30:98:98:50:05:B8:1D:DE:22:8F:25:20:48:95:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 199.119.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b9:b7:f4:88:2b:55:ef:95:38:7b:18:38:9a:b4:d3:86:84: 00:93:b9:50:ad:e3:55:e9:55:d4:19:11:50:06:49:4c:33:23: c3:5a:04:6a:2c:80:a4:9f:cd:dd:9c:37:1b:37:b6:ab:8a:0f: 7e:c8:e3:88:f6:5e:91:db:21:f4:47:1d:89:56:1e:32:8d:ee: 20:f4:91:54:9a:00:22:98:a8:36:c8:7f:72:73:a3:bc:1f:12: 48:77:c8:8f:15:46:3a:6e:ae:03:8d:2d:ca:e0:e9:4c:19:74: e7:73:d4:94:ff:4a:b9:1c:d2:73:78:20:c1:4e:4f:d6:19:3a: 58:0e:2e:0d:00:f0:22:f6:a4:27:db:3d:68:29:93:6e:75:8d: 9e:8f:9e:93:37:8b:6e:5b:f8:47:a7:81:97:be:06:91:39:77: 9d:3b:19:68:a5:6d:2b:85:bb:14:eb:27:1f:0f:1e:66:40:16: 9c:fc:99:53:bd:24:a6:91:ac:84:0f:cd:83:50:8a:b0:22:6a: 71:41:fc:ae:fd:f0:8a:ef:1d:c1:88:cc:eb:d8:aa:f4:29:96: ae:8d:72:b1:36:a2:ac:0b:b8:6c:4e:c6:54:a2:6d:f1:03:7d: 1e:9a:b5:dc:e8:9d:eb:3e:52:a6:ea:cb:15:98:5a:9e:55:f4: 59:93:ad:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Q9o1L7DxfzSNCwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI2MTExMjE0MDAxM1oXDTI3MDIxMDE0MDAxM1owLzEtMCsGA1UEAxMk YmE3YWUxOTItZjNkOS00YzJlLWI0YjYtMTRiODM2YzUyNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4BKT5gIOBCXzUvPUyS6bY4C26CF0WKhdL6u 8pKp5na6RZNr+vxlNi4GlSePqk8arlMnf5cC4+WOWbCcS1FKGTtg9DTRtgVdDu4j /Ah2Bh7zC28jOin9BRW2j0EtPvGWVR/PkYwf/gqARDdzmF1nRQ3s+V8CPtKDPG0O 6rOs8ya9A8NdlZrQNTWMTqeKOHmf//0UBILqu+IQ4wBpsktTS3OuFLtAdYV50Y+S 7zNupn3Xzw/SSRg+Hi4cNIpy2iiqpNTGYRjIu5J5Z1/IicXMpObQzM/MhsutGl9f jG/dFPi34gWZ0kNstbqUbnzswsadDqiiE4O/a9DzDdH9qq8PdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjNBEilMJiYUAW4Hd4ijyUgSJXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvNzFhNmRlZTctZWFhZC0z NmQ4LWFiYzMtYTBmYzZjNmM3OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq5t/SIK1XvlTh7GDiatNOGhACTuVCt41XpVdQZEVAGSUwzI8NaBGos gKSfzd2cNxs3tquKD37I44j2XpHbIfRHHYlWHjKN7iD0kVSaACKYqDbIf3Jzo7wf Ekh3yI8VRjpurgONLcrg6UwZdOdz1JT/Srkc0nN4IMFOT9YZOlgOLg0A8CL2pCfb PWgpk251jZ6PnpM3i25b+EengZe+BpE5d507GWilbSuFuxTrJx8PHmZAFpz8mVO9 JKaRrIQPzYNQirAianFB/K798IrvHcGIzOvYqvQplq6NcrE2oqwLuGxOxlSibfED fR6atdzones+UqbqyxWYWp5V9FmTrTI= -----END CERTIFICATE-----Generated at Sat Nov 14 20:47:12 2026 by rpki-client