$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/663d9e03-51aa-3071-85db-b598f34103d6.roa File: 663d9e03-51aa-3071-85db-b598f34103d6.roa (raw, json) Hash identifier: CppAq+XR+8Ci19LxmG/GcfOcJDi2Mja+U0sEvHBMQts= Subject key identifier: 2F:4A:AD:58:2A:2D:00:52:B1:05:60:87:84:88:A1:8D:BC:A5:09:73 Certificate issuer: /CN=7a2d9c34-929b-4b22-9b0f-7396972ad017 Certificate serial: 010D0C9F4328584AF6869345B9D255B3500D3C00 Authority key identifier: 31:E2:DF:5E:88:FB:21:90:F5:EE:F2:72:01:70:FC:49:EA:58:5E:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/663d9e03-51aa-3071-85db-b598f34103d6.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 1403 IP address blocks: 64.72.225.0/24 maxlen: 24 64.72.228.0/23 maxlen: 24 64.72.231.0/24 maxlen: 24 64.72.232.0/23 maxlen: 24 64.72.237.0/24 maxlen: 24 64.72.238.0/24 maxlen: 24 64.72.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/7a2d9c34-929b-4b22-9b0f-7396972ad017.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/7a2d9c34-929b-4b22-9b0f-7396972ad017.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:93:45:b9:d2:55:b3:50:0d:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2d9c34-929b-4b22-9b0f-7396972ad017 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=9632a1af-ba80-488d-af3c-010406aa2cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:fa:55:c3:06:44:53:07:fb:fc:eb:72:18: 2d:fd:1e:a7:dc:e4:a6:10:fe:dc:f1:3a:69:bf:9f: cb:a6:4b:b2:20:f3:0d:31:41:66:48:33:6e:31:e8: 95:7a:05:9c:42:a3:8e:da:b8:3a:5d:dd:b3:0b:4a: 18:79:70:a7:d2:3d:9b:45:fb:b3:d6:74:3d:9f:d5: 18:38:6b:ce:62:a6:cb:9b:bd:c3:c4:65:22:48:64: 47:c0:ea:cc:3c:9c:38:33:3e:85:6d:bd:91:d6:24: 70:d7:07:75:17:4f:da:c9:94:41:db:ff:52:5d:a7: 94:a3:aa:f1:ad:49:d0:f5:f0:30:9a:ca:4a:bf:a7: 57:c0:b6:bc:01:e8:88:21:f6:87:d7:45:8d:ee:e8: 1c:85:95:9a:39:11:f9:a6:65:35:e6:da:f6:f7:c7: 0d:a2:12:a6:a8:53:d7:5e:e6:0e:f7:b2:74:13:ac: d4:83:e3:5e:f4:1f:e3:69:da:94:98:61:2c:46:a8: 59:7a:8b:47:a1:48:78:24:08:aa:a2:80:43:50:c5: d9:b7:9d:44:9c:be:73:fc:57:4f:f9:64:48:c7:36: ea:e6:38:2b:d9:99:18:e3:8e:28:f1:7c:0b:e1:49: 7b:9f:46:f5:4f:4f:57:06:f1:b1:f4:2d:47:66:6f: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:AD:58:2A:2D:00:52:B1:05:60:87:84:88:A1:8D:BC:A5:09:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/663d9e03-51aa-3071-85db-b598f34103d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/7a2d9c34-929b-4b22-9b0f-7396972ad017.crl X509v3 Authority Key Identifier: keyid:31:E2:DF:5E:88:FB:21:90:F5:EE:F2:72:01:70:FC:49:EA:58:5E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017.cer sbgp-ipAddrBlock: critical IPv4: 64.72.225.0/24 64.72.228.0/23 64.72.231.0-64.72.233.255 64.72.237.0-64.72.238.255 64.72.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0c:28:f8:72:01:f8:33:ba:6c:d0:13:36:6e:a1:52:5c:88: 88:fd:5c:ec:e3:10:b9:1c:7a:8c:d8:38:eb:1e:c5:28:b7:56: 57:6f:95:af:fe:18:21:8b:05:15:88:c6:95:8e:fe:a0:b0:c4: 1b:4f:35:ec:e9:62:3b:53:88:58:a6:61:e5:8b:75:f9:01:c4: 84:b3:09:f6:b5:61:7c:fb:71:42:45:44:42:1b:f0:a8:5d:6d: e3:0f:af:42:df:40:14:dd:a3:41:2d:58:57:05:05:cf:63:e3: ca:de:2e:03:50:c1:1d:88:70:89:af:f2:e7:3d:1b:54:e7:58: ae:f6:6c:1f:a4:94:bd:68:a8:c3:59:f8:d6:52:db:f6:bc:30: 04:54:39:53:83:6e:ae:ed:4e:cf:f0:dd:31:0e:e9:63:9d:a7: 48:e2:d2:5b:19:13:41:c7:a6:d5:04:fa:e5:1c:28:f6:01:ca: 86:51:55:ef:47:7e:21:7d:99:43:cf:55:7c:bb:22:57:cf:e7: 6d:1e:de:cf:db:2e:81:63:4f:15:a5:4a:70:c5:6d:57:1b:8b: ce:a9:7e:2f:d0:6d:3a:ef:49:f0:1f:c6:ea:d8:23:8b:fa:4a: b3:59:cf:16:2e:b8:37:9a:64:28:c5:47:1b:9b:6f:2b:d4:1c: b3:ca:d8:19 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEr2hpNFudJVs1ANPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyZDljMzQtOTI5Yi00YjIyLTliMGYtNzM5Njk3MmFk MDE3MB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk OTYzMmExYWYtYmE4MC00ODhkLWFmM2MtMDEwNDA2YWEyY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixD6VcMGRFMH+/zrchgt/R6n3OSmEP7c8Tpp v5/LpkuyIPMNMUFmSDNuMeiVegWcQqOO2rg6Xd2zC0oYeXCn0j2bRfuz1nQ9n9UY OGvOYqbLm73DxGUiSGRHwOrMPJw4Mz6Fbb2R1iRw1wd1F0/ayZRB2/9SXaeUo6rx rUnQ9fAwmspKv6dXwLa8AeiIIfaH10WN7ugchZWaORH5pmU15tr298cNohKmqFPX XuYO97J0E6zUg+Ne9B/jadqUmGEsRqhZeotHoUh4JAiqooBDUMXZt51EnL5z/FdP +WRIxzbq5jgr2ZkY444o8XwL4Ul7n0b1T09XBvGx9C1HZm9L4wIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFC9KrVgqLQBSsQVgh4SIoY28pQlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83YTJk OWMzNC05MjliLTRiMjItOWIwZi03Mzk2OTcyYWQwMTcvNjYzZDllMDMtNTFhYS0z MDcxLTg1ZGItYjU5OGYzNDEwM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2EyZDljMzQtOTI5Yi00YjIyLTli MGYtNzM5Njk3MmFkMDE3LzdhMmQ5YzM0LTkyOWItNGIyMi05YjBmLTczOTY5NzJh ZDAxNy5jcmwwHwYDVR0jBBgwFoAUMeLfXoj7IZD17vJyAXD8SepYXpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83YTJkOWMzNC05MjliLTRiMjItOWIwZi03Mzk2 OTcyYWQwMTcuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAQEjhAwQB QEjkMAwDBABASOcDBAFASOgwDAMEAEBI7QMEAEBI7gMEBEBI8DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9 DCj4cgH4M7ps0BM2bqFSXIiI/Vzs4xC5HHqM2DjrHsUot1ZXb5Wv/hghiwUViMaV jv6gsMQbTzXs6WI7U4hYpmHli3X5AcSEswn2tWF8+3FCRURCG/CoXW3jD69C30AU 3aNBLVhXBQXPY+PK3i4DUMEdiHCJr/LnPRtU51iu9mwfpJS9aKjDWfjWUtv2vDAE VDlTg26u7U7P8N0xDuljnadI4tJbGRNBx6bVBPrlHCj2AcqGUVXvR34hfZlDz1V8 uyJXz+dtHt7P2y6BY08VpUpwxW1XG4vOqX4v0G0670nwH8bq2COL+kqzWc8WLrg3 mmQoxUcbm28r1ByzytgZ -----END CERTIFICATE-----Generated at Wed Nov 5 06:53:24 2025 by rpki-client