$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0be68437-6817-3802-bc18-1241ee4a3302.roa File: 0be68437-6817-3802-bc18-1241ee4a3302.roa (raw, json) Hash identifier: a/KVIRXFw+l39EUsIjqgCuEjbMlCIo2GiX1X/R4bMBU= Subject key identifier: 89:2E:1A:C2:3E:19:40:1D:CC:0D:44:7A:7F:69:E6:82:7B:B1:15:19 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584EA7925B5018BB6C78B0562980 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0be68437-6817-3802-bc18-1241ee4a3302.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 206092 IP address blocks: 173.239.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:5b:50:18:bb:6c:78:b0:56:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c52da4c8-ce8e-4523-81d2-6dfc2deee8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:89:2e:bb:b7:f8:c7:8b:2c:3b:0e:88:2d: ff:9c:56:9e:83:51:91:cd:f5:5d:b0:82:b1:69:14: 48:72:25:59:16:66:6d:21:19:d9:bb:05:ad:21:6a: 81:0d:5c:d7:de:85:33:40:44:fc:ec:ce:3a:82:f2: 22:e7:41:91:9e:05:eb:15:ed:34:27:52:df:11:8b: 57:ff:27:85:5e:65:04:9a:c8:82:50:88:48:b7:63: 58:95:90:af:b3:d6:84:48:e5:30:a3:36:89:4c:fa: 31:f8:ac:56:1b:b9:1d:e6:41:b9:aa:c1:41:44:b9: c0:5f:4e:35:24:9a:55:85:59:14:d5:fa:d9:6c:30: f4:37:f0:b5:27:05:de:4e:28:fc:e9:38:13:2e:52: 73:da:51:94:ce:45:ff:5c:3f:72:9f:36:33:52:49: 96:a2:0b:47:cd:79:e1:d7:b0:9a:96:d4:67:31:6f: be:1b:73:0c:43:7b:b3:8c:43:6c:43:e3:a5:48:84: 7c:48:96:cf:11:8a:d7:e3:80:7f:6f:5c:5c:4c:17: e7:d5:8e:62:d1:21:2a:a9:ee:ae:57:b4:aa:9b:8e: 2d:45:92:9d:83:8b:ab:3a:48:21:f7:74:75:f6:d0: bc:4f:53:48:55:72:1f:68:fc:f4:79:7a:70:e6:35: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:1A:C2:3E:19:40:1D:CC:0D:44:7A:7F:69:E6:82:7B:B1:15:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0be68437-6817-3802-bc18-1241ee4a3302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9d:88:8e:4f:58:46:35:9b:cc:b7:5f:13:47:fc:05:f6:ea: b5:b5:ec:f1:48:69:21:b8:25:2f:0e:b0:4a:76:c9:12:65:ad: 07:27:e0:65:d1:7c:31:96:60:e8:c9:b6:dc:c0:4e:af:d3:53: 7e:fa:e3:f3:23:aa:2e:42:8e:46:a6:a0:fe:9e:68:2c:75:a2: 47:90:76:9f:db:fe:88:4a:df:19:ee:e3:34:b0:6b:82:cb:51: 83:39:dc:f3:cb:9a:5e:16:ec:01:e0:db:42:cc:f3:eb:9e:24: c8:4e:fb:32:7d:b3:f3:55:09:bb:a3:57:92:76:e1:02:31:78: 6a:f5:af:1e:e7:f6:35:b8:10:8a:1f:c6:ea:3a:89:37:b8:b8: 00:f9:40:e9:83:f6:64:47:8a:80:2d:ba:35:28:b1:19:bd:2e: 6f:80:92:c8:53:60:23:8c:da:73:65:9a:6d:95:99:75:2e:92: b1:96:db:c0:fd:81:eb:00:75:41:2d:09:d8:fa:50:55:d5:e4: af:5b:58:5b:4b:3a:93:bd:0b:b2:22:b7:4e:c5:d9:3f:e8:b2: e4:7f:25:df:43:a5:03:64:6a:1b:93:8a:a0:c4:b1:e5:d3:47: cc:9b:71:01:32:2f:18:ef:14:5e:9c:07:3d:3d:d9:c2:9e:73: 8c:9e:b5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkltQGLtseLBWKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzUyZGE0YzgtY2U4ZS00NTIzLTgxZDItNmRmYzJkZWVlOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheiJLru3+MeLLDsOiC3/nFaeg1GRzfVdsIKx aRRIciVZFmZtIRnZuwWtIWqBDVzX3oUzQET87M46gvIi50GRngXrFe00J1LfEYtX /yeFXmUEmsiCUIhIt2NYlZCvs9aESOUwozaJTPox+KxWG7kd5kG5qsFBRLnAX041 JJpVhVkU1frZbDD0N/C1JwXeTij86TgTLlJz2lGUzkX/XD9ynzYzUkmWogtHzXnh 17CaltRnMW++G3MMQ3uzjENsQ+OlSIR8SJbPEYrX44B/b1xcTBfn1Y5i0SEqqe6u V7Sqm44tRZKdg4urOkgh93R19tC8T1NIVXIfaPz0eXpw5jWGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkuGsI+GUAdzA1Een9p5oJ7sRUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMGJlNjg0MzctNjgxNy0z ODAyLWJjMTgtMTI0MWVlNGEzMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2diI5PWEY1m8y3XxNH/AX26rW17PFIaSG4JS8OsEp2yRJlrQcn4GXR fDGWYOjJttzATq/TU3764/Mjqi5CjkamoP6eaCx1okeQdp/b/ohK3xnu4zSwa4LL UYM53PPLml4W7AHg20LM8+ueJMhO+zJ9s/NVCbujV5J24QIxeGr1rx7n9jW4EIof xuo6iTe4uAD5QOmD9mRHioAtujUosRm9Lm+AkshTYCOM2nNlmm2VmXUukrGW28D9 gesAdUEtCdj6UFXV5K9bWFtLOpO9C7Iit07F2T/osuR/Jd9DpQNkahuTiqDEseXT R8ybcQEyLxjvFF6cBz092cKec4yetaA= -----END CERTIFICATE-----Generated at Wed Jul 29 11:25:08 2026 by rpki-client