$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa File: ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa (raw, json) Hash identifier: d3Iex48smX9mwovT5EL2E8fB0G+g4zteYv87pEZD7Xw= Subject key identifier: 0B:24:47:B3:4D:AA:D8:78:B2:99:24:0D:96:9C:FF:30:62:C7:7D:C2 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B110C0719066C2E2D59E1A360 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 18345 IP address blocks: 173.239.194.0/24 maxlen: 24 173.239.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:07:19:06:6c:2e:2d:59:e1:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=76049e36-0833-4647-9ff6-0fae76e52023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6d:1a:8e:89:c8:fd:20:21:44:c8:ff:f6:02: 46:04:67:a9:2d:52:e7:3f:1e:af:44:c2:d1:87:aa: 3b:f2:ca:63:5d:38:0c:44:e2:61:4c:28:68:4c:68: a7:26:9c:42:22:fd:38:bc:4c:04:1c:22:93:5a:88: 8d:6a:aa:e5:cd:db:0a:29:3e:48:e5:91:10:40:67: 93:b5:c0:20:14:df:92:b3:1d:3f:84:f9:bb:e3:ba: bf:e4:26:ac:9c:d5:2b:70:e2:bb:bf:df:3a:9e:57: 42:b3:d7:00:70:2e:0d:54:ba:4c:f5:1c:49:7d:c0: ab:49:08:d5:79:01:d7:8a:6f:d9:21:38:24:55:c9: ef:10:0a:88:af:50:60:33:5c:12:db:66:f8:2b:6e: f3:96:57:52:c0:2e:b6:31:ed:1c:d1:06:4e:3c:ae: d8:4a:fe:96:fe:41:b6:82:14:9e:58:af:d7:55:55: 73:6d:ca:ff:55:a6:1e:7a:4b:96:1e:aa:32:e8:f9: db:bd:e6:be:3c:95:92:59:ca:21:4a:4d:cf:1b:3f: 66:95:4a:24:0c:44:fc:bd:ae:e1:f1:f6:7e:d7:8f: 3d:77:49:fa:0b:4a:02:1e:83:bf:82:0f:b4:1c:48: 3f:9a:15:74:df:de:fb:09:69:d8:00:c4:20:ea:bd: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:47:B3:4D:AA:D8:78:B2:99:24:0D:96:9C:FF:30:62:C7:7D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.194.0/24 173.239.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4f:cc:d3:e8:b9:a7:7b:65:fd:21:4a:58:63:04:3c:79:5b: 00:fb:b9:67:64:10:ec:4b:9c:52:27:a6:99:33:56:d2:44:db: 1f:40:7d:20:a9:c5:58:2f:e6:0f:07:c9:82:ed:7a:37:86:b1: 91:61:0d:c0:17:8e:1f:b7:1e:c7:f3:32:6a:99:5c:94:05:56: 9b:cf:be:9c:19:68:69:85:53:96:90:55:77:4b:f8:f9:f5:8f: ad:3b:c7:2d:a2:b7:89:4e:36:05:5e:26:8d:06:f0:ee:bc:91: 6b:5e:ea:92:8d:86:0d:85:6c:97:d4:e6:f1:69:41:e3:25:6b: 22:9c:e6:d7:07:8a:fa:f6:ea:3f:b9:d7:94:31:8a:ad:12:28: 83:56:73:b7:30:55:f1:7b:2b:99:73:5b:c2:50:f5:52:98:37: b4:33:0c:17:d8:5f:40:4a:01:91:ab:6a:28:61:b2:16:70:83: 25:f0:b1:20:87:96:89:07:13:cf:3b:0a:43:88:5b:14:f0:44: 6b:93:15:7f:b8:3a:da:86:59:10:1a:f3:10:cc:c5:75:78:cd: 8d:3a:90:27:ee:60:25:cf:4f:7a:e8:63:0b:3f:2c:60:76:cd: af:b0:c0:c2:f6:f5:8b:19:3e:c1:b2:e3:00:96:7a:3f:28:d3: 55:f9:94:ff -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsRDAcZBmwuLVnho2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzYwNDllMzYtMDgzMy00NjQ3LTlmZjYtMGZhZTc2ZTUyMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA320ajonI/SAhRMj/9gJGBGepLVLnPx6vRMLR h6o78spjXTgMROJhTChoTGinJpxCIv04vEwEHCKTWoiNaqrlzdsKKT5I5ZEQQGeT tcAgFN+Ssx0/hPm747q/5CasnNUrcOK7v986nldCs9cAcC4NVLpM9RxJfcCrSQjV eQHXim/ZITgkVcnvEAqIr1BgM1wS22b4K27zlldSwC62Me0c0QZOPK7YSv6W/kG2 ghSeWK/XVVVzbcr/VaYeekuWHqoy6Pnbvea+PJWSWcohSk3PGz9mlUokDET8va7h 8fZ+1489d0n6C0oCHoO/gg+0HEg/mhV03977CWnYAMQg6r1ocwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAskR7NNqth4spkkDZac/zBix33CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZWM5MjgyMDctMDdiYi0z ZjFiLTkzMGItOTlmNmM3YmIwN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/CAwQA re/LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIhPzNPouad7Zf0hSlhjBDx5WwD7uWdkEOxLnFInppkzVtJE 2x9AfSCpxVgv5g8HyYLtejeGsZFhDcAXjh+3HsfzMmqZXJQFVpvPvpwZaGmFU5aQ VXdL+Pn1j607xy2it4lONgVeJo0G8O68kWte6pKNhg2FbJfU5vFpQeMlayKc5tcH ivr26j+515Qxiq0SKINWc7cwVfF7K5lzW8JQ9VKYN7QzDBfYX0BKAZGraihhshZw gyXwsSCHlokHE887CkOIWxTwRGuTFX+4OtqGWRAa8xDMxXV4zY06kCfuYCXPT3ro Yws/LGB2za+wwML29YsZPsGy4wCWej8o01X5lP8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:46:11 2025 by rpki-client