$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa File: 3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa (raw, json) Hash identifier: swy/L2q2YG/0S7R3gsa7+55avghYzDROal4QsG6iOro= Subject key identifier: 5B:AE:81:6B:63:C8:C1:67:1C:04:B9:E5:E9:60:59:14:44:51:08:B9 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B2FC18EE02766D12F49791600 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 6621 IP address blocks: 72.170.0.0/19 maxlen: 19 72.170.208.0/24 maxlen: 24 72.170.209.0/24 maxlen: 24 72.170.210.0/24 maxlen: 24 72.170.211.0/24 maxlen: 24 72.170.212.0/24 maxlen: 24 72.170.213.0/24 maxlen: 24 72.170.214.0/24 maxlen: 24 72.170.215.0/24 maxlen: 24 72.170.216.0/24 maxlen: 24 72.170.220.0/23 maxlen: 23 72.170.223.0/24 maxlen: 24 72.170.224.0/24 maxlen: 24 72.170.225.0/24 maxlen: 24 72.170.226.0/24 maxlen: 24 72.170.227.0/24 maxlen: 24 72.170.228.0/24 maxlen: 24 72.170.229.0/24 maxlen: 24 72.170.230.0/24 maxlen: 24 72.170.231.0/24 maxlen: 24 72.170.232.0/24 maxlen: 24 72.170.233.0/24 maxlen: 24 72.170.234.0/24 maxlen: 24 72.170.235.0/24 maxlen: 24 72.170.236.0/24 maxlen: 24 72.170.237.0/24 maxlen: 24 72.170.238.0/24 maxlen: 24 72.170.239.0/24 maxlen: 24 72.170.240.0/24 maxlen: 24 72.170.241.0/24 maxlen: 24 72.170.242.0/24 maxlen: 24 72.170.243.0/24 maxlen: 24 72.170.244.0/24 maxlen: 24 72.170.245.0/24 maxlen: 24 72.170.246.0/24 maxlen: 24 72.170.247.0/24 maxlen: 24 72.170.248.0/24 maxlen: 24 72.170.249.0/24 maxlen: 24 72.170.250.0/24 maxlen: 24 72.170.251.0/24 maxlen: 24 72.170.252.0/24 maxlen: 24 72.170.253.0/24 maxlen: 24 72.170.254.0/24 maxlen: 24 72.170.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8e:e0:27:66:d1:2f:49:79:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=7787691b-6bb8-4dc1-aefa-a4d1254dcc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:d6:a5:dd:c6:98:ad:db:01:48:3d:e4:f5: f4:11:0c:f5:51:b6:63:1a:23:7a:4d:e0:45:a9:fe: 78:0a:d9:cb:bf:47:d2:da:1d:4a:b4:ff:b8:56:b3: e8:05:2b:a4:60:c4:6d:eb:30:a7:11:04:92:2d:d5: d7:ca:b4:6e:53:ea:f3:60:cf:f9:39:2a:eb:91:44: 04:3f:6c:b2:92:83:12:d4:00:c7:ba:dc:9c:f6:69: df:d8:12:d7:94:e3:b6:83:22:50:a0:8f:26:5f:73: b3:f4:7e:7b:ef:55:09:b3:ca:49:58:6d:ff:1d:14: 0a:ea:e2:54:4f:44:5f:e5:94:97:42:d3:db:38:7e: b6:9d:dc:9b:4f:58:06:82:32:4c:a7:1f:06:0e:d2: 17:21:81:46:f3:2b:e3:34:b0:ca:9e:fd:8a:b8:90: 13:d5:4e:9e:49:80:26:84:1c:33:37:e9:00:aa:53: f3:3b:f4:c6:15:b8:89:7a:a1:ef:2a:e3:93:e9:03: 4d:ca:53:86:7e:63:90:2b:20:5e:99:e0:24:e2:82: fb:df:70:17:f4:00:19:8d:09:d1:33:ff:10:b1:fb: ef:05:3e:72:87:c6:46:a5:86:9a:6f:25:90:cc:52: 48:f9:ce:b1:2d:21:b1:82:38:58:db:c2:b0:a3:94: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AE:81:6B:63:C8:C1:67:1C:04:B9:E5:E9:60:59:14:44:51:08:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.170.0.0/19 72.170.208.0-72.170.216.255 72.170.220.0/23 72.170.223.0-72.170.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b2:40:13:7a:1a:fa:c2:32:cb:d3:1b:c6:c5:94:7c:12:d8: 4e:bd:74:b2:9c:d0:12:35:1d:01:5e:0c:3a:a3:07:45:b1:b1: 86:99:ee:5e:ae:ef:b0:2c:29:0f:bf:2a:e8:b3:a8:c3:2a:34: c7:81:bd:1e:d9:16:59:e9:ca:09:3d:e9:27:4a:b3:1d:92:9c: 0f:e5:00:da:0d:58:e5:ab:05:c2:38:e1:9b:a6:e9:07:73:8e: 31:ab:e8:b0:cc:5b:3d:21:b0:82:eb:d2:24:7e:4e:ec:e7:d2: a6:09:be:0c:47:44:23:c0:e5:2c:82:18:2a:a4:28:8b:9f:27: ad:82:c8:6e:54:eb:87:b8:30:4f:cd:eb:e4:76:83:09:47:c1: 72:db:ee:12:7a:22:67:a4:0e:39:de:4c:62:01:72:6a:c6:61: d8:eb:4c:c6:2a:4f:f7:9b:02:7f:09:53:4f:ed:6f:a1:2b:d1: 88:d2:05:c8:b6:f6:76:f9:ed:36:2a:c3:38:25:50:91:0d:ef: e3:c0:3f:a9:04:bd:11:63:ae:ff:a6:d5:76:49:1e:d3:7c:33: 0d:1c:62:3b:e0:cd:5e:ad:2d:4c:1a:6b:46:9e:8d:85:3d:67: c0:29:8b:94:c2:d9:68:4d:7c:cb:53:be:69:3e:81:bc:98:d6: 65:8f:1d:d5 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEsvwY7gJ2bRL0l5FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk Nzc4NzY5MWItNmJiOC00ZGMxLWFlZmEtYTRkMTI1NGRjYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOnWpd3GmK3bAUg95PX0EQz1UbZjGiN6TeBF qf54CtnLv0fS2h1KtP+4VrPoBSukYMRt6zCnEQSSLdXXyrRuU+rzYM/5OSrrkUQE P2yykoMS1ADHutyc9mnf2BLXlOO2gyJQoI8mX3Oz9H5771UJs8pJWG3/HRQK6uJU T0Rf5ZSXQtPbOH62ndybT1gGgjJMpx8GDtIXIYFG8yvjNLDKnv2KuJAT1U6eSYAm hBwzN+kAqlPzO/TGFbiJeqHvKuOT6QNNylOGfmOQKyBemeAk4oL733AX9AAZjQnR M/8QsfvvBT5yh8ZGpYaabyWQzFJI+c6xLSGxgjhY28Kwo5TvmwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFFuugWtjyMFnHAS55elgWRREUQi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMzg3MWYxYTctYzMyYS0z MTRiLWJkZmQtNjA2YWI5NGY1ZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAATAnAwQFSKoAMAwD BARIqtADBABIqtgDBAFIqtwwCwMEAEiq3wMDAEiqMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH6yQBN6GvrC MsvTG8bFlHwS2E69dLKc0BI1HQFeDDqjB0WxsYaZ7l6u77AsKQ+/KuizqMMqNMeB vR7ZFlnpygk96SdKsx2SnA/lANoNWOWrBcI44Zum6QdzjjGr6LDMWz0hsILr0iR+ Tuzn0qYJvgxHRCPA5SyCGCqkKIufJ62CyG5U64e4ME/N6+R2gwlHwXLb7hJ6Imek DjneTGIBcmrGYdjrTMYqT/ebAn8JU0/tb6Er0YjSBci29nb57TYqwzglUJEN7+PA P6kEvRFjrv+m1XZJHtN8Mw0cYjvgzV6tLUwaa0aejYU9Z8Api5TC2WhNfMtTvmk+ gbyY1mWPHdU= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:38 2025 by rpki-client