$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa File: cb3521ee-876b-31da-af7d-3913e552e9f6.roa (raw, json) Hash identifier: zPnhpIkhtGUAK4dRw+FO0k3wrLQJAbpPF9Rur4ovZBw= Subject key identifier: B5:6A:65:47:96:47:7A:D9:49:1D:7D:1F:D2:65:2C:99:64:E6:10:28 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584EA7889241DF385750061985A0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 62240 IP address blocks: 173.239.213.0/24 maxlen: 24 173.239.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:92:41:df:38:57:50:06:19:85:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=73c11836-fbdb-44ee-96ff-ea7410458b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:76:6e:9c:2a:72:b1:af:64:87:e9:3f:d2:ef: 38:c9:98:b7:36:b6:b0:8c:53:83:e2:1c:d6:ba:6a: 20:d6:e4:43:9a:5b:18:5a:63:71:c3:02:f0:f4:2b: 4a:2d:7b:a8:92:2e:7f:f3:1c:dd:40:12:13:1d:a5: d5:e9:e1:5b:9e:cb:82:f7:ea:63:72:1a:c2:99:4f: 49:42:aa:ba:aa:a1:ad:ec:33:54:14:6f:8b:aa:22: ac:79:f7:f9:0d:b2:92:39:7c:eb:fe:71:32:9f:b3: 99:95:85:5e:7c:92:4b:6f:3b:3e:a8:d8:4a:0f:3b: 4f:5f:5b:91:92:39:b0:85:dc:e5:d9:bf:d9:e4:fc: 70:54:c3:d7:11:05:ab:dd:ec:ac:11:18:e9:b3:2d: 4c:72:32:c7:43:1f:3f:32:d3:f9:d4:31:c9:f2:07: 02:8b:96:f1:43:3c:0d:e8:f5:1a:14:c3:22:3f:c0: 64:b7:bb:ad:43:a9:0e:d8:87:d1:ea:29:3f:0d:0a: 7e:b1:c4:9f:26:73:ac:1f:6d:ef:22:e2:00:2a:79: 58:50:1e:07:f4:4c:54:d9:38:bc:8c:ee:61:7e:1a: 4b:13:b9:2e:4f:0d:6f:65:9f:95:c2:e5:69:fd:55: d8:2b:6a:e8:59:ce:10:3b:17:47:71:41:f7:4d:99: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:65:47:96:47:7A:D9:49:1D:7D:1F:D2:65:2C:99:64:E6:10:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.213.0-173.239.214.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7d:10:38:e7:1d:7e:09:e3:25:43:5e:c0:ca:bf:ba:d4:c3: 92:ba:77:13:a2:46:6b:d9:09:54:b1:91:78:5b:ee:34:d0:79: c0:ce:02:75:a9:9c:57:2f:2b:8e:88:b5:a4:05:0b:c8:7b:17: 37:ef:6a:60:18:cd:8b:2e:10:cf:82:3f:ba:fd:c2:a1:f1:e9: f5:30:94:c7:f4:38:be:06:02:4d:d0:89:d6:1c:24:6c:68:dc: a7:b1:d0:70:92:11:38:72:56:71:c4:34:8a:0d:22:77:80:b3: e8:a4:8f:f5:f8:bc:b9:a5:e2:66:ed:29:77:c1:ac:aa:17:ac: 6b:81:c7:0f:5a:0f:68:64:6f:7d:d1:6b:c6:fe:f7:e0:01:84: a7:4d:0b:03:81:76:2e:ac:af:dc:77:51:93:e6:f4:af:8d:10: 65:8f:b6:47:91:dd:0a:df:15:4e:d6:eb:6a:9d:4c:1c:bd:a4: 3a:a6:69:10:4e:3f:b1:aa:d4:d1:a4:3b:6a:ba:83:07:95:3b: 83:0b:a5:d9:f2:c4:41:66:58:a6:b8:ee:21:72:2c:b3:ae:90: f4:9a:26:55:8e:a3:8e:c4:93:e5:7a:7d:d0:07:30:59:d6:c6: 91:ce:d4:2b:03:35:21:de:51:be:97:69:ab:bc:6a:b7:85:42: 46:56:fb:8c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6niJJB3zhXUAYZhaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzNjMTE4MzYtZmJkYi00NGVlLTk2ZmYtZWE3NDEwNDU4YjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XZunCpysa9kh+k/0u84yZi3NrawjFOD4hzW umog1uRDmlsYWmNxwwLw9CtKLXuoki5/8xzdQBITHaXV6eFbnsuC9+pjchrCmU9J Qqq6qqGt7DNUFG+LqiKseff5DbKSOXzr/nEyn7OZlYVefJJLbzs+qNhKDztPX1uR kjmwhdzl2b/Z5PxwVMPXEQWr3eysERjpsy1McjLHQx8/MtP51DHJ8gcCi5bxQzwN 6PUaFMMiP8Bkt7utQ6kO2IfR6ik/DQp+scSfJnOsH23vIuIAKnlYUB4H9ExU2Ti8 jO5hfhpLE7kuTw1vZZ+VwuVp/VXYK2roWc4QOxdHcUH3TZkeZwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLVqZUeWR3rZSR19H9JlLJlk5hAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvY2IzNTIxZWUtODc2Yi0z MWRhLWFmN2QtMzkxM2U1NTJlOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACt79UD BACt79YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcH0QOOcdfgnjJUNewMq/utTDkrp3E6JGa9kJVLGReFvu NNB5wM4CdamcVy8rjoi1pAULyHsXN+9qYBjNiy4Qz4I/uv3CofHp9TCUx/Q4vgYC TdCJ1hwkbGjcp7HQcJIROHJWccQ0ig0id4Cz6KSP9fi8uaXiZu0pd8Gsqhesa4HH D1oPaGRvfdFrxv734AGEp00LA4F2Lqyv3HdRk+b0r40QZY+2R5HdCt8VTtbrap1M HL2kOqZpEE4/sarU0aQ7arqDB5U7gwul2fLEQWZYprjuIXIss66Q9JomVY6jjsST 5Xp90AcwWdbGkc7UKwM1Id5Rvpdpq7xqt4VCRlb7jA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:28:35 2026 by rpki-client