$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/122ab0f9-4196-3df8-a361-1763d702fb50.roa File: 122ab0f9-4196-3df8-a361-1763d702fb50.roa (raw, json) Hash identifier: WU54x8DSpyclcMm3vw49IlZVIoFwV1u2+D3JAZk8+04= Subject key identifier: 13:89:58:04:11:99:6C:55:B3:9A:59:0A:E7:50:61:58:A4:38:17:A2 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B382195E215D4AAD33DF91340 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/122ab0f9-4196-3df8-a361-1763d702fb50.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 396356 IP address blocks: 173.239.224.0/24 maxlen: 24 173.239.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:95:e2:15:d4:aa:d3:3d:f9:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=e8efc7d4-5304-43ea-a74d-bfa11c2d1cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:10:28:61:dc:de:79:24:e8:10:d0:71:34:83: 9d:9d:b5:40:88:ec:92:81:a9:a6:1d:57:09:4c:e0: 8c:90:18:9a:64:c3:ef:d6:10:35:fa:4e:9b:78:7f: 5c:03:3a:e0:29:31:12:c8:5e:be:fd:5c:69:8d:cc: cf:05:a5:1c:89:8c:5b:82:89:4a:07:0f:c6:09:da: be:41:1e:2f:a9:d1:06:53:b8:0c:e3:0f:8d:da:06: f2:c9:68:77:0f:c6:8c:5d:d8:d8:df:a9:43:ed:41: 55:92:73:0c:5e:25:a6:87:e4:15:53:73:4b:55:2c: c6:d5:3d:8a:ff:b2:7f:df:c8:b4:df:f7:3a:70:75: fb:f4:1f:75:88:55:8b:00:48:5a:4f:d7:f4:d2:72: 31:74:a9:96:04:57:7f:39:28:aa:f2:80:84:b0:c3: 5e:89:bf:60:85:b5:f7:67:47:7e:8e:4a:37:09:ab: 27:a6:e5:80:ec:2b:f6:48:fc:2a:7a:6c:06:ac:8b: 0e:88:4e:83:15:70:f9:a1:c7:3a:cd:ac:c9:10:58: 03:27:7e:f7:22:a7:2f:37:e4:d5:e5:10:d7:9a:22: a4:bb:0b:da:92:61:16:d9:c4:d8:63:de:61:42:a8: f4:2e:88:bf:cc:d9:6a:4f:8d:3b:e9:2c:c3:22:1f: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:89:58:04:11:99:6C:55:B3:9A:59:0A:E7:50:61:58:A4:38:17:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/122ab0f9-4196-3df8-a361-1763d702fb50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.224.0/24 173.239.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:16:70:3d:dd:ba:e0:8f:15:e7:da:e7:d8:bf:82:3d:2f:ad: a1:3c:b2:fd:42:87:88:91:a9:91:81:79:fe:56:93:85:cd:aa: de:60:8a:e2:93:d1:6f:d1:16:ca:7e:eb:bd:9a:c5:84:89:fe: 62:20:39:93:25:c4:9e:bd:ea:51:10:aa:59:a3:5c:31:5d:90: 36:a2:20:b2:47:14:82:d3:40:a8:55:75:83:6b:db:e3:4b:32: 9f:e9:aa:83:ff:b7:85:da:5b:1d:92:9a:d6:fa:f2:3f:bd:2d: f5:16:55:05:d1:cb:69:07:ca:dc:46:e9:2b:ea:62:33:6b:51: 73:09:dc:ed:21:06:56:87:da:23:71:b7:7d:9b:df:e9:b9:eb: 57:75:b3:e6:bd:42:34:dd:7a:6f:d4:da:d7:4a:26:68:eb:77: c0:3d:f5:4a:0b:d3:bb:03:1a:bc:2e:9b:f7:35:2d:56:f5:90: 9d:9c:f4:9a:e0:b2:0b:b0:62:fa:7d:26:99:b7:ff:57:5b:84: 9c:98:d6:50:35:4f:c9:db:0c:69:59:d9:0a:0d:70:f3:bd:cc: c9:93:d0:59:66:1e:e1:20:1e:c1:7d:30:48:4d:aa:7d:f3:a3: 41:eb:08:53:54:3e:99:03:eb:51:83:ea:18:60:ce:4d:d0:53: 4c:1f:4c:bf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs4IZXiFdSq0z35E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZThlZmM3ZDQtNTMwNC00M2VhLWE3NGQtYmZhMTFjMmQxY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBAoYdzeeSToENBxNIOdnbVAiOySgammHVcJ TOCMkBiaZMPv1hA1+k6beH9cAzrgKTESyF6+/VxpjczPBaUciYxbgolKBw/GCdq+ QR4vqdEGU7gM4w+N2gbyyWh3D8aMXdjY36lD7UFVknMMXiWmh+QVU3NLVSzG1T2K /7J/38i03/c6cHX79B91iFWLAEhaT9f00nIxdKmWBFd/OSiq8oCEsMNeib9ghbX3 Z0d+jko3CasnpuWA7Cv2SPwqemwGrIsOiE6DFXD5occ6zazJEFgDJ373IqcvN+TV 5RDXmiKkuwvakmEW2cTYY95hQqj0Loi/zNlqT4076SzDIh9T2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBOJWAQRmWxVs5pZCudQYVikOBeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMTIyYWIwZjktNDE5Ni0z ZGY4LWEzNjEtMTc2M2Q3MDJmYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/gAwQA re/wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK4WcD3duuCPFefa59i/gj0vraE8sv1Ch4iRqZGBef5Wk4XN qt5giuKT0W/RFsp+672axYSJ/mIgOZMlxJ696lEQqlmjXDFdkDaiILJHFILTQKhV dYNr2+NLMp/pqoP/t4XaWx2Smtb68j+9LfUWVQXRy2kHytxG6SvqYjNrUXMJ3O0h BlaH2iNxt32b3+m561d1s+a9QjTdem/U2tdKJmjrd8A99UoL07sDGrwum/c1LVb1 kJ2c9JrgsguwYvp9Jpm3/1dbhJyY1lA1T8nbDGlZ2QoNcPO9zMmT0FlmHuEgHsF9 MEhNqn3zo0HrCFNUPpkD61GD6hhgzk3QU0wfTL8= -----END CERTIFICATE-----Generated at Thu Oct 9 20:15:43 2025 by rpki-client