$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa File: 9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa (raw, json) Hash identifier: apzacObGgPN9KEMvC9nUmnwnYtj8wE6TtSdzuh+P03I= Subject key identifier: C9:4E:7C:DE:10:E6:02:78:C0:85:F6:61:F9:41:BE:B2:4F:F3:23:68 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F43DD58AF6E5CF99A8DD3C380 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 173.239.200.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:58:af:6e:5c:f9:9a:8d:d3:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=bcd4710f-f386-4906-91fa-32f7fcfb02d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:57:8c:6d:67:c6:f9:85:a8:51:ae:ef:65: bc:55:b3:e8:bf:c2:1e:a4:33:75:96:4c:bf:fa:d2: 3c:3b:ce:51:62:80:a3:09:ae:bd:cc:40:15:e6:d2: c4:71:d2:40:74:73:92:d0:96:39:7c:8d:f1:c0:50: 5b:7c:c8:83:46:4b:89:a6:a4:f8:47:ec:75:a0:8a: d9:db:c1:48:f8:e3:93:37:94:bd:72:79:3e:5e:58: d0:cf:31:03:45:c7:ea:3a:0a:cb:94:89:c0:07:a7: 2d:8d:7c:6a:ab:22:80:14:78:7a:ba:c8:d0:cc:93: 6c:47:10:67:41:5d:42:3b:a7:66:57:8e:e8:e2:1b: 98:43:cc:fa:d4:1b:7b:84:b3:bd:f3:5d:f8:17:19: c3:6c:5f:c3:5c:ec:5e:29:45:a8:df:3b:fc:95:80: 91:23:9e:fe:92:ed:3d:72:43:65:c7:16:c4:bf:eb: 06:3f:34:87:a0:60:3e:71:aa:ac:83:4f:89:3e:ee: 2b:44:5c:87:f0:93:62:20:25:1c:a3:31:80:40:e9: dc:95:87:c7:bb:d8:2b:0b:5f:13:e2:53:ab:fb:18: e3:e9:7f:07:25:d8:3f:9f:85:81:6e:6d:6b:db:5f: af:61:5c:99:84:de:62:75:6f:e3:c4:37:c5:d9:55: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:7C:DE:10:E6:02:78:C0:85:F6:61:F9:41:BE:B2:4F:F3:23:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:77:88:52:a2:94:1a:7f:a6:3b:42:42:d6:41:13:4e:ac:c3: e8:88:9f:aa:25:b4:75:e5:ea:60:ed:7a:cd:d5:aa:29:00:4a: 9a:fa:55:e0:df:8a:0d:37:f5:b9:94:58:c5:b1:8e:1e:11:39: ac:97:92:ed:57:f9:ff:77:5b:f9:fc:43:88:f8:2a:a8:3b:d0: 35:24:7e:ca:63:17:dc:8a:ae:49:6d:22:72:9d:a5:4c:66:cd: ae:30:6e:de:8b:b1:ee:86:81:09:89:69:1b:08:e5:75:5b:0c: 77:cf:a4:b5:12:27:95:21:a1:8d:0d:fb:77:21:53:b2:d9:9b: f6:fb:85:7b:fc:68:c4:f1:c0:31:20:41:f4:c5:62:8c:e8:7c: 1d:db:3e:55:df:28:46:57:20:2a:99:db:0a:51:35:dd:1e:40: bb:4d:a6:ca:00:8e:73:55:4b:a5:68:f4:45:63:c2:b7:62:0d: 20:cf:cf:47:a3:49:4a:4f:02:a6:99:54:73:23:8a:47:15:c8: ce:2e:fb:9f:5a:7c:14:a9:c6:87:f3:81:8b:8b:13:fa:68:47: 17:6f:f2:24:d4:0a:bb:64:db:08:85:e7:10:9c:9e:54:42:e5: d6:d0:55:34:c2:9f:2a:df:c9:eb:b8:ba:d0:8f:22:3d:a1:fc: 77:47:94:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9D3Vivblz5mo3Tw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk YmNkNDcxMGYtZjM4Ni00OTA2LTkxZmEtMzJmN2ZjZmIwMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo55XjG1nxvmFqFGu72W8VbPov8IepDN1lky/ +tI8O85RYoCjCa69zEAV5tLEcdJAdHOS0JY5fI3xwFBbfMiDRkuJpqT4R+x1oIrZ 28FI+OOTN5S9cnk+XljQzzEDRcfqOgrLlInAB6ctjXxqqyKAFHh6usjQzJNsRxBn QV1CO6dmV47o4huYQ8z61Bt7hLO98134FxnDbF/DXOxeKUWo3zv8lYCRI57+ku09 ckNlxxbEv+sGPzSHoGA+caqsg0+JPu4rRFyH8JNiICUcozGAQOnclYfHu9grC18T 4lOr+xjj6X8HJdg/n4WBbm1r21+vYVyZhN5idW/jxDfF2VWglwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMlOfN4Q5gJ4wIX2YflBvrJP8yNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvOTE3MGRlN2MtZTQxMy0z MmE1LWEyYzctYzNkMGY3Y2JkMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/IgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJd4hSopQaf6Y7QkLWQRNOrMPoiJ+qJbR15epg7XrN1aopAEqa+lXg 34oNN/W5lFjFsY4eETmsl5LtV/n/d1v5/EOI+CqoO9A1JH7KYxfciq5JbSJynaVM Zs2uMG7ei7HuhoEJiWkbCOV1Wwx3z6S1EieVIaGNDft3IVOy2Zv2+4V7/GjE8cAx IEH0xWKM6Hwd2z5V3yhGVyAqmdsKUTXdHkC7TabKAI5zVUulaPRFY8K3Yg0gz89H o0lKTwKmmVRzI4pHFcjOLvufWnwUqcaH84GLixP6aEcXb/Ik1Aq7ZNsIhecQnJ5U QuXW0FU0wp8q38nruLrQjyI9ofx3R5TJ -----END CERTIFICATE-----Generated at Wed Sep 23 21:42:47 2026 by rpki-client