$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa File: 6daf06e3-2cad-3170-8e85-a55219de6927.roa (raw, json) Hash identifier: J0biTGvVkCIoF7u4G3rBQT+v4P8AjRtdXH3uCIVAI7U= Subject key identifier: 98:DE:1E:FC:17:E3:2C:69:40:8E:ED:6C:99:1D:49:D0:98:82:E6:CC Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584D2A74DEDDF06BA9ECBDA4D600 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 64286 IP address blocks: 173.239.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:de:dd:f0:6b:a9:ec:bd:a4:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=59cfc697-5cf9-448d-8552-a40a88e80e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:c3:a5:9a:fb:d1:53:42:45:42:31:71:f2: 45:69:f2:38:52:11:33:2d:da:f1:61:e4:e2:96:48: a3:5f:07:67:f7:b6:aa:26:da:a7:c7:e5:51:ca:d9: 27:7b:8a:b0:80:fd:8c:d1:8b:76:04:1f:86:ad:f6: 8c:68:91:2f:38:a5:47:99:04:ec:0e:d4:99:75:aa: 8c:2e:44:a0:37:89:57:4b:29:e8:6f:65:6a:54:10: 47:c2:54:82:ee:56:f6:ff:44:4c:3e:fd:50:04:1f: 1c:50:30:ac:d9:7e:68:8a:2c:68:0f:56:25:c4:cb: 5e:ae:3f:06:21:21:07:54:51:af:3c:96:61:3f:2f: b5:e3:f2:38:ab:8e:d2:19:c7:e1:fd:0e:11:62:52: e0:1c:0c:15:54:64:3c:da:47:3c:5c:23:17:88:f0: 5f:00:d5:b3:b3:a8:70:a0:7b:af:2a:72:1a:c6:8a: a5:9d:60:e4:ec:a4:c5:59:d0:aa:0b:fa:6f:52:dd: b3:e0:3b:d8:3a:a0:6b:aa:1e:c5:0e:16:f4:a1:c9: 35:8b:af:17:70:75:c2:2f:e3:76:cb:d5:25:7c:9b: da:0c:82:53:0e:6c:0a:5f:9c:53:6b:5b:14:da:00: 50:68:3c:fc:c3:8d:09:e1:fb:4f:97:0b:4b:83:60: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DE:1E:FC:17:E3:2C:69:40:8E:ED:6C:99:1D:49:D0:98:82:E6:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:92:e2:3a:41:b8:b2:b4:86:82:dc:70:6f:b3:ff:fe:10:59: 70:5d:43:44:3d:90:b5:6d:7a:41:66:c3:b5:4d:40:3d:1d:36: 88:ff:13:d3:ee:61:a1:7d:57:69:0d:f7:5a:9d:09:3a:83:14: a2:0c:2d:e1:94:29:17:16:fb:cd:bc:29:fc:63:3a:2f:8d:5e: bf:c5:38:98:47:89:ea:9b:ac:0d:69:be:62:dd:6e:81:ea:28: b2:95:1a:05:89:b6:53:da:cb:27:24:75:5d:ef:0e:3c:19:f8: c1:a5:00:c1:ac:2b:b2:bd:6f:0f:7e:03:80:0d:44:52:97:c4: ee:26:35:4b:df:36:64:20:ae:1b:4d:7a:a0:08:ad:f0:1b:63: 5c:60:d3:ec:47:7d:4f:40:cb:62:70:96:58:44:c8:d8:8b:e8: 31:09:82:a4:d9:aa:ab:24:4f:7d:98:57:e9:47:87:2e:b5:19: aa:a6:9d:dc:9e:5e:95:fa:8d:04:d5:d8:9e:2a:9a:10:95:67: 99:ef:a6:ab:89:62:79:65:fe:6d:33:0d:58:e8:94:38:3f:b1: ae:be:8c:e3:5c:56:83:56:6d:54:4f:50:5e:1c:f0:22:5c:02: 95:fb:99:3b:bc:ff:0d:f5:f5:b8:c4:ad:37:e4:79:9a:7d:1b: 65:75:c8:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdN7d8Gup7L2k1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NTljZmM2OTctNWNmOS00NDhkLTg1NTItYTQwYTg4ZTgwZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiljDpZr70VNCRUIxcfJFafI4UhEzLdrxYeTi lkijXwdn97aqJtqnx+VRytkne4qwgP2M0Yt2BB+GrfaMaJEvOKVHmQTsDtSZdaqM LkSgN4lXSynob2VqVBBHwlSC7lb2/0RMPv1QBB8cUDCs2X5oiixoD1YlxMterj8G ISEHVFGvPJZhPy+14/I4q47SGcfh/Q4RYlLgHAwVVGQ82kc8XCMXiPBfANWzs6hw oHuvKnIaxoqlnWDk7KTFWdCqC/pvUt2z4DvYOqBrqh7FDhb0ock1i68XcHXCL+N2 y9UlfJvaDIJTDmwKX5xTa1sU2gBQaDz8w40J4ftPlwtLg2BiYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjeHvwX4yxpQI7tbJkdSdCYgubMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNmRhZjA2ZTMtMmNhZC0z MTcwLThlODUtYTU1MjE5ZGU2OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOS4jpBuLK0hoLccG+z//4QWXBdQ0Q9kLVtekFmw7VNQD0dNoj/E9Pu YaF9V2kN91qdCTqDFKIMLeGUKRcW+828KfxjOi+NXr/FOJhHieqbrA1pvmLdboHq KLKVGgWJtlPayyckdV3vDjwZ+MGlAMGsK7K9bw9+A4ANRFKXxO4mNUvfNmQgrhtN eqAIrfAbY1xg0+xHfU9Ay2JwllhEyNiL6DEJgqTZqqskT32YV+lHhy61Gaqmndye XpX6jQTV2J4qmhCVZ5nvpquJYnll/m0zDVjolDg/sa6+jONcVoNWbVRPUF4c8CJc ApX7mTu8/w319bjErTfkeZp9G2V1yOI= -----END CERTIFICATE-----Generated at Sat Mar 21 12:26:50 2026 by rpki-client