$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0be68437-6817-3802-bc18-1241ee4a3302.roa File: 0be68437-6817-3802-bc18-1241ee4a3302.roa (raw, json) Hash identifier: Ju6gnJfXND4j/CQ77GTh3leYANckRkztfSj3voQfTIk= Subject key identifier: F0:85:5E:D6:89:52:4A:E4:43:C5:51:5A:0A:79:CB:63:62:87:63:37 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B48E1AB5E8F383BCD7B14AE00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0be68437-6817-3802-bc18-1241ee4a3302.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 206092 IP address blocks: 173.239.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ab:5e:8f:38:3b:cd:7b:14:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f1ac43c3-e577-4a93-b8f4-3633f7de34db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:98:a5:58:a9:60:10:93:dd:0f:8c:b4:d4: 36:86:b3:ad:75:b1:a7:7d:b5:40:4d:d7:eb:a2:5a: fe:e0:8f:72:1c:b2:20:55:d9:fa:b4:60:58:99:e9: 16:81:65:61:4f:a8:47:c4:4f:0f:57:b1:59:bc:8f: c0:b3:c1:50:1c:db:ee:49:9e:31:0a:04:8c:68:14: e0:1d:f0:e0:db:fd:10:e8:0e:81:86:42:06:70:6f: 50:b1:de:c6:4a:63:f2:f2:c3:7b:74:1e:19:84:fb: 68:88:bf:12:18:38:06:62:e3:4c:b4:e6:20:77:ba: 5b:0c:d8:fc:f2:82:d7:f9:d2:86:5f:15:9f:0b:0d: c9:fa:af:41:47:a7:11:35:9d:db:5f:26:48:6b:94: e2:c0:fc:ce:e7:e6:b4:5b:3c:4a:6b:fe:46:1d:e8: c9:01:3c:ed:6e:f6:ec:aa:3e:73:70:f8:b1:15:0b: 67:a5:d4:1a:08:ca:6a:32:e3:6f:dd:2a:ea:ec:94: 86:da:9c:96:01:6a:3b:c8:14:8d:1e:61:79:fd:97: 40:08:09:ef:f2:9a:37:25:33:16:27:ca:bf:59:ce: 23:01:88:9f:b7:b6:aa:d3:1c:70:f4:1a:3a:e8:86: ec:70:57:27:b8:e5:c0:56:e6:bf:af:5b:64:1b:d8: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:5E:D6:89:52:4A:E4:43:C5:51:5A:0A:79:CB:63:62:87:63:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0be68437-6817-3802-bc18-1241ee4a3302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:50:af:6d:19:5a:db:cb:20:90:4f:73:3e:b8:81:4f:77:c3: e2:45:6b:49:e4:7c:df:fc:f1:38:5f:70:7f:29:f0:69:90:92: 99:90:8f:b7:d0:93:d8:e5:a9:ca:7a:64:85:ec:12:cd:93:3e: 0c:0f:39:bd:3c:4c:b7:6c:f2:b4:9a:77:ec:c9:20:1e:3f:ce: 60:e4:5d:b0:cf:cd:70:41:e5:d7:4c:ab:c6:05:6d:16:16:2a: 3e:69:7f:06:8a:9d:fc:c1:8a:03:de:bb:c7:e7:a3:d1:d2:5b: 75:8b:1d:92:35:e4:96:b1:06:0c:36:7c:af:25:3e:a7:72:d4: 95:92:66:b6:8c:be:1a:53:94:58:1b:13:6b:0b:be:7e:c9:7c: 14:1f:22:8e:ee:0f:34:1b:89:8b:d9:02:f1:b8:7f:86:44:82: 72:24:2c:a9:48:15:70:a5:8c:ea:d9:28:57:af:8c:4b:82:22: 63:ce:24:2c:b6:a1:43:a9:8d:e3:b8:b0:af:f8:7e:42:81:32: 09:c9:d4:af:d7:91:c9:80:4f:94:6a:c3:06:89:f4:4a:a6:e5: f0:41:f7:38:d9:ad:6f:d2:a3:2f:02:e2:b4:94:6d:ff:9a:c8: 2d:2b:91:56:c2:cc:0e:1f:9c:40:b6:08:0e:f9:9f:05:b4:c8: e7:2a:4d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4atejzg7zXsUrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjFhYzQzYzMtZTU3Ny00YTkzLWI4ZjQtMzYzM2Y3ZGUzNGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslOYpVipYBCT3Q+MtNQ2hrOtdbGnfbVATdfr olr+4I9yHLIgVdn6tGBYmekWgWVhT6hHxE8PV7FZvI/As8FQHNvuSZ4xCgSMaBTg HfDg2/0Q6A6BhkIGcG9Qsd7GSmPy8sN7dB4ZhPtoiL8SGDgGYuNMtOYgd7pbDNj8 8oLX+dKGXxWfCw3J+q9BR6cRNZ3bXyZIa5TiwPzO5+a0WzxKa/5GHejJATztbvbs qj5zcPixFQtnpdQaCMpqMuNv3Srq7JSG2pyWAWo7yBSNHmF5/ZdACAnv8po3JTMW J8q/Wc4jAYift7aq0xxw9Bo66IbscFcnuOXAVua/r1tkG9gitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCFXtaJUkrkQ8VRWgp5y2Nih2M3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMGJlNjg0MzctNjgxNy0z ODAyLWJjMTgtMTI0MWVlNGEzMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM5Qr20ZWtvLIJBPcz64gU93w+JFa0nkfN/88ThfcH8p8GmQkpmQj7fQ k9jlqcp6ZIXsEs2TPgwPOb08TLds8rSad+zJIB4/zmDkXbDPzXBB5ddMq8YFbRYW Kj5pfwaKnfzBigPeu8fno9HSW3WLHZI15JaxBgw2fK8lPqdy1JWSZraMvhpTlFgb E2sLvn7JfBQfIo7uDzQbiYvZAvG4f4ZEgnIkLKlIFXCljOrZKFevjEuCImPOJCy2 oUOpjeO4sK/4fkKBMgnJ1K/XkcmAT5RqwwaJ9Eqm5fBB9zjZrW/Soy8C4rSUbf+a yC0rkVbCzA4fnEC2CA75nwW0yOcqTaY= -----END CERTIFICATE-----Generated at Thu Oct 9 20:15:40 2025 by rpki-client