$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa File: cb3521ee-876b-31da-af7d-3913e552e9f6.roa (raw, json) Hash identifier: U1MBEVh7LOfuLDxl1ylTj8H8MB/O4iJfLzbDCaxIUbU= Subject key identifier: 6A:11:64:6B:FA:65:85:FE:08:7B:0D:4E:AF:93:B2:F6:CA:2D:05:53 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B3986F7D976D7CF87CFBDD700 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 62240 IP address blocks: 173.239.213.0/24 maxlen: 24 173.239.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:f7:d9:76:d7:cf:87:cf:bd:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=6591a69e-5708-4672-af8c-655877e8ae08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:c8:43:4b:31:36:5f:2a:d6:b3:55:30:3f: a6:66:46:65:b4:f5:c9:7b:5a:2e:5d:00:4d:79:40: ac:4a:58:f3:d0:13:f5:b4:a5:16:74:ac:ea:17:0a: 70:25:b9:c9:c9:76:76:7a:49:7d:97:f3:6d:3b:ed: 4a:d2:00:66:fb:22:c6:01:fd:30:42:7a:e1:07:e6: fb:05:26:3c:29:1c:c9:93:51:31:67:45:cb:10:f6: fb:2d:4b:81:71:4b:d6:45:00:41:f1:54:9e:6d:6d: 11:bb:e7:99:24:3b:f9:2f:fe:9a:1e:c5:30:83:fd: 55:91:86:3f:35:2e:76:72:8b:0b:fd:9b:81:37:2c: 49:8f:59:c5:b0:98:3d:0b:ec:4b:de:3f:3c:c2:a2: e6:2e:c1:d0:b8:22:da:a0:90:7a:7c:1b:89:f1:25: cf:90:1f:18:00:0e:70:68:9d:50:03:8e:91:bd:13: 64:fa:e1:10:3a:ac:f0:98:73:97:22:b5:74:2a:64: 00:ca:bc:e3:84:95:1b:5d:f1:57:6e:a3:5e:95:70: ee:e2:14:eb:90:db:b2:e4:45:5b:5f:ce:fe:5e:db: e3:be:cb:f0:de:39:b0:94:67:b8:1e:0e:fd:c8:6b: 01:5c:22:e3:cb:34:c3:19:8d:c4:2f:e2:46:25:7e: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:11:64:6B:FA:65:85:FE:08:7B:0D:4E:AF:93:B2:F6:CA:2D:05:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.213.0-173.239.214.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:68:a0:19:a9:df:1a:1d:6c:b0:e9:81:2f:94:2f:2e:a0:c6: 6c:1e:31:de:24:27:3f:6e:d8:06:ab:fb:3b:45:75:c6:aa:dc: 36:85:67:10:cb:25:80:ce:df:98:02:2c:31:8c:63:b5:be:47: e3:38:2b:60:af:9d:b3:11:37:6d:2f:da:de:56:d6:b4:75:7b: e7:6e:dc:55:dc:25:2e:af:cd:12:f5:61:f8:68:d7:d8:ce:3d: 5a:9d:6a:6d:84:3c:42:0a:d6:96:8a:1c:a9:c1:19:47:eb:af: 0c:55:a9:a4:de:79:03:87:de:6d:44:41:5d:35:1b:20:50:4b: af:80:67:e2:6e:cd:63:02:73:25:e7:cf:93:dc:72:be:9d:9f: 63:e9:df:9f:ed:21:f1:ac:56:5e:36:40:75:d7:5a:e4:58:aa: 15:48:a5:59:f7:63:a5:e4:c2:9e:24:7d:37:de:10:8f:92:9e: 63:64:c0:24:18:58:9a:6f:cd:ca:a8:cb:d5:40:48:96:2b:64: d9:33:0f:6d:26:d9:b2:36:28:91:64:12:75:dd:d6:19:10:8c: 10:10:e7:06:1a:97:d8:25:d8:66:c4:4f:93:93:61:55:85:90: 7c:7f:46:9f:52:6a:bf:dc:45:b8:f5:6b:c4:70:3b:f4:4d:71: 56:75:e7:90 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs5hvfZdtfPh8+91wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NjU5MWE2OWUtNTcwOC00NjcyLWFmOGMtNjU1ODc3ZThhZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf/IQ0sxNl8q1rNVMD+mZkZltPXJe1ouXQBN eUCsSljz0BP1tKUWdKzqFwpwJbnJyXZ2ekl9l/NtO+1K0gBm+yLGAf0wQnrhB+b7 BSY8KRzJk1ExZ0XLEPb7LUuBcUvWRQBB8VSebW0Ru+eZJDv5L/6aHsUwg/1VkYY/ NS52cosL/ZuBNyxJj1nFsJg9C+xL3j88wqLmLsHQuCLaoJB6fBuJ8SXPkB8YAA5w aJ1QA46RvRNk+uEQOqzwmHOXIrV0KmQAyrzjhJUbXfFXbqNelXDu4hTrkNuy5EVb X87+Xtvjvsvw3jmwlGe4Hg79yGsBXCLjyzTDGY3EL+JGJX66NQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGoRZGv6ZYX+CHsNTq+TsvbKLQVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvY2IzNTIxZWUtODc2Yi0z MWRhLWFmN2QtMzkxM2U1NTJlOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACt79UD BACt79YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAumigGanfGh1ssOmBL5QvLqDGbB4x3iQnP27YBqv7O0V1 xqrcNoVnEMslgM7fmAIsMYxjtb5H4zgrYK+dsxE3bS/a3lbWtHV7527cVdwlLq/N EvVh+GjX2M49Wp1qbYQ8QgrWloocqcEZR+uvDFWppN55A4febURBXTUbIFBLr4Bn 4m7NYwJzJefPk9xyvp2fY+nfn+0h8axWXjZAddda5FiqFUilWfdjpeTCniR9N94Q j5KeY2TAJBhYmm/NyqjL1UBIlitk2TMPbSbZsjYokWQSdd3WGRCMEBDnBhqX2CXY ZsRPk5NhVYWQfH9Gn1Jqv9xFuPVrxHA79E1xVnXnkA== -----END CERTIFICATE-----Generated at Thu Oct 9 20:11:11 2025 by rpki-client