$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa File: a140d151-5e59-30bd-81ec-045425e2fb5b.roa (raw, json) Hash identifier: YkmSica/FpBzhLqLkg1vzTNbdSBSZP68cjLgR7iHRuQ= Subject key identifier: AE:32:3A:91:D9:FC:63:E9:DC:77:EF:C2:12:7D:CD:19:75:24:1F:84 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B2496C3ED513D2B10C3CAED80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 206092 IP address blocks: 173.239.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c3:ed:51:3d:2b:10:c3:ca:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=85ebfaf6-a19c-447c-8379-58f379dc61ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:43:b6:b2:d8:11:6a:70:d7:13:e9:86:57: 4c:46:58:ef:27:88:fc:ad:87:93:a1:b2:f6:4d:29: 77:df:94:2f:60:22:2c:75:90:39:6e:4b:9a:61:64: ff:49:a9:ab:86:92:9e:3a:0e:b6:b0:38:df:71:a8: 18:9a:3d:6d:42:29:67:d5:70:5e:e7:11:c1:70:af: a9:4f:5b:52:75:b7:b6:c9:f7:16:3b:15:cc:f7:fe: 80:be:51:c4:8b:80:84:0c:50:4f:5f:5b:02:24:69: ce:66:0a:c9:7d:4c:70:c4:13:1e:26:50:5e:b7:cc: 20:7f:4b:9e:45:24:52:32:9f:6f:31:3c:90:a7:b8: e4:4d:95:a5:a0:56:39:7f:c2:a8:5b:2b:08:de:3d: 26:97:6c:54:b2:0d:7c:a5:a5:26:dd:96:44:5e:e3: 76:b8:c5:9f:cb:55:fc:83:ab:4d:d7:3d:4c:16:2c: 73:c3:4a:f5:c6:9b:1c:96:79:8d:2b:e8:2e:d0:c2: e1:d8:e8:9b:43:d5:00:cc:ac:ff:d7:0d:86:74:c9: f6:b6:65:84:3e:01:dc:d7:2b:8d:68:05:ef:dd:43: 69:27:bc:94:65:90:0a:98:53:49:f0:61:cf:f9:94: 5f:53:7c:05:04:0a:bb:cc:02:8f:06:96:0d:57:7b: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:32:3A:91:D9:FC:63:E9:DC:77:EF:C2:12:7D:CD:19:75:24:1F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d0:93:5a:8d:a9:a5:2f:82:66:50:25:42:e6:19:d6:5d:4f: 33:34:4d:eb:3e:96:5c:1b:c3:38:db:8b:d4:80:87:cf:86:06: bf:9a:37:6b:56:cd:d3:64:3c:64:cd:52:76:d6:2d:9a:5b:35: 2f:80:07:85:19:36:97:e8:03:78:0e:10:72:2d:b8:5c:fb:71: 3d:43:c4:82:ac:72:db:c4:06:97:d6:1c:25:82:ac:f7:7c:85: 56:5c:1d:9c:eb:a0:1d:fe:21:ef:98:b6:f4:73:1f:a2:33:1c: a0:3a:ee:05:c1:53:ed:20:e9:79:df:71:4a:3b:14:2f:c2:34: 26:04:b8:a4:3e:c1:ba:62:40:11:0a:11:c3:7c:6c:08:a5:07: fe:38:fd:33:96:16:ed:8f:3f:5a:47:2d:07:55:dd:ce:53:83: c9:f2:de:fa:97:24:f1:ad:fb:1c:cb:1b:58:f6:89:db:12:7e: a9:1a:e1:7d:48:a4:ee:e9:d2:7b:08:5b:36:8d:8f:eb:71:2c: b9:8d:ab:7a:b8:d1:49:d0:0c:3f:08:bd:b8:c9:f2:0b:38:d4: d2:c7:f1:53:9c:cb:3c:46:c0:05:e1:5e:31:6b:c4:2f:b3:63: c1:66:82:f2:86:a1:83:f5:e9:38:9f:3a:ca:7d:71:7d:75:e4: d9:de:24:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsPtUT0rEMPK7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ODVlYmZhZjYtYTE5Yy00NDdjLTgzNzktNThmMzc5ZGM2MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03dDtrLYEWpw1xPphldMRljvJ4j8rYeTobL2 TSl335QvYCIsdZA5bkuaYWT/SamrhpKeOg62sDjfcagYmj1tQiln1XBe5xHBcK+p T1tSdbe2yfcWOxXM9/6AvlHEi4CEDFBPX1sCJGnOZgrJfUxwxBMeJlBet8wgf0ue RSRSMp9vMTyQp7jkTZWloFY5f8KoWysI3j0ml2xUsg18paUm3ZZEXuN2uMWfy1X8 g6tN1z1MFixzw0r1xpsclnmNK+gu0MLh2OibQ9UAzKz/1w2GdMn2tmWEPgHc1yuN aAXv3UNpJ7yUZZAKmFNJ8GHP+ZRfU3wFBAq7zAKPBpYNV3vcGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4yOpHZ/GPp3HfvwhJ9zRl1JB+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYTE0MGQxNTEtNWU1OS0z MGJkLTgxZWMtMDQ1NDI1ZTJmYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPQk1qNqaUvgmZQJULmGdZdTzM0Tes+llwbwzjbi9SAh8+GBr+aN2tW zdNkPGTNUnbWLZpbNS+AB4UZNpfoA3gOEHItuFz7cT1DxIKsctvEBpfWHCWCrPd8 hVZcHZzroB3+Ie+YtvRzH6IzHKA67gXBU+0g6XnfcUo7FC/CNCYEuKQ+wbpiQBEK EcN8bAilB/44/TOWFu2PP1pHLQdV3c5Tg8ny3vqXJPGt+xzLG1j2idsSfqka4X1I pO7p0nsIWzaNj+txLLmNq3q40UnQDD8IvbjJ8gs41NLH8VOcyzxGwAXhXjFrxC+z Y8FmgvKGoYP16TifOsp9cX115NneJHI= -----END CERTIFICATE-----Generated at Thu Oct 9 20:14:34 2025 by rpki-client