$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa File: 848bc911-8d84-34e0-adf4-211d260c3143.roa (raw, json) Hash identifier: Xj6d06UZ8wgQdOfvf5pLDco+lrrMkfsSUC0fB2mVsu0= Subject key identifier: AA:89:D7:90:5E:BB:45:92:A9:40:64:CB:99:C4:D2:AC:BD:93:BE:C5 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B382195CBDBA91464C3A4AE40 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 206092 IP address blocks: 173.239.211.0/24 maxlen: 24 173.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:95:cb:db:a9:14:64:c3:a4:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=bcdf2b3a-e779-4df0-9303-080a9cb59e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:8b:93:41:62:ed:8d:6c:0c:57:a1:e9:b2: ae:74:c2:eb:04:de:f1:55:48:5a:e9:54:cf:1a:5b: f3:95:a4:13:86:e2:0c:17:3c:8e:87:f7:4d:51:65: 19:85:93:6a:6c:b1:58:ca:60:d4:3a:32:b8:81:37: 8b:34:f5:0f:95:d6:ad:55:06:c9:cb:73:6d:85:ca: 4b:8f:06:9f:ac:80:ab:98:c6:40:42:dd:86:0a:4f: 70:03:be:90:56:30:49:2f:91:cb:38:2f:d2:94:7a: f6:95:d0:f5:e2:ac:84:3b:fc:52:2e:dc:ba:d4:23: 09:40:07:50:b0:34:9a:94:76:3e:45:e0:72:cf:b9: 6d:a3:cc:cc:4c:67:b1:d5:19:d3:f2:45:6c:91:b0: 0f:5d:f2:fa:f8:41:66:e0:dc:79:a3:ff:1f:96:75: c7:87:f5:5f:e1:06:a0:f0:52:3a:3f:ba:a1:3f:e2: a9:f5:f3:32:34:75:cc:d6:53:fe:54:63:1a:ef:bf: a8:da:33:eb:ec:5d:d4:83:8a:c5:78:36:70:9d:7c: b4:53:9c:45:77:c0:c9:22:7f:04:d8:e4:20:0e:e5: d6:ea:f4:15:55:e8:e6:66:00:8c:93:8c:d8:db:36: 49:04:5a:e9:76:79:b5:1e:b3:c0:a3:e7:2f:1a:02: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:89:D7:90:5E:BB:45:92:A9:40:64:CB:99:C4:D2:AC:BD:93:BE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.211.0/24 173.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:49:6d:cc:84:d9:09:39:db:be:dd:03:77:29:a5:1c:09:35: 0d:45:7a:51:89:a8:a5:99:2a:ff:e1:06:06:6a:2b:24:38:a5: 92:39:c4:89:fb:71:9f:58:0d:b0:48:ff:73:21:a9:d8:e9:a0: 1d:f6:19:c7:d2:cd:54:82:bd:3f:83:43:6d:06:cf:ef:1c:23: 78:dc:93:8a:0c:15:e1:db:28:99:0a:c3:0b:82:11:73:15:59: b1:76:39:ce:d5:f0:b2:94:6f:e7:c9:12:68:39:92:b2:b0:31: 65:d7:cd:09:cc:ac:18:6f:5e:03:6e:4c:30:36:0c:b4:ee:cf: 62:fd:43:6f:ff:7b:88:1f:82:48:16:11:a6:59:b8:ae:9f:7e: ac:9a:20:a3:77:ae:06:ee:24:34:18:df:72:ef:df:84:6b:b4: 3e:84:58:01:c2:49:f5:a4:6f:b3:ef:eb:07:7a:13:6d:a7:9f: 40:ad:fd:ba:bd:d0:fe:ca:63:82:98:13:20:6e:39:4f:af:cc: 46:14:46:29:38:e2:92:45:1f:e2:1e:8c:30:ed:41:08:6a:47: 05:6f:d1:88:fb:d4:77:7a:20:d3:7a:52:94:d4:63:89:84:d7: 06:14:1b:03:86:18:90:af:58:06:83:3c:56:4f:8e:04:bb:d3: 1b:8d:a6:5a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs4IZXL26kUZMOkrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YmNkZjJiM2EtZTc3OS00ZGYwLTkzMDMtMDgwYTljYjU5ZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZOLk0Fi7Y1sDFeh6bKudMLrBN7xVUha6VTP GlvzlaQThuIMFzyOh/dNUWUZhZNqbLFYymDUOjK4gTeLNPUPldatVQbJy3NthcpL jwafrICrmMZAQt2GCk9wA76QVjBJL5HLOC/SlHr2ldD14qyEO/xSLty61CMJQAdQ sDSalHY+ReByz7lto8zMTGex1RnT8kVskbAPXfL6+EFm4Nx5o/8flnXHh/Vf4Qag 8FI6P7qhP+Kp9fMyNHXM1lP+VGMa77+o2jPr7F3Ug4rFeDZwnXy0U5xFd8DJIn8E 2OQgDuXW6vQVVejmZgCMk4zY2zZJBFrpdnm1HrPAo+cvGgIpMQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKqJ15Beu0WSqUBky5nE0qy9k77FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODQ4YmM5MTEtOGQ4NC0z NGUwLWFkZjQtMjExZDI2MGMzMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/TAwQA re/+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAlJbcyE2Qk5277dA3cppRwJNQ1FelGJqKWZKv/hBgZqKyQ4 pZI5xIn7cZ9YDbBI/3MhqdjpoB32GcfSzVSCvT+DQ20Gz+8cI3jck4oMFeHbKJkK wwuCEXMVWbF2Oc7V8LKUb+fJEmg5krKwMWXXzQnMrBhvXgNuTDA2DLTuz2L9Q2// e4gfgkgWEaZZuK6ffqyaIKN3rgbuJDQY33Lv34RrtD6EWAHCSfWkb7Pv6wd6E22n n0Ct/bq90P7KY4KYEyBuOU+vzEYURik44pJFH+IejDDtQQhqRwVv0Yj71Hd6INN6 UpTUY4mE1wYUGwOGGJCvWAaDPFZPjgS70xuNplo= -----END CERTIFICATE-----Generated at Thu Oct 9 20:14:34 2025 by rpki-client