$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d3cf8c1f-c96e-3f12-9208-141e6927923d.roa File: d3cf8c1f-c96e-3f12-9208-141e6927923d.roa (raw, json) Hash identifier: by4vnsrV83XCClm/71PP32Wa9Xrd/sVpNDGhKEgwcZg= Subject key identifier: FE:58:E0:E9:3E:AA:1D:C4:5B:2E:BC:55:40:F7:15:3D:0F:88:B5:4D Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B2066D77614CB39FD5C567010 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d3cf8c1f-c96e-3f12-9208-141e6927923d.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 212238 IP address blocks: 173.239.201.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d7:76:14:cb:39:fd:5c:56:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=7fb54657-312a-4341-b651-f570fd48d41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:f8:46:c4:d2:74:0a:6f:2f:4f:c9:cd:87: 2e:92:f0:67:14:8b:5e:f4:62:1f:0e:33:fc:a4:53: 7f:f6:70:3f:7e:b0:1d:2a:4e:19:bf:6b:bc:f4:c2: df:32:ec:f4:7e:6e:21:f8:01:a5:10:71:a9:ff:7b: 47:19:29:f0:e3:4c:9b:d7:60:f6:87:75:78:6a:53: c1:6b:8d:c0:69:c6:d2:29:be:ce:12:7e:ca:b4:d6: e1:04:1e:4b:d7:c6:30:3e:62:e4:9a:a3:7e:ba:43: a5:12:8c:63:5e:c0:72:5f:d8:4f:71:7c:db:e7:41: 10:8d:e1:74:57:4d:4e:90:f8:8c:80:24:0c:e0:1b: e3:a3:27:7a:54:fd:6e:f5:1b:ac:7a:e1:81:9e:86: 86:67:23:25:50:bf:88:88:cf:cf:16:d7:47:c0:2d: 3d:80:0f:3d:5f:7b:dd:75:5e:e9:ee:34:e5:31:19: 4b:34:f0:a5:2b:c0:e9:20:73:11:0b:c0:09:f5:47: 11:fd:38:67:12:3f:09:31:23:4a:2d:f6:c9:52:11: f8:3b:14:c2:fa:49:23:ca:6c:ab:5f:3e:e3:fd:e5: 6c:2d:b1:59:7b:6b:7f:fc:19:19:25:48:1e:15:da: 32:27:df:cd:29:35:68:01:a7:ce:2c:bf:a6:9d:96: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:58:E0:E9:3E:AA:1D:C4:5B:2E:BC:55:40:F7:15:3D:0F:88:B5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d3cf8c1f-c96e-3f12-9208-141e6927923d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.201.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:46:aa:9a:10:bd:c9:f4:72:c2:5f:73:1a:6f:db:73:85:1d: e2:e9:04:a8:97:96:ce:e1:f6:77:72:b9:db:d3:bb:78:55:76: a0:1b:38:df:f4:08:ce:8a:80:48:4d:a5:6e:29:4f:d9:33:0d: 35:bb:5a:c4:04:96:b8:ce:a7:9f:97:10:e5:c9:01:9b:e7:da: 7c:dc:b7:4f:67:6a:d7:0f:70:19:52:e0:98:1a:2a:cb:53:61: 9a:10:a7:01:b1:3d:a3:f9:af:14:31:b0:00:4b:78:a8:96:33: 04:fe:80:44:d2:30:1d:78:fc:06:0a:a7:37:e7:62:bc:c5:e0: 8d:e4:30:e8:5d:c5:23:f5:38:b1:e4:c3:76:25:b3:82:3f:59: cc:a6:5f:30:1f:f2:bc:6e:98:93:86:d1:11:50:6b:2f:5a:b6: a9:13:c5:31:86:2c:c7:a7:36:ec:dc:d3:ed:9d:6a:dd:87:98: 6b:4d:b0:13:60:f3:e7:58:90:e4:fc:ce:ad:46:0c:09:06:0e: f2:04:55:c1:00:2b:0b:9a:4a:10:86:9d:8f:8f:54:f0:c6:f7: a8:da:4e:5c:12:b9:40:af:e2:5e:27:f7:85:0c:bc:1c:d1:b4: 40:f4:09:b2:ed:db:37:70:43:32:17:9a:bb:3f:90:b6:38:bc: f8:d8:fd:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsgZtd2FMs5/VxWcBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk N2ZiNTQ2NTctMzEyYS00MzQxLWI2NTEtZjU3MGZkNDhkNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZf4RsTSdApvL0/JzYcukvBnFIte9GIfDjP8 pFN/9nA/frAdKk4Zv2u89MLfMuz0fm4h+AGlEHGp/3tHGSnw40yb12D2h3V4alPB a43AacbSKb7OEn7KtNbhBB5L18YwPmLkmqN+ukOlEoxjXsByX9hPcXzb50EQjeF0 V01OkPiMgCQM4Bvjoyd6VP1u9RuseuGBnoaGZyMlUL+IiM/PFtdHwC09gA89X3vd dV7p7jTlMRlLNPClK8DpIHMRC8AJ9UcR/ThnEj8JMSNKLfbJUhH4OxTC+kkjymyr Xz7j/eVsLbFZe2t//BkZJUgeFdoyJ9/NKTVoAafOLL+mnZYWOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP5Y4Ok+qh3EWy68VUD3FT0PiLVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZDNjZjhjMWYtYzk2ZS0z ZjEyLTkyMDgtMTQxZTY5Mjc5MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/JADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdRqqaEL3J9HLCX3Mab9tzhR3i6QSol5bO4fZ3crnb07t4VXagGzjf 9AjOioBITaVuKU/ZMw01u1rEBJa4zqeflxDlyQGb59p83LdPZ2rXD3AZUuCYGirL U2GaEKcBsT2j+a8UMbAAS3ioljME/oBE0jAdePwGCqc352K8xeCN5DDoXcUj9Tix 5MN2JbOCP1nMpl8wH/K8bpiThtERUGsvWrapE8UxhizHpzbs3NPtnWrdh5hrTbAT YPPnWJDk/M6tRgwJBg7yBFXBACsLmkoQhp2Pj1Twxveo2k5cErlAr+JeJ/eFDLwc 0bRA9Amy7ds3cEMyF5q7P5C2OLz42P1H -----END CERTIFICATE-----Generated at Thu Oct 9 20:11:14 2025 by rpki-client