$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa File: fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa (raw, json) Hash identifier: rbhs6CcTwnzLgjK4c1dzdLVJzLN2Aiiky7n28jHkGA0= Subject key identifier: D1:B2:F8:B7:C4:6D:51:CF:04:26:A1:4B:B4:95:AE:53:A9:F2:EF:26 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B821CD20A32C20872075C0AA0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 62240 IP address blocks: 173.239.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d2:0a:32:c2:08:72:07:5c:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=7d33b4eb-c277-470b-8487-9b137cb7d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:b4:6c:3c:07:9e:99:95:ed:9b:f7:5b:e4: d9:e2:9c:18:a7:6f:52:de:14:55:60:a6:d6:53:f8: 4f:82:0b:a4:68:98:26:e3:db:2b:2a:31:5f:79:b3: 15:11:4b:5d:07:06:38:70:80:54:97:ba:88:be:2d: 21:bd:14:b1:4e:a8:60:cd:5a:6b:47:d2:d1:48:4b: ab:76:da:f1:1d:2f:b4:68:62:5f:90:ed:54:0f:2a: d7:c2:b1:ed:22:ef:6c:d1:a0:51:83:de:61:66:64: a7:5a:aa:c4:49:e6:7b:26:39:31:93:22:ae:0c:52: 2a:03:af:7b:9e:ef:65:de:04:ec:3b:d3:a8:9b:21: f7:2a:5b:11:05:66:0a:c5:87:04:d2:0c:9d:ee:0e: d2:51:af:63:69:47:28:10:d0:89:5f:e3:17:4a:19: df:36:51:64:f1:f6:43:f9:af:ed:2c:b4:55:3b:9b: 97:60:3e:9b:bf:16:c5:a2:a2:80:3b:a4:90:8d:c9: a9:57:3f:03:aa:a6:58:4f:2e:58:f7:e5:88:27:1f: ea:01:2c:6f:21:6e:8d:51:4d:66:f1:d0:54:7a:47: 36:99:b0:5d:6f:1b:ff:9d:68:dd:58:7a:69:0e:74: e9:67:3f:a4:2a:43:7c:72:01:d0:c7:40:b4:72:cf: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B2:F8:B7:C4:6D:51:CF:04:26:A1:4B:B4:95:AE:53:A9:F2:EF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ad:0a:57:9c:0c:64:6e:e4:ac:25:ed:74:7f:99:62:db:cc: 47:a0:0d:02:54:c3:cd:74:67:87:02:21:6b:56:ab:a9:56:5a: 02:a5:cd:d5:aa:12:93:04:5c:b5:de:f1:70:7d:56:7f:30:4b: 0d:1a:10:29:8b:7b:6e:6f:b5:a1:41:cf:aa:14:01:8c:39:a7: bb:57:01:87:7e:5f:7f:e3:dc:ee:f0:74:60:5d:67:a8:91:83: 59:1d:4a:b8:43:63:1a:c1:82:de:bd:31:ad:28:b3:27:ed:19: 94:78:fd:b8:69:52:7b:04:90:3d:99:00:35:58:50:85:c8:1d: 8e:95:3b:66:2a:d8:ed:79:7d:39:73:cc:7f:5d:50:18:85:46: 86:05:b4:5f:b7:17:d6:f9:7b:6e:6c:a7:ce:2a:f8:b9:17:3a: ba:a0:3d:bb:2f:ab:ab:63:e7:67:3d:a9:d2:fe:f6:69:d7:99: 5d:41:29:54:b0:c4:15:1f:bc:d9:9d:d2:e4:86:80:ce:25:91: 30:be:35:fe:3a:3d:e9:cf:ac:09:16:b0:67:1d:3c:ac:d2:04: 62:0a:a3:e5:4c:4b:f1:40:f9:99:fb:0a:62:97:5c:3e:2d:ce: d2:49:f0:66:80:87:ab:30:33:97:2c:94:cb:bb:4b:9d:52:ad: 50:45:75:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNIKMsIIcgdcCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk N2QzM2I0ZWItYzI3Ny00NzBiLTg0ODctOWIxMzdjYjdkNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqka0bDwHnpmV7Zv3W+TZ4pwYp29S3hRVYKbW U/hPggukaJgm49srKjFfebMVEUtdBwY4cIBUl7qIvi0hvRSxTqhgzVprR9LRSEur dtrxHS+0aGJfkO1UDyrXwrHtIu9s0aBRg95hZmSnWqrESeZ7JjkxkyKuDFIqA697 nu9l3gTsO9OomyH3KlsRBWYKxYcE0gyd7g7SUa9jaUcoENCJX+MXShnfNlFk8fZD +a/tLLRVO5uXYD6bvxbFoqKAO6SQjcmpVz8DqqZYTy5Y9+WIJx/qASxvIW6NUU1m 8dBUekc2mbBdbxv/nWjdWHppDnTpZz+kKkN8cgHQx0C0cs8NRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGy+LfEbVHPBCahS7SVrlOp8u8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZmRlYTk0MGEtOGNmYy0z YjFlLWI4ZTQtZjI0NjI0ZTI5NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKatClecDGRu5Kwl7XR/mWLbzEegDQJUw810Z4cCIWtWq6lWWgKlzdWq EpMEXLXe8XB9Vn8wSw0aECmLe25vtaFBz6oUAYw5p7tXAYd+X3/j3O7wdGBdZ6iR g1kdSrhDYxrBgt69Ma0osyftGZR4/bhpUnsEkD2ZADVYUIXIHY6VO2Yq2O15fTlz zH9dUBiFRoYFtF+3F9b5e25sp84q+LkXOrqgPbsvq6tj52c9qdL+9mnXmV1BKVSw xBUfvNmd0uSGgM4lkTC+Nf46PenPrAkWsGcdPKzSBGIKo+VMS/FA+Zn7CmKXXD4t ztJJ8GaAh6swM5cslMu7S51SrVBFdfg= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:16 2025 by rpki-client