$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d3cf8c1f-c96e-3f12-9208-141e6927923d.roa File: d3cf8c1f-c96e-3f12-9208-141e6927923d.roa (raw, json) Hash identifier: 7bAE2I1/gumv2XBa+H3J8eYjW8R9Az5aKpGL2OkVNEQ= Subject key identifier: 30:4B:37:D7:9E:AE:D6:20:72:04:D3:8B:3B:3A:A8:4C:27:DA:89:B0 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584DC135C6096D24A9E0A8E91120 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d3cf8c1f-c96e-3f12-9208-141e6927923d.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 212238 IP address blocks: 173.239.201.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c6:09:6d:24:a9:e0:a8:e9:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=daae81cc-7fe3-4f9d-a6e5-41d7fce6814a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:95:2d:a7:18:d0:ae:b8:39:47:72:14:9a: 35:74:97:b1:c5:20:81:26:6a:43:aa:34:1e:dd:a5: 4a:12:ce:c9:35:4a:e8:c9:21:0d:44:f9:46:c0:02: bb:a1:4c:4b:78:1c:94:8f:d1:d2:28:24:af:0a:f5: 0c:fa:ae:59:92:9f:7c:58:fe:7e:29:11:f0:9f:84: b5:5e:89:fb:1a:d7:1b:a7:4c:e0:9a:b6:b9:33:43: 1d:ff:ee:1e:77:74:ad:3b:2f:54:97:f1:9c:a9:35: fc:e8:11:cb:3b:7b:02:6d:3a:d6:60:e2:f0:02:84: c7:10:ee:87:12:29:32:0f:61:f0:38:57:4a:4e:46: 8c:d9:1a:16:bc:6a:f8:2f:93:e8:89:36:6a:3c:64: 08:44:cc:85:cc:b4:fd:f0:c2:1f:6d:0c:4c:29:13: 07:0d:ed:56:ed:90:49:12:d9:d3:a1:1f:0f:0c:d4: 52:bd:91:6b:09:e1:23:d4:e6:fa:8e:19:47:15:d6: 40:77:71:5a:5b:d2:61:78:67:a6:e2:b2:d6:42:98: 94:63:7c:a0:cc:7f:02:78:fb:82:9f:28:43:f6:06: 82:c6:41:e4:6e:34:8f:6d:81:65:f4:7f:73:6f:50: aa:40:18:10:a1:27:47:c0:5f:ab:26:f9:88:88:db: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:37:D7:9E:AE:D6:20:72:04:D3:8B:3B:3A:A8:4C:27:DA:89:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d3cf8c1f-c96e-3f12-9208-141e6927923d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.201.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4b:19:54:18:95:1e:24:81:4d:18:70:0c:18:d6:d3:e5:55: 76:cd:b2:1d:2d:d7:6d:b2:2c:0a:e8:dd:c4:6d:cc:e7:15:42: 38:bf:b1:67:23:5d:6e:e2:dd:63:75:0d:9d:d5:dc:93:a6:38: f2:8f:26:ad:42:dd:5d:83:93:ca:ca:49:f2:4e:39:b7:8e:1c: f7:dd:0d:f3:f6:0f:4c:f1:ee:84:9f:b8:c8:fb:38:ac:ae:99: c2:fd:e1:d3:91:b7:c8:ce:94:f9:9f:c6:e9:7e:37:e6:55:f7: b1:17:a3:51:d9:be:24:b1:b9:15:40:11:67:98:e1:ba:ff:e8: 87:39:c8:e2:19:22:27:38:36:0f:8c:f5:e5:ec:f4:8d:2c:1b: 68:0e:59:4c:6b:07:e5:46:65:ab:ab:4e:95:3b:f1:ea:bd:6c: 15:3b:ce:c2:1c:03:3b:40:88:09:b6:65:b5:67:b4:e8:e7:b7: 0c:42:c8:5f:f2:7f:f1:78:84:5b:26:ab:7c:8a:9a:fc:6c:07: 3f:6b:b5:a0:ef:5e:9d:2d:7c:c9:2c:95:d6:68:5e:9e:8c:68: 05:d1:eb:6e:8c:85:df:9a:26:1c:74:6b:14:8a:e9:4b:3b:02: 33:41:de:91:ee:29:fa:8b:4a:cf:27:07:b8:fe:86:4d:04:36: 27:c3:34:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3BNcYJbSSp4KjpESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk ZGFhZTgxY2MtN2ZlMy00ZjlkLWE2ZTUtNDFkN2ZjZTY4MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9aVLacY0K64OUdyFJo1dJexxSCBJmpDqjQe 3aVKEs7JNUroySENRPlGwAK7oUxLeByUj9HSKCSvCvUM+q5Zkp98WP5+KRHwn4S1 Xon7Gtcbp0zgmra5M0Md/+4ed3StOy9Ul/GcqTX86BHLO3sCbTrWYOLwAoTHEO6H EikyD2HwOFdKTkaM2RoWvGr4L5PoiTZqPGQIRMyFzLT98MIfbQxMKRMHDe1W7ZBJ EtnToR8PDNRSvZFrCeEj1Ob6jhlHFdZAd3FaW9JheGem4rLWQpiUY3ygzH8CePuC nyhD9gaCxkHkbjSPbYFl9H9zb1CqQBgQoSdHwF+rJvmIiNsXIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDBLN9eertYgcgTTizs6qEwn2omwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZDNjZjhjMWYtYzk2ZS0z ZjEyLTkyMDgtMTQxZTY5Mjc5MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/JADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCISxlUGJUeJIFNGHAMGNbT5VV2zbIdLddtsiwK6N3EbcznFUI4v7Fn I11u4t1jdQ2d1dyTpjjyjyatQt1dg5PKyknyTjm3jhz33Q3z9g9M8e6En7jI+zis rpnC/eHTkbfIzpT5n8bpfjfmVfexF6NR2b4ksbkVQBFnmOG6/+iHOcjiGSInODYP jPXl7PSNLBtoDllMawflRmWrq06VO/HqvWwVO87CHAM7QIgJtmW1Z7To57cMQshf 8n/xeIRbJqt8ipr8bAc/a7Wg716dLXzJLJXWaF6ejGgF0etujIXfmiYcdGsUiulL OwIzQd6R7in6i0rPJwe4/oZNBDYnwzRC -----END CERTIFICATE-----Generated at Wed May 13 12:24:06 2026 by rpki-client