$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa File: fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa (raw, json) Hash identifier: KMJDvqqeeCI8wEcmYER4x+KCWLSpvxhFxvlkor32P+o= Subject key identifier: 37:95:C0:C5:C5:D6:7C:AB:AF:23:64:4F:D1:30:B6:62:E7:02:99:CB Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F655D7DD58B3AFFC7573D8480 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 62240 IP address blocks: 173.239.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7d:d5:8b:3a:ff:c7:57:3d:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=170cbe99-ef4c-46b1-abc5-04fb33e28603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:b5:9d:98:5f:e5:15:0d:14:0b:72:ac:b4: 9e:d1:7f:44:49:30:40:9c:70:d4:cb:10:83:7c:35: d1:7f:55:ae:99:72:cf:09:20:bb:ff:48:0c:29:5c: 66:03:79:8c:7d:eb:b5:15:00:ea:97:f7:58:b1:d9: ba:4b:62:6d:b2:13:dd:68:5f:17:2c:be:2e:25:4b: d9:49:05:72:82:1c:6e:29:21:8c:22:ac:df:db:cd: 70:db:eb:f6:18:9f:88:e2:52:ca:49:26:a7:24:cf: 08:fa:e2:09:c0:57:c6:6b:0e:54:d6:1b:a5:44:35: 10:df:96:11:5a:52:1d:5e:9b:12:2a:7d:e9:87:7b: b2:ca:80:a5:60:79:ab:a4:49:57:ae:ab:a1:fb:2d: 15:71:52:3a:48:61:94:e4:84:c8:96:d8:27:60:4a: a3:ac:57:6d:aa:cc:e4:5d:70:3c:19:44:36:6f:c0: b4:ee:b2:cb:83:97:32:e8:a7:fa:36:a1:ee:91:68: 72:9a:fb:e4:41:5e:c7:af:19:0e:3c:cc:d9:69:d8: 12:35:eb:c0:1b:9c:1e:58:04:f0:9b:36:31:26:59: fd:c0:13:e3:32:9e:1f:b7:86:e4:cd:64:ad:54:5e: 54:93:a1:39:c0:71:a1:8e:c1:36:f7:98:7f:c2:77: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:95:C0:C5:C5:D6:7C:AB:AF:23:64:4F:D1:30:B6:62:E7:02:99:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fdea940a-8cfc-3b1e-b8e4-f24624e29616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:00:db:f7:66:cb:68:88:4a:3b:1c:c9:73:b5:c7:f7:3c:cc: fb:3a:f9:95:04:65:c7:0c:d6:cc:bc:df:b4:1f:a5:83:8b:45: 32:10:2e:55:5b:37:92:52:78:8e:1f:24:78:75:34:5a:37:83: 20:95:a8:68:8c:bd:02:aa:d5:bb:eb:8d:d8:83:9e:49:cf:6d: 3e:0e:8a:e9:a5:ec:be:f4:1d:d4:b1:44:95:63:2c:a7:e5:9c: 91:fc:ae:99:6c:73:da:0a:ad:e7:4f:ef:3d:e2:a6:1d:81:a3: f2:2d:5f:a1:86:71:57:7d:a6:66:7c:fc:b9:88:5c:93:03:3f: cc:7f:f2:32:97:9d:cc:c6:06:9a:61:75:f5:47:ec:dd:1c:df: a6:2e:f9:c3:32:2d:21:e1:40:b1:a1:93:52:2f:db:9d:77:16: 5e:ed:11:66:28:35:95:ab:f2:d2:13:0f:7b:c6:38:a5:8f:d9: 9a:7f:a6:9d:52:0b:ef:20:61:07:8a:9c:f0:3c:92:df:26:e2: 2a:45:f0:ec:b4:88:a4:ac:f1:b6:1f:e5:e5:16:d9:65:5d:50: fe:a9:be:e4:35:a1:93:e6:5b:49:84:d1:26:f1:95:a4:17:42: 55:da:bb:87:80:5e:6f:db:85:06:31:4e:e8:88:c1:36:7e:72: e1:31:80:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXX3Vizr/x1c9hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MTcwY2JlOTktZWY0Yy00NmIxLWFiYzUtMDRmYjMzZTI4NjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDe1nZhf5RUNFAtyrLSe0X9ESTBAnHDUyxCD fDXRf1WumXLPCSC7/0gMKVxmA3mMfeu1FQDql/dYsdm6S2JtshPdaF8XLL4uJUvZ SQVyghxuKSGMIqzf281w2+v2GJ+I4lLKSSanJM8I+uIJwFfGaw5U1hulRDUQ35YR WlIdXpsSKn3ph3uyyoClYHmrpElXrquh+y0VcVI6SGGU5ITIltgnYEqjrFdtqszk XXA8GUQ2b8C07rLLg5cy6Kf6NqHukWhymvvkQV7HrxkOPMzZadgSNevAG5weWATw mzYxJln9wBPjMp4ft4bkzWStVF5Uk6E5wHGhjsE295h/wncUcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeVwMXF1nyrryNkT9EwtmLnApnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZmRlYTk0MGEtOGNmYy0z YjFlLWI4ZTQtZjI0NjI0ZTI5NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoA2/dmy2iISjscyXO1x/c8zPs6+ZUEZccM1sy837QfpYOLRTIQLlVb N5JSeI4fJHh1NFo3gyCVqGiMvQKq1bvrjdiDnknPbT4Oiuml7L70HdSxRJVjLKfl nJH8rplsc9oKredP7z3iph2Bo/ItX6GGcVd9pmZ8/LmIXJMDP8x/8jKXnczGBpph dfVH7N0c36Yu+cMyLSHhQLGhk1Iv2513Fl7tEWYoNZWr8tITD3vGOKWP2Zp/pp1S C+8gYQeKnPA8kt8m4ipF8Oy0iKSs8bYf5eUW2WVdUP6pvuQ1oZPmW0mE0SbxlaQX QlXau4eAXm/bhQYxTuiIwTZ+cuExgCQ= -----END CERTIFICATE-----Generated at Mon Oct 12 20:18:29 2026 by rpki-client