$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa File: 6daf06e3-2cad-3170-8e85-a55219de6927.roa (raw, json) Hash identifier: 1Na+0I6srGBRf//ptfhYSe7aJrNc9Et/FIwlxbqHVAI= Subject key identifier: 5C:C3:74:02:17:E4:FE:29:D9:78:91:3B:D2:C5:30:AB:F4:60:52:52 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F4F0804ED3D87A2C0DDAC94C0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 64286 IP address blocks: 173.239.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:04:ed:3d:87:a2:c0:dd:ac:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=2e02a99b-774e-4de3-b469-7c68b3594d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:70:af:ac:bf:77:d6:f0:b6:37:d7:b7:28: 44:09:0e:3b:93:82:ba:bd:65:38:79:30:c3:67:77: ea:04:14:fc:25:d1:2c:70:3f:41:f7:2d:b1:ca:e6: 96:a6:b6:47:40:e7:f1:d7:8b:8a:4c:e0:d4:2d:69: 1f:e2:70:7d:e8:c0:67:21:87:75:3a:ae:33:c6:d2: e2:cb:84:48:56:22:f1:bf:84:a5:ac:bd:16:fc:9c: a1:6e:f1:09:f5:8c:c2:8b:fa:f2:7b:be:4c:cf:90: 56:e9:f6:56:f4:5d:e2:5f:3d:29:1d:7b:13:15:c4: 09:95:df:92:d9:2b:06:c8:53:4f:f4:61:8c:9a:51: 77:b0:3c:f5:c1:1a:13:ae:94:da:38:8e:85:4c:af: 0a:2f:bf:29:01:e4:0f:0d:0a:09:77:a8:00:94:cc: 4f:da:d8:92:35:fb:32:91:f4:66:87:a0:68:e4:f9: ed:6b:f4:b6:76:ea:87:0d:ce:53:1d:43:03:26:0e: 18:97:49:5b:a0:78:3b:4c:9b:0b:ef:67:35:49:47: 68:00:4e:2b:0a:af:0d:48:b5:93:d1:ad:c0:cc:51: 7a:56:39:70:af:37:ce:96:19:75:37:bf:f8:10:da: 5c:fc:e8:25:8a:ef:db:f3:d9:39:34:66:ce:49:c8: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:74:02:17:E4:FE:29:D9:78:91:3B:D2:C5:30:AB:F4:60:52:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:39:53:b1:c8:66:23:93:63:59:fb:cd:f0:fe:b0:cb:98:78: d0:6d:a9:f9:6a:63:30:75:de:98:4d:51:96:05:e4:f8:90:e0: 66:a3:ee:fe:a2:c7:39:2c:0b:43:cf:13:11:bd:dc:41:01:27: 85:49:18:c2:ff:3e:71:78:b0:7f:a3:7b:ab:d0:36:00:c2:df: 6f:d9:a5:26:1f:53:b2:7d:bc:d0:45:9b:07:c8:ac:90:e3:d0: 91:f2:19:b0:81:6f:36:9c:fc:1e:36:7d:bd:5a:b4:78:d7:77: 6e:96:4e:66:07:92:d5:59:f6:32:00:10:9d:cf:67:cc:16:62: 05:70:98:ad:50:bd:7c:1c:9f:4b:63:63:9c:2f:35:b4:57:72: 72:d2:e6:1d:d7:56:1b:33:dc:a0:b3:fe:bd:90:ae:9d:69:06: 77:9f:27:fa:48:cb:1a:41:4b:7b:16:e3:9c:9a:b7:a5:8f:3a: 48:2b:2d:b6:47:64:c3:dd:08:51:10:ae:1c:d0:1a:ec:89:83: 7c:6a:93:dc:1a:14:44:fa:4a:ac:da:8b:f5:09:9e:7b:f2:51: 28:9b:71:a2:0f:12:68:65:e7:5a:8e:9c:43:ba:0b:59:a4:33: 8c:b8:3d:66:d1:36:6e:0b:63:80:a3:13:8e:08:07:b1:62:4a: 61:5b:96:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCATtPYeiwN2slMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MmUwMmE5OWItNzc0ZS00ZGUzLWI0NjktN2M2OGIzNTk0ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU5wr6y/d9bwtjfXtyhECQ47k4K6vWU4eTDD Z3fqBBT8JdEscD9B9y2xyuaWprZHQOfx14uKTODULWkf4nB96MBnIYd1Oq4zxtLi y4RIViLxv4SlrL0W/JyhbvEJ9YzCi/rye75Mz5BW6fZW9F3iXz0pHXsTFcQJld+S 2SsGyFNP9GGMmlF3sDz1wRoTrpTaOI6FTK8KL78pAeQPDQoJd6gAlMxP2tiSNfsy kfRmh6Bo5Pnta/S2duqHDc5THUMDJg4Yl0lboHg7TJsL72c1SUdoAE4rCq8NSLWT 0a3AzFF6VjlwrzfOlhl1N7/4ENpc/Ogliu/b89k5NGbOSchy+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzDdAIX5P4p2XiRO9LFMKv0YFJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNmRhZjA2ZTMtMmNhZC0z MTcwLThlODUtYTU1MjE5ZGU2OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw5U7HIZiOTY1n7zfD+sMuYeNBtqflqYzB13phNUZYF5PiQ4Gaj7v6i xzksC0PPExG93EEBJ4VJGML/PnF4sH+je6vQNgDC32/ZpSYfU7J9vNBFmwfIrJDj 0JHyGbCBbzac/B42fb1atHjXd26WTmYHktVZ9jIAEJ3PZ8wWYgVwmK1QvXwcn0tj Y5wvNbRXcnLS5h3XVhsz3KCz/r2Qrp1pBnefJ/pIyxpBS3sW45yat6WPOkgrLbZH ZMPdCFEQrhzQGuyJg3xqk9waFET6Sqzai/UJnnvyUSibcaIPEmhl51qOnEO6C1mk M4y4PWbRNm4LY4CjE44IB7FiSmFbluw= -----END CERTIFICATE-----Generated at Sun Sep 27 04:39:05 2026 by rpki-client