$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa File: dd042710-853c-3377-8175-71e45a5c93e8.roa (raw, json) Hash identifier: 9JFxNf8WfqBTvUfB16kWG4HvqBg6rF7uzKqjIQN8Uqo= Subject key identifier: 33:7A:37:9E:2B:02:D6:F2:1E:E3:F9:15:75:39:33:98:EC:14:68:D2 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A979B7ECE5A8C7A99E8F96980 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa Signing time: Mon 21 Jul 2025 13:01:04 +0000 ROA not before: Mon 21 Jul 2025 13:01:04 +0000 ROA not after: Sun 19 Oct 2025 13:01:04 +0000 asID: 64286 IP address blocks: 173.239.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:9b:7e:ce:5a:8c:7a:99:e8:f9:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jul 21 13:01:04 2025 GMT Not After : Oct 19 13:01:04 2025 GMT Subject: CN=7a849299-d870-4587-88e1-0f10c5dfbd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:1a:4d:68:3f:fc:a2:ca:e3:3d:83:1e:1c: 70:d9:a4:c3:43:d9:ae:81:fe:e7:f9:e4:66:fc:35: ee:12:be:79:af:ff:f0:fb:24:20:cb:ea:77:70:17: 58:42:38:07:08:18:65:8a:7b:0f:27:3f:f6:e7:2c: fa:f3:4d:4e:77:06:f1:d9:94:b1:38:ce:9b:27:9b: c5:15:0e:76:dc:20:62:26:3f:a7:b6:c2:d0:d1:0f: de:1f:9c:a5:26:10:2d:ad:1c:cb:67:f0:48:10:a3: 82:80:af:71:16:fa:f8:54:78:46:b1:14:c2:3e:96: cd:61:1e:ad:ff:1b:05:69:49:c2:03:a6:61:cb:20: 2f:ef:00:af:9b:a7:65:14:b1:09:3a:3b:0f:08:7c: 11:59:9b:d6:6d:a9:0e:0e:c9:cf:e7:96:0f:09:68: 4e:58:cb:5a:b0:d1:fe:8c:f5:aa:9a:77:f6:ed:21: 0a:12:78:ac:16:d3:1d:a4:8e:51:0c:e9:c6:d1:ae: eb:a4:43:d6:3d:3a:fc:84:16:3b:53:09:73:86:23: 43:45:73:75:0d:9d:3d:4c:47:d7:82:ae:2e:1a:4c: ee:a1:d2:f6:8d:0e:ad:53:7c:77:33:f1:f8:60:aa: 95:62:4d:c5:e1:83:52:a5:57:5d:e5:79:d9:65:0a: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7A:37:9E:2B:02:D6:F2:1E:E3:F9:15:75:39:33:98:EC:14:68:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:81:ca:ce:56:cc:69:cf:eb:77:67:69:03:b1:91:bf:68:0c: fd:3e:cb:c2:1f:22:3b:ba:14:5d:25:ed:02:79:96:56:be:30: 38:41:43:34:a1:7b:13:b4:0e:63:d4:99:8c:3d:81:7f:46:34: af:3f:4c:44:3a:b1:5c:b3:fe:e0:29:e5:ef:5c:ab:76:72:6c: 71:f1:86:32:8e:03:df:e7:5c:45:07:e3:08:28:f4:46:38:1a: 40:f3:a1:c7:c1:c5:9a:b8:af:27:1b:7f:a5:96:7d:6b:d0:45: 5d:c2:f7:e2:1c:df:8a:6a:72:ae:e4:d2:36:81:57:9c:e2:b6: d1:92:f6:cc:f1:64:fe:0d:19:37:e7:f1:4d:5b:17:3b:9d:7b: d1:b0:cf:61:55:f8:fa:1a:b3:9b:79:ee:ac:51:c7:fc:a0:ef: 49:bc:db:d6:21:d4:58:df:07:63:fb:c8:18:38:62:43:3a:b3: 95:82:46:27:cb:c8:45:11:fc:b4:c3:d2:e7:5b:65:5f:fc:f1: e9:4d:88:6a:7a:d0:e9:f7:b0:55:a4:a1:32:a5:4b:84:6f:b5: 65:ac:ee:fa:a1:eb:22:3c:ef:5d:47:c2:23:43:79:43:f1:77: 97:fc:d3:36:0a:1b:53:5d:db:7e:e2:6b:d9:d6:d1:31:8d:b4: 33:51:e8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXm37OWox6mej5aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDcyMTEzMDEwNFoXDTI1MTAxOTEzMDEwNFowLzEtMCsGA1UEAxMk N2E4NDkyOTktZDg3MC00NTg3LTg4ZTEtMGYxMGM1ZGZiZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmoaTWg//KLK4z2DHhxw2aTDQ9mugf7n+eRm /DXuEr55r//w+yQgy+p3cBdYQjgHCBhlinsPJz/25yz6801Odwbx2ZSxOM6bJ5vF FQ523CBiJj+ntsLQ0Q/eH5ylJhAtrRzLZ/BIEKOCgK9xFvr4VHhGsRTCPpbNYR6t /xsFaUnCA6ZhyyAv7wCvm6dlFLEJOjsPCHwRWZvWbakODsnP55YPCWhOWMtasNH+ jPWqmnf27SEKEnisFtMdpI5RDOnG0a7rpEPWPTr8hBY7UwlzhiNDRXN1DZ09TEfX gq4uGkzuodL2jQ6tU3x3M/H4YKqVYk3F4YNSpVdd5XnZZQpVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN6N54rAtbyHuP5FXU5M5jsFGjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZGQwNDI3MTAtODUzYy0z Mzc3LTgxNzUtNzFlNDVhNWM5M2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCBys5WzGnP63dnaQOxkb9oDP0+y8IfIju6FF0l7QJ5lla+MDhBQzSh exO0DmPUmYw9gX9GNK8/TEQ6sVyz/uAp5e9cq3ZybHHxhjKOA9/nXEUH4wgo9EY4 GkDzocfBxZq4rycbf6WWfWvQRV3C9+Ic34pqcq7k0jaBV5zittGS9szxZP4NGTfn 8U1bFzude9Gwz2FV+Poas5t57qxRx/yg70m829Yh1FjfB2P7yBg4YkM6s5WCRifL yEUR/LTD0udbZV/88elNiGp60On3sFWkoTKlS4RvtWWs7vqh6yI8711HwiNDeUPx d5f80zYKG1Nd237ia9nW0TGNtDNR6Ds= -----END CERTIFICATE-----Generated at Fri Aug 8 13:07:26 2025 by rpki-client