$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa File: dd042710-853c-3377-8175-71e45a5c93e8.roa (raw, json) Hash identifier: Uyk6l9i7HqA2bQCjlFlD2mZsYvXwvFlReEjeDH294js= Subject key identifier: 73:54:C3:1D:03:BA:42:55:FD:42:43:A9:A3:DE:FF:9D:62:32:A4:C0 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B785745323CD7489BB35E2410 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 64286 IP address blocks: 173.239.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:45:32:3c:d7:48:9b:b3:5e:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=d92780ba-dd84-4421-a1f0-b501d95f4c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:8b:62:d7:4f:60:f3:a4:bd:f8:69:b4:3d: 84:d8:58:bd:ee:29:86:0b:84:9a:5d:88:54:7e:23: bb:ea:d1:0a:a4:f5:5a:1d:84:fd:29:8e:b1:1b:84: a8:6e:00:7d:b1:19:7b:0d:53:89:3b:b9:09:fd:ef: 08:b5:e2:98:62:9b:ec:2d:e5:34:e5:ca:a7:f8:40: 4d:a8:8c:63:b1:f6:43:98:0f:f8:d6:e5:43:38:ba: 11:a3:78:9a:87:c1:8f:59:33:43:c5:1f:ba:0a:a5: 48:52:b2:95:d7:bf:81:85:93:f1:03:7e:7f:af:c7: ae:8f:1b:10:12:8d:6f:b1:e2:84:4a:c0:10:2a:77: ce:02:32:49:c8:3a:e6:60:e0:bc:56:70:69:4d:d3: 00:a0:21:53:20:d9:1b:65:a2:26:f8:d6:15:af:0b: 39:e3:e4:b1:60:7f:4b:b3:75:79:4b:e3:ee:c4:77: 79:83:d5:85:c1:7b:5d:d5:ca:ca:6f:73:52:0c:3c: ea:e4:33:5e:d5:cd:71:7c:ee:52:da:45:d2:29:5d: 5e:66:ea:69:ee:2e:5d:61:74:f6:6d:fa:c1:b3:ce: cf:5e:0c:2a:dc:88:95:69:55:7c:df:b9:99:a0:2d: 9d:ee:fc:21:2f:18:c0:a0:2d:c2:52:d6:15:fc:5e: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:C3:1D:03:BA:42:55:FD:42:43:A9:A3:DE:FF:9D:62:32:A4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:9d:b5:eb:19:06:ec:e4:fc:02:1f:ed:53:98:40:9c:19:15: c7:49:61:75:96:76:13:20:51:4d:c1:92:f3:ad:e9:dc:f5:72: 95:3f:30:f9:08:08:13:b4:fb:2e:59:ff:0f:4b:c9:3e:44:8f: b3:89:00:cf:7b:bb:69:b4:f3:bd:f6:48:ec:fe:18:45:75:6f: dc:f9:51:99:f3:d1:91:6f:cd:26:b4:0c:cf:79:af:a8:f5:6e: 81:bc:4c:da:06:79:e1:3f:10:16:32:f8:83:13:0e:1b:2e:eb: 2b:d4:f0:27:7c:28:b4:db:e3:ae:e1:c5:3a:1c:a6:ce:3e:c0: 15:19:ce:0a:d1:af:23:2e:62:b0:c7:b3:74:f8:fb:2e:93:c3: f7:8f:4c:c5:8f:8a:d0:4b:0a:5d:f6:00:b7:1f:2d:19:33:c2: 00:f3:fb:ad:91:01:cc:35:a2:f1:80:da:0c:12:59:78:c1:15: f7:01:66:09:63:d6:2e:a4:c0:28:2a:ec:f6:a7:e9:56:76:62: 50:64:df:58:44:6a:ca:b7:86:b7:7c:82:be:b4:5f:04:14:68: 1b:b9:38:82:44:9a:82:4d:91:70:ab:dd:51:2f:ba:73:d0:bb: 95:0c:59:f7:ec:83:33:a7:64:2b:58:af:7b:98:9f:00:2f:e0: 65:6a:95:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0UyPNdIm7NeJBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ZDkyNzgwYmEtZGQ4NC00NDIxLWExZjAtYjUwMWQ5NWY0YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpSLYtdPYPOkvfhptD2E2Fi97imGC4SaXYhU fiO76tEKpPVaHYT9KY6xG4SobgB9sRl7DVOJO7kJ/e8IteKYYpvsLeU05cqn+EBN qIxjsfZDmA/41uVDOLoRo3iah8GPWTNDxR+6CqVIUrKV17+BhZPxA35/r8eujxsQ Eo1vseKESsAQKnfOAjJJyDrmYOC8VnBpTdMAoCFTINkbZaIm+NYVrws54+SxYH9L s3V5S+PuxHd5g9WFwXtd1crKb3NSDDzq5DNe1c1xfO5S2kXSKV1eZupp7i5dYXT2 bfrBs87PXgwq3IiVaVV837mZoC2d7vwhLxjAoC3CUtYV/F64wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNUwx0DukJV/UJDqaPe/51iMqTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZGQwNDI3MTAtODUzYy0z Mzc3LTgxNzUtNzFlNDVhNWM5M2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqdtesZBuzk/AIf7VOYQJwZFcdJYXWWdhMgUU3BkvOt6dz1cpU/MPkI CBO0+y5Z/w9LyT5Ej7OJAM97u2m08732SOz+GEV1b9z5UZnz0ZFvzSa0DM95r6j1 boG8TNoGeeE/EBYy+IMTDhsu6yvU8Cd8KLTb467hxTocps4+wBUZzgrRryMuYrDH s3T4+y6Tw/ePTMWPitBLCl32ALcfLRkzwgDz+62RAcw1ovGA2gwSWXjBFfcBZglj 1i6kwCgq7Pan6VZ2YlBk31hEasq3hrd8gr60XwQUaBu5OIJEmoJNkXCr3VEvunPQ u5UMWffsgzOnZCtYr3uYnwAv4GVqlbs= -----END CERTIFICATE-----Generated at Sun Oct 19 20:16:22 2025 by rpki-client