$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa File: 227d8994-f85a-3324-94e1-1cebf2b86d70.roa (raw, json) Hash identifier: 1e1/8fgBVt0/w4M+LytEIhP1RoFbn+i+RzqUCr3KuIQ= Subject key identifier: DE:A7:00:33:52:86:28:2F:A2:1D:9A:88:FD:AA:ED:47:E6:3C:8C:A0 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584AE46112AF4B38BBFD60A7FB80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 206092 IP address blocks: 173.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:12:af:4b:38:bb:fd:60:a7:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=8ea5e9e6-9ed4-4b57-9532-2ff5cf2a9598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:67:31:63:49:29:7a:7c:48:45:3a:fd:e5: 96:36:3e:5b:df:e4:73:9c:51:dc:99:0d:04:61:e1: 38:10:05:38:11:26:da:80:97:bd:12:82:ca:5c:6a: c1:82:7a:88:90:50:e4:9a:b1:51:6b:b3:5b:08:dd: 2b:f1:a0:86:bd:6c:75:6f:f7:2d:9a:3a:75:eb:bb: 7e:26:80:c8:64:42:9e:74:77:ad:5c:fe:f2:69:45: cc:dc:53:d7:69:85:60:1b:7c:30:35:22:90:64:02: ce:38:76:8c:85:9a:b5:92:40:95:ea:8b:e6:4a:12: bb:72:b2:30:6c:98:4a:10:fb:36:bb:42:d7:4c:b3: de:1b:40:24:6d:21:8e:69:a4:8f:53:4a:9b:d3:7a: 0e:c7:57:26:c5:09:df:88:f5:68:b5:77:b0:cd:fc: e6:6e:86:fe:02:68:4e:18:b4:e7:00:71:ab:84:a4: 20:28:6c:53:9d:fd:bb:37:de:84:99:df:40:05:bd: 5d:cb:6b:85:0c:4f:f7:66:be:d6:78:7e:2d:82:73: 12:68:fa:7d:0e:bc:fd:0c:f4:ea:bb:19:c4:98:ee: 93:b8:1d:47:eb:4e:83:fd:cc:5b:5e:c5:92:21:ef: 80:9c:f9:19:cf:33:3f:7b:0c:54:d9:3f:a8:a7:3f: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:00:33:52:86:28:2F:A2:1D:9A:88:FD:AA:ED:47:E6:3C:8C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:30:d0:e8:f6:11:25:9c:d2:8a:ef:f0:4f:bd:b8:05:de:3b: ec:d1:dd:60:b5:66:a0:0a:dd:85:d4:27:63:d0:c5:61:7e:73: ef:54:e8:5d:f3:9f:b6:c6:24:e6:fa:c9:d4:49:ea:7b:6d:11: 3d:8a:b3:0a:c7:75:f7:c6:9f:73:b6:d0:a2:f9:75:58:89:aa: d5:5d:70:dd:34:fe:b3:55:5d:50:01:c0:cc:4f:ea:0c:06:22: 09:01:79:50:16:73:08:c6:e2:01:87:d8:29:bb:30:9c:ad:82: ea:6b:78:5e:6f:27:56:2e:dc:eb:e5:34:b6:b9:b1:5c:04:9c: 05:22:43:84:19:e8:19:9c:c8:5f:ee:a0:1c:f0:4c:d8:3a:72: 83:2d:35:8d:8c:56:47:25:5d:5b:ce:9d:83:c4:1e:3e:11:1a: 29:82:34:c7:ed:e2:8d:25:ce:b4:51:5d:3c:55:1d:38:40:db: ab:f5:ce:39:16:2c:cc:b2:ac:3d:e3:d2:f9:15:04:cb:ef:c4: c8:6c:e1:6e:45:75:be:fa:e2:45:85:23:36:63:46:d2:bc:9b: 42:5d:80:b0:08:c1:59:d7:dd:f3:02:39:be:0b:66:d6:24:36: 42:97:5a:5d:81:b1:d2:10:e4:d9:69:78:d0:02:c8:26:8e:8e: a8:3f:68:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRKvSzi7/WCn+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OGVhNWU5ZTYtOWVkNC00YjU3LTk1MzItMmZmNWNmMmE5NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB9nMWNJKXp8SEU6/eWWNj5b3+RznFHcmQ0E YeE4EAU4ESbagJe9EoLKXGrBgnqIkFDkmrFRa7NbCN0r8aCGvWx1b/ctmjp167t+ JoDIZEKedHetXP7yaUXM3FPXaYVgG3wwNSKQZALOOHaMhZq1kkCV6ovmShK7crIw bJhKEPs2u0LXTLPeG0AkbSGOaaSPU0qb03oOx1cmxQnfiPVotXewzfzmbob+AmhO GLTnAHGrhKQgKGxTnf27N96Emd9ABb1dy2uFDE/3Zr7WeH4tgnMSaPp9Drz9DPTq uxnEmO6TuB1H606D/cxbXsWSIe+AnPkZzzM/ewxU2T+opz8GIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6nADNShigvoh2aiP2q7UfmPIygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjI3ZDg5OTQtZjg1YS0z MzI0LTk0ZTEtMWNlYmYyYjg2ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABww0Oj2ESWc0orv8E+9uAXeO+zR3WC1ZqAK3YXUJ2PQxWF+c+9U6F3z n7bGJOb6ydRJ6nttET2KswrHdffGn3O20KL5dViJqtVdcN00/rNVXVABwMxP6gwG IgkBeVAWcwjG4gGH2Cm7MJytgupreF5vJ1Yu3OvlNLa5sVwEnAUiQ4QZ6BmcyF/u oBzwTNg6coMtNY2MVkclXVvOnYPEHj4RGimCNMft4o0lzrRRXTxVHThA26v1zjkW LMyyrD3j0vkVBMvvxMhs4W5Fdb764kWFIzZjRtK8m0JdgLAIwVnX3fMCOb4LZtYk NkKXWl2BsdIQ5NlpeNACyCaOjqg/aKo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:10 2025 by rpki-client