$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa File: a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa (raw, json) Hash identifier: FDzSFrRJehUweCMqzkVrLlTRgyR4XpxCvc86cxxYF5k= Subject key identifier: 58:2F:65:9D:78:94:38:35:65:2A:8E:0B:BC:78:6F:96:88:4C:D3:49 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AE8913769012BAD9C802FC580 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 7181 IP address blocks: 72.29.96.0/19 maxlen: 24 72.249.0.0/17 maxlen: 24 72.249.128.0/18 maxlen: 24 74.112.92.0/22 maxlen: 24 74.114.180.0/22 maxlen: 24 74.118.40.0/22 maxlen: 24 74.120.208.0/22 maxlen: 24 74.213.128.0/19 maxlen: 24 96.31.160.0/20 maxlen: 24 98.142.80.0/20 maxlen: 24 104.37.108.0/22 maxlen: 24 144.202.128.0/17 maxlen: 24 162.216.52.0/22 maxlen: 24 162.220.104.0/22 maxlen: 24 162.222.96.0/22 maxlen: 24 162.248.248.0/21 maxlen: 24 173.237.128.0/18 maxlen: 24 173.240.48.0/20 maxlen: 24 174.136.0.0/18 maxlen: 24 192.197.58.0/23 maxlen: 24 198.35.116.0/22 maxlen: 24 199.21.64.0/21 maxlen: 24 199.87.60.0/22 maxlen: 24 199.96.248.0/21 maxlen: 24 199.188.208.0/22 maxlen: 24 199.193.140.0/22 maxlen: 24 199.193.176.0/22 maxlen: 24 199.233.224.0/22 maxlen: 24 204.11.208.0/22 maxlen: 24 204.15.100.0/22 maxlen: 24 204.16.108.0/22 maxlen: 24 205.147.202.0/24 maxlen: 24 205.147.208.0/24 maxlen: 24 205.147.218.0/24 maxlen: 24 205.147.235.0/24 maxlen: 24 206.123.64.0/18 maxlen: 24 206.245.164.0/24 maxlen: 24 207.8.244.0/22 maxlen: 24 207.45.160.0/20 maxlen: 24 207.154.0.0/18 maxlen: 24 207.210.192.0/18 maxlen: 24 207.254.208.0/20 maxlen: 24 208.67.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:37:69:01:2b:ad:9c:80:2f:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=5a2691d8-e3d8-4cb7-9c8e-81e7111d2277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:74:a4:35:d7:c2:11:84:de:36:76:a4:5e: 70:4c:5a:ce:a3:89:c4:c2:22:07:30:eb:1c:81:3a: f4:c6:20:ee:28:2c:09:2d:44:f7:fc:76:9e:dc:1e: 38:c4:dc:7a:0b:fc:17:78:ec:40:b2:ca:70:4b:68: a4:27:65:a0:17:44:04:9f:8e:05:49:3b:2a:02:8e: 7d:57:55:03:c9:0e:9a:25:3d:a0:fa:bf:41:77:9b: 7c:d5:8f:75:b2:99:db:d0:cc:e2:52:a9:9f:49:12: 28:7c:19:28:0a:7d:b4:8d:86:8a:dd:b7:8c:13:5c: b5:92:5b:d1:ed:26:f4:f0:e5:29:2a:d3:04:97:20: ad:27:24:51:6e:b4:de:e7:7a:ba:aa:23:b2:e6:85: 91:57:9f:4f:68:16:97:90:da:9f:e8:56:d3:cc:88: ba:ad:1c:74:fb:f3:fc:fa:0e:20:08:5c:2e:45:7b: 1b:8c:16:1b:f8:c5:19:ea:73:cc:4a:6d:38:4e:88: b7:54:44:87:a1:7e:f6:d1:f7:52:f9:01:fc:55:1c: 08:be:88:29:b0:de:03:48:80:f3:92:95:f2:51:e2: f0:1b:47:a8:b5:75:d8:4d:a6:a1:1b:df:a6:1a:cb: ab:ec:69:ac:c1:fe:a5:cf:89:f2:3e:0e:aa:90:7b: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2F:65:9D:78:94:38:35:65:2A:8E:0B:BC:78:6F:96:88:4C:D3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.29.96.0/19 72.249.0.0-72.249.191.255 74.112.92.0/22 74.114.180.0/22 74.118.40.0/22 74.120.208.0/22 74.213.128.0/19 96.31.160.0/20 98.142.80.0/20 104.37.108.0/22 144.202.128.0/17 162.216.52.0/22 162.220.104.0/22 162.222.96.0/22 162.248.248.0/21 173.237.128.0/18 173.240.48.0/20 174.136.0.0/18 192.197.58.0/23 198.35.116.0/22 199.21.64.0/21 199.87.60.0/22 199.96.248.0/21 199.188.208.0/22 199.193.140.0/22 199.193.176.0/22 199.233.224.0/22 204.11.208.0/22 204.15.100.0/22 204.16.108.0/22 205.147.202.0/24 205.147.208.0/24 205.147.218.0/24 205.147.235.0/24 206.123.64.0/18 206.245.164.0/24 207.8.244.0/22 207.45.160.0/20 207.154.0.0/18 207.210.192.0/18 207.254.208.0/20 208.67.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0c:ae:5f:c2:8f:27:1e:4e:66:b2:41:ae:af:6c:ec:f3:35: 76:11:6a:98:cd:50:6a:72:ef:a1:47:a6:fb:4e:25:c1:29:a4: 21:8b:f5:13:e8:61:5c:65:2f:9e:88:4f:4b:e9:b1:c8:2a:bb: 18:f6:1f:90:01:43:33:d9:04:b1:0f:f6:90:aa:68:03:5d:62: bf:7e:45:08:e1:6f:92:03:42:5f:90:1a:f5:68:47:fa:5c:5e: 42:dc:91:51:02:64:86:bc:bb:d6:46:c8:92:23:bb:c1:d2:63: 50:ba:18:6a:31:a3:6f:c3:59:13:a1:ea:51:bf:43:d8:a8:0b: 06:91:4b:9e:da:4a:67:fe:be:f4:07:54:64:92:3e:a6:a1:29: dc:f6:e2:0e:da:5a:7d:53:39:f9:64:a9:af:73:09:6b:61:9a: 4c:5e:7d:68:bf:70:75:6a:04:10:03:a7:29:4d:ea:b4:61:ee: c6:51:8a:24:ac:c4:d4:15:56:14:4e:5e:4f:87:9d:7e:b4:2c: 1b:0c:a6:04:72:1c:2f:fb:15:d1:03:9c:3e:c0:e5:15:db:da: 42:61:66:da:e8:19:a9:1d:bf:3f:13:72:94:2b:b6:b2:cd:54: 72:05:f5:78:b3:bb:57:7a:66:86:12:21:24:70:d5:5b:15:fc: d8:8d:14:5e -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWErokTdpASutnIAvxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NWEyNjkxZDgtZTNkOC00Y2I3LTljOGUtODFlNzExMWQyMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaB0pDXXwhGE3jZ2pF5wTFrOo4nEwiIHMOsc gTr0xiDuKCwJLUT3/Hae3B44xNx6C/wXeOxAsspwS2ikJ2WgF0QEn44FSTsqAo59 V1UDyQ6aJT2g+r9Bd5t81Y91spnb0MziUqmfSRIofBkoCn20jYaK3beME1y1klvR 7Sb08OUpKtMElyCtJyRRbrTe53q6qiOy5oWRV59PaBaXkNqf6FbTzIi6rRx0+/P8 +g4gCFwuRXsbjBYb+MUZ6nPMSm04Toi3VESHoX720fdS+QH8VRwIvogpsN4DSIDz kpXyUeLwG0eotXXYTaahG9+mGsur7Gmswf6lz4nyPg6qkHtewwIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFFgvZZ14lDg1ZSqOC7x4b5aITNNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTc0OGY3NzctOGI3OS0z YWQ2LTkxMjctOGVhZDdhNGNmN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzCCAQsEAgABMIIB AwMEBUgdYDALAwMASPkDBAZI+YADBAJKcFwDBAJKcrQDBAJKdigDBAJKeNADBAVK 1YADBARgH6ADBARijlADBAJoJWwDBAeQyoADBAKi2DQDBAKi3GgDBAKi3mADBAOi +PgDBAat7YADBASt8DADBAauiAADBAHAxToDBALGI3QDBAPHFUADBALHVzwDBAPH YPgDBALHvNADBALHwYwDBALHwbADBALH6eADBALMC9ADBALMD2QDBALMEGwDBADN k8oDBADNk9ADBADNk9oDBADNk+sDBAbOe0ADBADO9aQDBALPCPQDBATPLaADBAbP mgADBAbP0sADBATP/tADBAPQQ3gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQgyuX8KPJx5OZrJBrq9s7PM1 dhFqmM1QanLvoUem+04lwSmkIYv1E+hhXGUvnohPS+mxyCq7GPYfkAFDM9kEsQ/2 kKpoA11iv35FCOFvkgNCX5Aa9WhH+lxeQtyRUQJkhry71kbIkiO7wdJjULoYajGj b8NZE6HqUb9D2KgLBpFLntpKZ/6+9AdUZJI+pqEp3PbiDtpafVM5+WSpr3MJa2Ga TF59aL9wdWoEEAOnKU3qtGHuxlGKJKzE1BVWFE5eT4edfrQsGwymBHIcL/sV0QOc PsDlFdvaQmFm2ugZqR2/PxNylCu2ss1UcgX1eLO7V3pmhhIhJHDVWxX82I0UXg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:47:35 2025 by rpki-client