$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/678c0dda-8a80-332d-afff-1bfd476a9328.roa File: 678c0dda-8a80-332d-afff-1bfd476a9328.roa (raw, json) Hash identifier: lIGrS+I1pZld04jJV0yEIJImmWRxLSoDDxIDA/hh/oA= Subject key identifier: 9D:DB:9B:3B:6D:92:0D:A2:22:8D:45:8D:29:5D:0F:BF:09:25:3F:7D Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584E43F47529A1BD782B196CBF00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/678c0dda-8a80-332d-afff-1bfd476a9328.roa Signing time: Tue 23 Jun 2026 09:00:12 +0000 ROA not before: Tue 23 Jun 2026 09:00:12 +0000 ROA not after: Mon 21 Sep 2026 09:00:12 +0000 asID: 20001 IP address blocks: 173.239.241.0/24 maxlen: 24 173.239.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:43:f4:75:29:a1:bd:78:2b:19:6c:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 23 09:00:12 2026 GMT Not After : Sep 21 09:00:12 2026 GMT Subject: CN=6ca82746-8871-429f-8a2f-5badcbd5b790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:9f:2c:60:ac:9c:56:dd:6a:8f:51:12:9f: 3f:1f:27:3d:5d:e2:55:d2:9d:ee:94:71:b1:30:74: e4:88:1f:23:4b:8c:b0:ad:34:92:11:bb:79:cf:97: f1:e3:35:38:37:61:be:30:42:b2:4b:0b:cb:48:fe: 5b:58:f3:c8:0d:6f:0d:4d:7e:b0:08:63:dc:97:2e: af:0a:b8:2f:fa:59:df:92:19:b5:3d:a6:f7:6b:ca: 46:5e:52:f0:fb:39:c3:76:15:33:bd:c9:64:e4:ab: df:41:cf:3d:37:42:c2:74:cc:4a:16:d3:07:d4:53: cd:90:22:79:8a:2a:95:e9:5d:c0:da:d8:e3:f5:56: b7:1a:53:02:7e:f7:3e:dc:93:cf:d2:4c:8a:aa:27: ca:30:8c:58:59:53:1a:d6:ff:0d:1f:ed:e8:12:d7: 32:98:1a:d0:37:b8:46:c1:03:d2:19:95:e1:24:bf: b0:56:d6:af:1b:dc:e3:f0:db:79:bc:f7:ae:41:6e: d9:ee:dc:20:a8:07:0b:65:ce:40:bf:53:e2:40:11: 95:4f:06:81:09:8f:72:c6:c6:20:76:38:e1:e3:9f: 0b:17:df:d7:06:68:07:fe:28:03:3a:a0:23:e6:bb: 3e:25:36:7a:6a:f1:ba:9d:d6:a1:8f:ec:3e:08:7a: 3a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DB:9B:3B:6D:92:0D:A2:22:8D:45:8D:29:5D:0F:BF:09:25:3F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/678c0dda-8a80-332d-afff-1bfd476a9328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.241.0/24 173.239.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:92:0c:78:10:f7:16:72:00:3c:91:81:38:7c:04:e4:a1:7e: 4c:2f:d6:ae:c4:25:2d:e2:17:94:a8:1a:77:18:10:16:25:b8: 22:88:c6:e8:dc:da:78:18:81:20:eb:48:6d:19:4e:8a:65:1f: b4:47:d9:08:88:05:fe:01:6b:84:e1:31:ff:8a:09:0e:cc:90: 4e:d0:0f:fe:17:f6:3f:06:8a:96:b7:e0:e9:a4:ae:2c:f6:f0: 20:34:2e:94:89:65:0c:19:57:c7:5a:01:51:60:69:40:39:70: 6b:a9:15:76:cf:3c:b0:5c:58:eb:f1:d4:6d:10:50:fb:f5:ff: 52:7d:cf:08:9a:7c:f7:45:24:65:82:fa:49:3e:5b:6e:1b:62: 6c:35:28:9b:32:71:5e:31:9b:72:5f:98:23:3a:ef:93:fc:b7: f9:f8:e6:99:0a:27:7a:d8:4a:69:ad:8a:06:97:8e:3a:25:62: 20:73:2e:f3:72:32:37:25:5f:22:b7:93:ae:42:2b:77:87:1c: 20:a9:34:03:c2:84:88:1a:e7:31:c5:3d:85:04:3d:06:50:8b: 87:cd:81:13:32:90:ad:cc:2e:e9:54:c2:59:dd:cc:82:7e:e7: 4d:f0:83:5d:77:1f:75:f9:5e:56:65:7f:5f:67:16:be:24:e6: 74:91:24:69 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5D9HUpob14KxlsvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDYyMzA5MDAxMloXDTI2MDkyMTA5MDAxMlowLzEtMCsGA1UEAxMk NmNhODI3NDYtODg3MS00MjlmLThhMmYtNWJhZGNiZDViNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdufLGCsnFbdao9REp8/Hyc9XeJV0p3ulHGx MHTkiB8jS4ywrTSSEbt5z5fx4zU4N2G+MEKySwvLSP5bWPPIDW8NTX6wCGPcly6v Crgv+lnfkhm1Pab3a8pGXlLw+znDdhUzvclk5KvfQc89N0LCdMxKFtMH1FPNkCJ5 iiqV6V3A2tjj9Va3GlMCfvc+3JPP0kyKqifKMIxYWVMa1v8NH+3oEtcymBrQN7hG wQPSGZXhJL+wVtavG9zj8Nt5vPeuQW7Z7twgqAcLZc5Av1PiQBGVTwaBCY9yxsYg djjh458LF9/XBmgH/igDOqAj5rs+JTZ6avG6ndahj+w+CHo6MwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ3bmzttkg2iIo1FjSldD78JJT99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNjc4YzBkZGEtOGE4MC0z MzJkLWFmZmYtMWJmZDQ3NmE5MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/xAwQA re/0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH6SDHgQ9xZyADyRgTh8BOShfkwv1q7EJS3iF5SoGncYEBYl uCKIxujc2ngYgSDrSG0ZToplH7RH2QiIBf4Ba4ThMf+KCQ7MkE7QD/4X9j8Gipa3 4Omkriz28CA0LpSJZQwZV8daAVFgaUA5cGupFXbPPLBcWOvx1G0QUPv1/1J9zwia fPdFJGWC+kk+W24bYmw1KJsycV4xm3JfmCM675P8t/n45pkKJ3rYSmmtigaXjjol YiBzLvNyMjclXyK3k65CK3eHHCCpNAPChIga5zHFPYUEPQZQi4fNgRMykK3MLulU wlndzIJ+503wg113H3X5XlZlf19nFr4k5nSRJGk= -----END CERTIFICATE-----Generated at Fri Jul 10 13:49:37 2026 by rpki-client