$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa File: b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa (raw, json) Hash identifier: l6yvOnKts93E36wF0W4PH8C+pS2BND+kHtrwOFdbA3o= Subject key identifier: 52:83:CE:84:A6:CE:5C:1E:86:1E:0A:55:97:BC:4A:CD:F2:F3:84:57 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584DD0905C7B7CDF44C24EB9C180 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 197555 IP address blocks: 173.239.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:5c:7b:7c:df:44:c2:4e:b9:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=f9d7c050-7a8f-4475-923c-93859ea588d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:29:56:ad:83:1f:aa:a1:28:09:74:a8:30:92: f2:43:87:9e:0e:68:fe:e3:8a:70:0d:99:e4:e7:5c: 69:0e:e4:4f:d1:bc:f7:b4:87:32:1e:31:5b:69:9b: 38:ac:40:57:93:05:6a:80:8b:9b:49:83:12:7f:80: 58:c9:0b:0a:d2:d9:bb:7c:94:ab:16:51:81:48:47: 86:d9:2f:80:5e:74:0b:c8:35:c3:ea:b3:8a:a6:3d: 5f:8e:f5:3b:11:e4:d7:82:b6:b9:3b:9b:a7:05:c1: c0:11:16:6f:26:bf:5c:37:02:41:04:83:78:fb:d4: db:3b:f2:82:2e:6b:a6:59:49:0f:a7:5b:9d:09:1f: 10:15:fc:68:5d:23:cb:70:c4:d1:c4:b4:09:e7:2d: bc:bd:fb:8c:3a:dc:c4:54:e1:f4:2d:da:cc:c6:71: d2:64:1c:dc:61:4d:24:bb:7c:95:7f:ad:0d:c3:d9: 9c:17:f9:e6:82:f4:6f:43:cb:0a:4f:26:30:0d:2d: 4c:aa:9a:ca:ff:f5:0a:f6:24:eb:f3:f8:68:9d:ef: c3:af:79:17:e9:b8:bd:e5:9e:c4:46:26:70:f3:ad: 28:17:43:72:1a:ef:e0:1f:08:47:87:41:e2:00:64: 10:b4:03:4d:dd:d1:e8:a6:e7:20:ad:ff:38:b4:de: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:CE:84:A6:CE:5C:1E:86:1E:0A:55:97:BC:4A:CD:F2:F3:84:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:0d:e3:0e:8c:1b:4c:8c:f2:4f:0f:1f:45:7b:26:f6:ef:6b: 9f:e5:84:36:3c:bf:67:ae:18:86:24:bf:6b:7e:10:26:0c:60: bc:74:ca:b0:19:02:6d:e3:ee:1a:86:2b:df:38:7f:e4:80:b8: 54:d6:20:f3:bc:db:c7:e3:97:5f:e7:08:26:76:cd:1a:ae:c4: e5:1d:b6:7c:1e:81:20:a2:38:1f:e7:a1:46:0d:e3:cc:68:86: fc:93:9d:b1:2d:52:da:2c:35:84:af:fd:17:58:0e:16:61:4b: 0c:fc:43:ed:ad:4f:df:36:bd:f6:aa:02:ac:b4:66:5c:78:df: cc:a5:da:38:c3:7c:93:75:50:0c:fa:40:4d:31:23:07:dd:35: 68:ae:92:a9:2c:2d:ed:5b:8d:ab:86:a2:32:51:1a:7b:9a:87: e5:cc:3f:94:9c:81:e4:9d:73:12:89:ac:a4:aa:aa:b4:44:6f: 38:b5:e4:4a:21:7e:be:c8:d0:01:a5:7b:88:45:bb:1f:e3:9f: 67:c0:21:b8:c8:e9:dd:d0:12:be:39:92:71:c6:e4:0d:ab:72: db:c5:74:9b:80:da:e6:a3:59:eb:a7:c9:99:5a:0c:f5:c6:58: 08:38:be:3f:60:f4:0e:98:90:38:a3:00:3f:c1:f8:4d:65:a5: 86:0b:80:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkFx7fN9Ewk65wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZjlkN2MwNTAtN2E4Zi00NDc1LTkyM2MtOTM4NTllYTU4OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhClWrYMfqqEoCXSoMJLyQ4eeDmj+44pwDZnk 51xpDuRP0bz3tIcyHjFbaZs4rEBXkwVqgIubSYMSf4BYyQsK0tm7fJSrFlGBSEeG 2S+AXnQLyDXD6rOKpj1fjvU7EeTXgra5O5unBcHAERZvJr9cNwJBBIN4+9TbO/KC LmumWUkPp1udCR8QFfxoXSPLcMTRxLQJ5y28vfuMOtzEVOH0LdrMxnHSZBzcYU0k u3yVf60Nw9mcF/nmgvRvQ8sKTyYwDS1MqprK//UK9iTr8/hone/Dr3kX6bi95Z7E RiZw860oF0NyGu/gHwhHh0HiAGQQtANN3dHopucgrf84tN4+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKDzoSmzlwehh4KVZe8Ss3y84RXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYjVmMGQxYTAtNGY5Yy0z YTM5LTlkNzEtZGI1MDQyNDRhNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUN4w6MG0yM8k8PH0V7Jvbva5/lhDY8v2euGIYkv2t+ECYMYLx0yrAZ Am3j7hqGK984f+SAuFTWIPO828fjl1/nCCZ2zRquxOUdtnwegSCiOB/noUYN48xo hvyTnbEtUtosNYSv/RdYDhZhSwz8Q+2tT982vfaqAqy0Zlx438yl2jjDfJN1UAz6 QE0xIwfdNWiukqksLe1bjauGojJRGnuah+XMP5ScgeSdcxKJrKSqqrREbzi15Eoh fr7I0AGle4hFux/jn2fAIbjI6d3QEr45knHG5A2rctvFdJuA2uajWeunyZlaDPXG WAg4vj9g9A6YkDijAD/B+E1lpYYLgBk= -----END CERTIFICATE-----Generated at Wed May 13 17:12:44 2026 by rpki-client