$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa File: f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa (raw, json) Hash identifier: wfD3C2CYlFxBg1ZWmqCqGNZyyWtBVRC6gjgdm1mnmq0= Subject key identifier: 2E:F2:1D:D2:F3:99:16:08:00:12:4E:13:89:1B:F5:80:6F:20:4F:60 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584AECC11AD45A794E7FF8C55A80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 62240 IP address blocks: 173.239.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1a:d4:5a:79:4e:7f:f8:c5:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=00f8da15-07f5-45c5-b7be-f40bcdaa25b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:34:08:9c:27:84:9f:db:7a:53:71:1e:11:af: 65:0b:b0:c8:71:f9:1b:a5:58:32:78:0b:29:d4:0b: 27:04:0d:69:3b:e8:48:86:39:8d:74:1c:4f:87:7e: 2a:02:e4:ec:16:8f:56:34:de:8e:d6:ce:3b:c4:13: 38:3f:31:07:32:69:e2:38:3f:1d:81:54:b2:6f:a1: a1:9e:8a:40:aa:61:3f:88:2f:24:f5:27:68:2a:18: 8a:55:33:51:27:58:e0:b6:5b:bc:8f:3c:88:44:7a: 8a:50:b8:63:3f:e8:00:e5:c7:f5:e5:10:63:e2:e7: 13:cb:1a:6b:0a:a0:cd:86:7a:81:0b:fc:af:b4:77: be:67:c3:6c:9d:e1:cf:fa:cf:d1:f2:ac:e1:de:03: 2f:e9:d6:e4:29:9d:a8:2d:63:48:94:8e:0a:1c:dc: 60:12:49:4d:e1:b3:3b:9a:eb:6d:26:f0:cb:09:9e: 48:5d:37:a6:59:a9:a1:20:42:51:0a:88:11:8f:55: d7:e6:0f:90:4e:86:04:e7:0e:aa:3f:cf:6e:c7:2f: 83:5b:ab:68:7a:fe:fc:a0:56:ee:c8:8f:57:02:68: d0:2d:61:85:66:c4:db:5a:76:f2:be:4a:8b:9d:ff: 4a:f3:86:26:da:41:e9:46:aa:7f:bc:31:f9:42:c1: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:1D:D2:F3:99:16:08:00:12:4E:13:89:1B:F5:80:6F:20:4F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4c:c8:db:1b:3d:40:e3:1e:11:08:95:fd:10:7c:e1:cc:28: 99:40:dd:ca:46:b3:be:a8:3c:69:00:b7:60:35:24:0f:42:be: fe:92:9b:a7:a5:27:a6:ff:f4:22:74:f2:f5:9b:d8:3c:59:96: 42:44:db:52:81:a6:59:46:16:09:61:16:28:fb:b5:56:5e:af: c0:4a:a1:70:9e:c5:3a:4f:aa:2a:e5:d6:b4:c5:d9:71:c0:a9: 96:ba:16:60:60:3e:bc:13:80:c1:31:a4:d3:e4:2e:33:16:65: 26:df:1e:30:89:f6:f2:66:ce:92:61:c7:c0:1f:da:3e:61:c9: 08:69:0d:7b:6c:d9:4b:8a:ce:21:bf:a6:21:42:8f:21:18:36: ce:b4:9e:a6:9f:68:48:1a:a8:a6:c3:41:89:26:88:0a:04:fc: 9c:56:98:0a:b1:e2:07:59:ef:19:b8:1c:9e:0c:ac:98:db:3f: 27:13:fd:da:5a:ad:d1:28:9b:10:93:b3:db:49:39:ab:8b:d9: 71:50:46:48:6d:71:e7:e4:b7:de:3f:62:a2:78:53:68:b4:b6: 4f:66:81:a7:d1:fa:62:ef:61:27:d9:9d:69:e5:9a:a8:d6:b3: 72:5c:96:dd:b9:ba:8b:1c:34:8c:50:72:88:99:92:92:d1:cb: 33:2d:4a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRrUWnlOf/jFWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDBmOGRhMTUtMDdmNS00NWM1LWI3YmUtZjQwYmNkYWEyNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDQInCeEn9t6U3EeEa9lC7DIcfkbpVgyeAsp 1AsnBA1pO+hIhjmNdBxPh34qAuTsFo9WNN6O1s47xBM4PzEHMmniOD8dgVSyb6Gh nopAqmE/iC8k9SdoKhiKVTNRJ1jgtlu8jzyIRHqKULhjP+gA5cf15RBj4ucTyxpr CqDNhnqBC/yvtHe+Z8NsneHP+s/R8qzh3gMv6dbkKZ2oLWNIlI4KHNxgEklN4bM7 muttJvDLCZ5IXTemWamhIEJRCogRj1XX5g+QToYE5w6qP89uxy+DW6toev78oFbu yI9XAmjQLWGFZsTbWnbyvkqLnf9K84Ym2kHpRqp/vDH5QsGHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7yHdLzmRYIABJOE4kb9YBvIE9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZjhlOWRkMGMtNmRjMy0z NTNjLWI5ODYtM2RhZGU1YTdkMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlMyNsbPUDjHhEIlf0QfOHMKJlA3cpGs76oPGkAt2A1JA9Cvv6Sm6el J6b/9CJ08vWb2DxZlkJE21KBpllGFglhFij7tVZer8BKoXCexTpPqirl1rTF2XHA qZa6FmBgPrwTgMExpNPkLjMWZSbfHjCJ9vJmzpJhx8Af2j5hyQhpDXts2UuKziG/ piFCjyEYNs60nqafaEgaqKbDQYkmiAoE/JxWmAqx4gdZ7xm4HJ4MrJjbPycT/dpa rdEomxCTs9tJOauL2XFQRkhtcefkt94/YqJ4U2i0tk9mgafR+mLvYSfZnWnlmqjW s3Jclt25uoscNIxQcoiZkpLRyzMtSq8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:14:25 2025 by rpki-client