$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa File: a3325f5a-465e-3622-a353-ec026e3ae096.roa (raw, json) Hash identifier: ISO+a+pXyBVolI56aa0IpzB4sj1UfWcnl02bAsZrVBo= Subject key identifier: D1:81:AC:E7:36:8A:76:88:FC:2A:65:BE:E9:11:CD:89:58:C4:C8:F8 Certificate issuer: /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Certificate serial: 010D0C9F4328584AB91B8CD7FAF56D70FE90CD40 Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 7065 IP address blocks: 23.93.0.0/16 maxlen: 24 50.0.0.0/15 maxlen: 24 64.142.0.0/17 maxlen: 24 69.12.128.0/17 maxlen: 24 70.36.128.0/17 maxlen: 24 75.101.0.0/17 maxlen: 24 76.191.128.0/17 maxlen: 24 107.156.0.0/15 maxlen: 24 108.169.0.0/17 maxlen: 24 135.180.0.0/16 maxlen: 24 142.254.0.0/17 maxlen: 24 157.131.0.0/16 maxlen: 24 173.228.0.0/17 maxlen: 24 184.23.0.0/16 maxlen: 24 192.184.128.0/17 maxlen: 24 198.27.128.0/17 maxlen: 24 199.245.68.0/24 maxlen: 24 208.106.0.0/17 maxlen: 24 209.148.96.0/19 maxlen: 24 209.204.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8c:d7:fa:f5:6d:70:fe:90:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=0d568cf5-b622-4e79-926e-5a1036962ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:f0:66:97:8b:f9:fa:7c:c4:f2:9c:75:38: 17:e6:c7:f9:5d:da:ce:f4:5a:a3:58:6a:4a:3a:65: 8f:3a:6d:50:c6:4b:f3:76:fd:8e:6a:f0:a9:ae:c8: 96:37:32:e5:38:1a:3d:98:d1:99:29:3f:3c:ca:b8: f2:32:f3:9d:99:81:3d:89:4c:9c:c0:5e:1b:3a:2c: a3:13:48:99:35:7e:97:f8:f6:73:bf:cc:8d:b8:67: 71:b3:b8:a1:c6:89:83:c8:63:26:2b:9d:9a:36:91: 53:06:f4:3b:7d:60:c6:a0:d8:8b:8f:93:b6:bb:3e: 17:46:fa:af:03:f1:18:9c:2c:87:55:f0:bf:2a:4c: af:f0:56:6e:88:3d:87:6b:16:bc:b8:32:24:8d:f1: ae:48:36:7e:66:7d:a4:f0:78:f3:ab:6a:e7:46:23: 82:3f:c5:58:af:f2:60:cd:75:2e:81:93:42:58:a2: 48:21:85:cc:57:c1:60:c0:58:17:4c:31:3a:c3:4b: fd:e7:a5:74:8f:cc:8d:15:88:81:32:b2:66:df:70: ca:f0:19:90:09:1a:50:9e:14:d9:09:22:f3:4e:a8: 24:ea:e9:9c:2d:a0:0e:a5:a8:6a:20:a8:1d:43:5c: 7d:96:05:ca:a2:e3:a8:51:ef:08:4e:ba:c2:3a:bb: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:81:AC:E7:36:8A:76:88:FC:2A:65:BE:E9:11:CD:89:58:C4:C8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl X509v3 Authority Key Identifier: keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer sbgp-ipAddrBlock: critical IPv4: 23.93.0.0/16 50.0.0.0/15 64.142.0.0/17 69.12.128.0/17 70.36.128.0/17 75.101.0.0/17 76.191.128.0/17 107.156.0.0/15 108.169.0.0/17 135.180.0.0/16 142.254.0.0/17 157.131.0.0/16 173.228.0.0/17 184.23.0.0/16 192.184.128.0/17 198.27.128.0/17 199.245.68.0/24 208.106.0.0/17 209.148.96.0/19 209.204.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:aa:7d:06:b9:34:26:a4:1e:5b:15:89:d2:2b:d8:e7:5b:3a: cd:47:b3:48:e6:84:0d:b8:b7:69:c0:c8:42:af:0c:44:e3:fa: 76:00:d7:2c:2c:85:25:67:52:75:0e:bf:39:9f:11:fb:e1:a8: 0d:ea:eb:d0:72:41:b4:1d:1f:9e:d8:ac:7c:31:d2:cb:1f:fe: 25:5f:67:51:09:74:b7:a5:80:2f:b8:ed:4e:8b:93:ed:c0:cd: 0c:2d:e2:94:b5:88:8f:9e:18:44:3d:b2:84:a5:a0:c2:bd:1b: 26:d7:86:b2:51:06:44:ea:9b:36:7f:e5:15:a3:95:0a:83:b7: 4e:9a:8c:12:d3:dd:58:0a:cb:28:72:30:43:17:d5:64:a9:29: ed:a6:05:52:71:ae:b3:97:38:79:08:2a:8c:ed:a6:f6:7a:0c: a5:3b:49:5b:51:4f:48:ea:97:5d:80:ae:5b:81:87:48:b6:37: d4:a7:d1:8f:80:20:95:c6:f0:dc:8a:49:65:ba:c0:9c:3a:ad: 14:4d:a2:14:a2:35:33:de:c6:cd:a1:6c:7d:34:17:3f:47:0e: a4:db:46:71:c3:70:10:31:9b:29:be:1b:cf:d1:df:62:89:43: fa:b7:be:c3:0e:77:9a:a9:19:a9:52:f4:dd:ea:be:45:f8:ca: 35:27:e0:2a -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEq5G4zX+vVtcP6QzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi MDg3MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGQ1NjhjZjUtYjYyMi00ZTc5LTkyNmUtNWExMDM2OTYyYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmXwZpeL+fp8xPKcdTgX5sf5XdrO9FqjWGpK OmWPOm1Qxkvzdv2OavCprsiWNzLlOBo9mNGZKT88yrjyMvOdmYE9iUycwF4bOiyj E0iZNX6X+PZzv8yNuGdxs7ihxomDyGMmK52aNpFTBvQ7fWDGoNiLj5O2uz4XRvqv A/EYnCyHVfC/Kkyv8FZuiD2Haxa8uDIkjfGuSDZ+Zn2k8Hjzq2rnRiOCP8VYr/Jg zXUugZNCWKJIIYXMV8FgwFgXTDE6w0v956V0j8yNFYiBMrJm33DK8BmQCRpQnhTZ CSLzTqgk6umcLaAOpahqIKgdQ1x9lgXKouOoUe8ITrrCOrtZRQIDAQABo4IDwjCC A74wHQYDVR0OBBYEFNGBrOc2inaI/CplvukRzYlYxMj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYTMzMjVmNWEtNDY1ZS0z NjIyLWEzNTMtZWMwMjZlM2FlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0 AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBOqn0GuTQmpB5bFYnSK9jnWzrNR7NI5oQNuLdp wMhCrwxE4/p2ANcsLIUlZ1J1Dr85nxH74agN6uvQckG0HR+e2Kx8MdLLH/4lX2dR CXS3pYAvuO1Oi5PtwM0MLeKUtYiPnhhEPbKEpaDCvRsm14ayUQZE6ps2f+UVo5UK g7dOmowS091YCssocjBDF9VkqSntpgVSca6zlzh5CCqM7ab2egylO0lbUU9I6pdd gK5bgYdItjfUp9GPgCCVxvDcikllusCcOq0UTaIUojUz3sbNoWx9NBc/Rw6k20Zx w3AQMZspvhvP0d9iiUP6t77DDneaqRmpUvTd6r5F+Mo1J+Aq -----END CERTIFICATE-----Generated at Thu Aug 7 00:40:01 2025 by rpki-client