$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa File: b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa (raw, json) Hash identifier: UcYLjjnzIR7tRWRIfP1M5ng11pRMAL8Wc7Zvh42cV1U= Subject key identifier: 7F:B4:37:34:D6:10:4C:85:BE:8C:3F:5F:A9:96:88:AC:5C:70:DB:B7 Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584B5DFC864A2CCF23574ACB9AC0 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa Signing time: Tue 30 Sep 2025 13:42:35 +0000 ROA not before: Tue 30 Sep 2025 13:42:35 +0000 ROA not after: Mon 29 Dec 2025 14:42:35 +0000 asID: 3842 IP address blocks: 107.191.113.0/24 maxlen: 24 168.235.72.0/22 maxlen: 24 168.235.76.0/22 maxlen: 24 168.235.84.0/22 maxlen: 24 168.235.92.0/22 maxlen: 24 168.235.96.0/22 maxlen: 24 168.235.104.0/22 maxlen: 24 2604:180:3::/48 maxlen: 48 2604:180:f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:fc:86:4a:2c:cf:23:57:4a:cb:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Sep 30 13:42:35 2025 GMT Not After : Dec 29 14:42:35 2025 GMT Subject: CN=e702830b-b9d8-4dbe-9459-b584d3571dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:ce:46:f0:11:d9:b2:c5:5c:8a:6f:68:bd: f3:e9:fc:7b:58:5d:56:07:99:71:97:c9:87:4d:5e: 90:65:50:d2:b8:7e:db:51:11:23:ee:26:e2:68:9c: ca:0d:ec:1f:79:d7:ca:17:76:0c:d1:47:13:ee:da: 23:1e:55:d8:56:02:88:55:04:14:0c:22:c9:e3:4b: 32:73:df:d3:59:38:69:1f:b3:5c:db:5d:3f:00:5f: 44:7a:c9:a9:76:ba:89:70:10:6b:6b:5d:5b:58:30: d2:8a:a6:0c:6a:a9:ca:de:18:8a:33:65:a9:b9:b2: 45:53:eb:08:45:6b:f4:8a:7e:24:60:0a:ee:01:55: 5a:ed:67:56:9e:95:c7:55:30:a7:be:ec:85:c3:45: 5b:15:a3:df:23:8b:8a:63:15:1c:2e:a6:1a:7f:42: d1:f2:e2:98:3c:93:8a:82:fe:bb:14:ee:0b:79:ef: 78:30:7e:99:0f:13:8a:b2:2d:75:8c:6a:f1:91:e1: 93:f5:75:85:c6:6f:cc:13:24:da:8b:f0:53:33:09: 00:fd:f2:9e:3e:ea:91:bc:b3:16:85:e4:5f:cc:ab: 91:02:71:9f:25:27:50:e5:76:0f:aa:f5:c9:ea:88: 97:99:09:6d:9c:43:bc:ad:9b:72:20:44:9d:ee:b0: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B4:37:34:D6:10:4C:85:BE:8C:3F:5F:A9:96:88:AC:5C:70:DB:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 107.191.113.0/24 168.235.72.0/21 168.235.84.0/22 168.235.92.0-168.235.99.255 168.235.104.0/22 IPv6: 2604:180:3::/48 2604:180:f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:89:12:1a:c5:ba:a6:bc:35:d8:1b:e4:25:29:95:0c:fa:48: aa:8a:4b:1e:21:03:66:f2:94:ec:9d:2d:fb:d1:67:37:c3:5b: 9a:75:82:85:9c:f4:4a:ef:bf:91:09:ac:31:3c:f4:fd:25:29: 20:b8:c8:03:39:51:af:7c:04:85:a3:a7:cc:50:66:a8:08:2b: c0:c6:00:30:c1:60:96:63:61:28:be:31:65:90:a5:80:15:3a: a7:e2:ba:a9:90:59:be:cb:48:29:5f:0b:fb:b6:74:83:44:03: a0:df:83:6d:a7:de:94:53:ab:e1:5f:32:80:fd:25:22:a4:03: 7b:de:d2:8b:82:7a:40:ea:fb:8e:9a:c5:14:ed:8a:ff:ef:0c: 7d:ac:4e:63:6a:5f:b2:ba:e7:c4:e0:69:ee:6b:55:a7:fb:47: 1d:57:5a:ab:f0:5d:7f:bf:fe:d8:91:9d:c4:bc:36:19:66:c2: 14:ff:47:f0:e1:99:12:e5:4a:61:3b:1d:b7:73:6c:e2:22:dc: fd:c4:54:e6:eb:39:d0:27:0f:4f:af:24:01:96:7b:c4:5a:42: 38:2b:a3:42:a8:83:fd:d8:91:09:60:ad:2c:1d:6a:45:04:60: 10:31:2d:bf:0d:ce:b3:c3:77:31:3a:df:57:7f:9d:d0:4d:13: 9c:fb:72:11 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEtd/IZKLM8jV0rLmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI1MDkzMDEzNDIzNVoXDTI1MTIyOTE0NDIzNVowLzEtMCsGA1UEAxMk ZTcwMjgzMGItYjlkOC00ZGJlLTk0NTktYjU4NGQzNTcxZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZrORvAR2bLFXIpvaL3z6fx7WF1WB5lxl8mH TV6QZVDSuH7bUREj7ibiaJzKDewfedfKF3YM0UcT7tojHlXYVgKIVQQUDCLJ40sy c9/TWThpH7Nc210/AF9EesmpdrqJcBBra11bWDDSiqYMaqnK3hiKM2WpubJFU+sI RWv0in4kYAruAVVa7WdWnpXHVTCnvuyFw0VbFaPfI4uKYxUcLqYaf0LR8uKYPJOK gv67FO4Lee94MH6ZDxOKsi11jGrxkeGT9XWFxm/MEyTai/BTMwkA/fKePuqRvLMW heRfzKuRAnGfJSdQ5XYPqvXJ6oiXmQltnEO8rZtyIESd7rA7jwIDAQABo4IDjzCC A4swHQYDVR0OBBYEFH+0NzTWEEyFvow/X6mWiKxccNu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvYjcxMGNhNjItZGQzYS0z MmMyLTk3MTYtNGI5ZjM4YzA1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDAsBAIAATAmAwQAa79xAwQD qOtIAwQCqOtUMAwDBAKo61wDBAKo62ADBAKo62gwGAQCAAIwEgMHACYEAYAAAwMH ACYEAYAA9DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQDLiRIaxbqmvDXYG+QlKZUM+kiqikseIQNm8pTsnS37 0Wc3w1uadYKFnPRK77+RCawxPPT9JSkguMgDOVGvfASFo6fMUGaoCCvAxgAwwWCW Y2EovjFlkKWAFTqn4rqpkFm+y0gpXwv7tnSDRAOg34Ntp96UU6vhXzKA/SUipAN7 3tKLgnpA6vuOmsUU7Yr/7wx9rE5jal+yuufE4Gnua1Wn+0cdV1qr8F1/v/7YkZ3E vDYZZsIU/0fw4ZkS5UphOx23c2ziItz9xFTm6znQJw9PryQBlnvEWkI4K6NCqIP9 2JEJYK0sHWpFBGAQMS2/Dc6zw3cxOt9Xf53QTROc+3IR -----END CERTIFICATE-----Generated at Wed Nov 5 18:14:26 2025 by rpki-client