$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa File: 6daf06e3-2cad-3170-8e85-a55219de6927.roa (raw, json) Hash identifier: TJXXf7H4St/2F9sd5A8EjzJwltgFR+SDmuvKQeown7M= Subject key identifier: C5:F5:12:11:2D:57:EA:DF:0D:5D:86:CB:FD:08:AC:A5:8D:D5:B7:AB Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B6A62035F3712675F499212D0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 64286 IP address blocks: 173.239.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:03:5f:37:12:67:5f:49:92:12:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=6d52edad-b816-4924-8525-7247edf88719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:91:03:e8:db:a0:41:e5:7c:72:d8:a9:31: 4c:ff:a5:74:03:8a:c9:9c:d6:bb:04:97:2b:2f:1e: ab:ca:7e:9d:bc:c4:bb:57:0f:5f:b0:19:68:ea:00: 07:ac:90:32:39:ed:92:c7:9b:7c:9d:96:54:dc:66: 3b:e7:bf:a0:14:fc:64:bf:a6:8e:a7:3d:3e:8f:e2: 36:0c:81:11:d5:46:a6:42:c4:b0:2e:ac:c4:5c:0b: 7a:b2:51:f7:24:29:cb:3c:67:62:79:f0:39:6a:d5: 5b:69:9e:0f:ba:7e:dc:0b:12:16:cd:95:4e:b5:59: cf:08:a4:e4:42:5f:27:f4:40:e0:c3:7a:38:c4:e1: fc:eb:40:e0:e1:4e:c9:dc:4d:c9:33:52:26:b3:17: 09:25:0e:6e:04:fc:83:c6:a1:49:78:f9:3b:80:a2: 37:22:5e:2b:cf:a3:cf:15:0d:9f:96:e6:2e:6d:2e: 42:18:48:56:33:45:a7:3b:0f:33:05:74:2f:6c:5c: 38:db:a5:63:34:2d:9b:55:a3:43:a2:a8:83:d3:50: f0:b2:74:aa:c6:45:45:2d:a9:36:cd:39:61:56:ba: 93:ea:65:06:f7:02:07:98:c8:89:43:a7:12:2c:bb: 73:02:7d:cb:d7:80:bc:45:31:f4:5c:04:62:0a:70: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F5:12:11:2D:57:EA:DF:0D:5D:86:CB:FD:08:AC:A5:8D:D5:B7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:60:14:5b:d2:a2:e9:36:65:3d:38:b7:16:19:2d:03:9f:41: c8:19:a3:86:54:47:38:ec:19:b2:d6:ab:35:27:d6:46:e3:ab: fc:dc:c0:b4:1f:5e:c5:ad:fb:97:62:ae:4f:4f:b0:d8:1a:59: aa:65:a5:00:03:ea:f4:d4:02:bc:51:41:bd:66:8d:e1:8b:ad: 80:45:3c:48:c7:e5:08:6b:ae:70:62:b2:5a:2e:ab:d4:52:4c: be:fa:b5:5c:2c:4d:cb:de:8c:54:8c:da:f7:1a:e9:b3:7a:4a: bb:0b:b4:ca:d2:1d:56:2c:22:80:66:d4:fd:e6:4f:e8:b2:6b: 7a:bd:0e:fe:b3:e7:56:d6:30:0a:7a:46:12:38:e9:09:5c:ea: f3:d5:1f:9c:84:2f:88:b6:e1:39:99:a5:71:ba:0b:d5:ea:74: 0a:78:5d:e5:e7:b2:fa:f8:27:b7:0e:f7:92:36:ca:ab:9e:94: 2b:64:64:2b:35:b7:61:9d:d1:2e:5e:11:7e:f7:98:c5:ef:65: 1d:fb:01:21:9b:95:20:77:4f:7a:dc:6a:70:f1:75:4c:e2:e4: 0e:23:b9:72:c7:94:aa:06:01:6c:ef:46:1f:d3:ab:1b:1c:e9: 27:85:53:10:83:89:dd:5f:f8:e5:ff:96:c4:38:95:ef:38:64: 3f:81:49:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYgNfNxJnX0mSEtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NmQ1MmVkYWQtYjgxNi00OTI0LTg1MjUtNzI0N2VkZjg4NzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFuRA+jboEHlfHLYqTFM/6V0A4rJnNa7BJcr Lx6ryn6dvMS7Vw9fsBlo6gAHrJAyOe2Sx5t8nZZU3GY757+gFPxkv6aOpz0+j+I2 DIER1UamQsSwLqzEXAt6slH3JCnLPGdiefA5atVbaZ4Pun7cCxIWzZVOtVnPCKTk Ql8n9EDgw3o4xOH860Dg4U7J3E3JM1ImsxcJJQ5uBPyDxqFJePk7gKI3Il4rz6PP FQ2fluYubS5CGEhWM0WnOw8zBXQvbFw426VjNC2bVaNDoqiD01DwsnSqxkVFLak2 zTlhVrqT6mUG9wIHmMiJQ6cSLLtzAn3L14C8RTH0XARiCnAkHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX1EhEtV+rfDV2Gy/0IrKWN1berMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNmRhZjA2ZTMtMmNhZC0z MTcwLThlODUtYTU1MjE5ZGU2OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZgFFvSouk2ZT04txYZLQOfQcgZo4ZURzjsGbLWqzUn1kbjq/zcwLQf XsWt+5dirk9PsNgaWaplpQAD6vTUArxRQb1mjeGLrYBFPEjH5QhrrnBislouq9RS TL76tVwsTcvejFSM2vca6bN6SrsLtMrSHVYsIoBm1P3mT+iya3q9Dv6z51bWMAp6 RhI46Qlc6vPVH5yEL4i24TmZpXG6C9XqdAp4XeXnsvr4J7cO95I2yquelCtkZCs1 t2Gd0S5eEX73mMXvZR37ASGblSB3T3rcanDxdUzi5A4juXLHlKoGAWzvRh/Tqxsc 6SeFUxCDid1f+OX/lsQ4le84ZD+BSXo= -----END CERTIFICATE-----Generated at Sun Oct 19 20:20:01 2025 by rpki-client