$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa File: 19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa (raw, json) Hash identifier: UbgTXWzXhJXjR5vn5NvPQEqjkU71Dl92AnZ9VRTOyok= Subject key identifier: DF:A2:D8:8F:74:70:31:50:3C:0E:A9:76:31:E0:55:B6:42:6B:73:21 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AE8913107A4C4D34C43F69B40 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 55045 IP address blocks: 72.249.45.0/24 maxlen: 24 72.249.76.0/23 maxlen: 24 72.249.104.0/23 maxlen: 24 72.249.125.0/24 maxlen: 24 72.249.126.0/23 maxlen: 24 72.249.144.0/23 maxlen: 24 72.249.170.0/23 maxlen: 24 174.136.0.0/23 maxlen: 24 174.136.4.0/23 maxlen: 24 206.123.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:31:07:a4:c4:d3:4c:43:f6:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=8c4fb66e-9a74-46e2-95da-8223512242a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:3c:4f:46:52:ef:d6:bc:2f:e4:eb:a6:56: 59:53:23:c9:11:e7:46:7a:c7:5a:db:e8:6a:31:a4: 3e:98:90:ff:cc:da:b5:78:28:36:81:0b:d6:3c:a3: d7:40:62:c4:68:35:86:b9:88:98:f8:ef:3e:ae:90: cd:a3:d9:5b:d2:ea:6c:70:bb:c5:13:02:0e:33:c5: 5d:3c:a7:a1:f9:7b:17:f8:13:e2:59:0e:07:0b:6c: cf:43:5a:f4:b8:e8:e6:d1:4b:6f:e1:53:63:04:f5: 69:2b:79:96:3b:01:ab:63:1a:15:0a:05:6e:99:ac: 53:db:81:e4:dd:9e:5a:ce:58:d3:a0:2a:4b:be:91: 2c:48:ef:88:1b:9c:23:a9:5c:00:b1:f4:4c:c3:16: ce:d0:5c:b9:f1:42:97:66:a1:da:b4:ec:19:6d:e3: 10:70:3f:6d:2f:08:6a:b8:41:de:48:5d:3d:c6:ef: 3d:d5:28:6f:a8:f3:99:a6:c9:4a:b3:fb:14:cb:aa: de:66:f2:67:48:fd:6b:4c:03:db:f6:0f:d8:9a:d9: a1:cd:97:d1:3d:fb:90:08:2d:ab:a2:de:d5:bc:f3: e1:cf:7f:54:fc:73:ff:c8:9a:cf:2d:64:b5:f0:f4: cd:cc:fa:1d:78:69:a2:d6:07:0b:09:41:a3:72:7c: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:D8:8F:74:70:31:50:3C:0E:A9:76:31:E0:55:B6:42:6B:73:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.249.45.0/24 72.249.76.0/23 72.249.104.0/23 72.249.125.0-72.249.127.255 72.249.144.0/23 72.249.170.0/23 174.136.0.0/23 174.136.4.0/23 206.123.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e9:41:e2:e4:89:a4:32:78:33:fa:c9:38:53:38:f1:88:a1: bb:8a:56:89:44:16:a3:60:ec:fd:02:42:34:6c:45:34:0d:4e: a7:ef:04:54:79:8b:64:40:6d:4b:23:0c:8e:f0:b0:73:f9:fe: d1:1b:cc:ea:10:23:f4:c7:b3:b7:d3:ff:c9:c0:12:c8:18:2d: cb:27:2c:2b:c9:00:39:69:70:5a:9a:0e:e2:d1:dd:db:63:fe: 17:be:84:6c:96:bc:17:59:d7:4f:37:6f:a0:16:05:43:df:11: 09:62:f0:36:0b:2a:cd:d8:61:3b:08:5a:ac:52:7c:c6:92:7a: 0e:6e:ef:b4:6c:59:11:2e:73:20:7a:22:1e:46:75:62:0e:09: 88:e2:60:ca:90:7c:35:7a:32:39:8f:05:88:73:3f:3a:8c:c1: af:9d:ee:d4:5d:2b:31:2d:7d:b0:ee:be:8c:9a:6c:7c:c8:9e: 70:bb:0f:c2:1d:d3:b0:d1:4f:9b:31:d0:c4:74:06:6d:b7:68: 52:5d:eb:06:ca:dc:4f:c1:aa:40:15:13:2a:a4:ad:2c:84:2d: 7b:1c:38:06:0c:16:73:cd:bd:e5:58:a5:37:1c:7f:81:d9:88: 9b:d4:3d:7a:64:2c:9c:69:af:8f:b4:1c:39:48:86:44:f5:c7: 25:f1:c9:95 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWErokTEHpMTTTEP2m0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OGM0ZmI2NmUtOWE3NC00NmUyLTk1ZGEtODIyMzUxMjI0MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0I8T0ZS79a8L+TrplZZUyPJEedGesda2+hq MaQ+mJD/zNq1eCg2gQvWPKPXQGLEaDWGuYiY+O8+rpDNo9lb0upscLvFEwIOM8Vd PKeh+XsX+BPiWQ4HC2zPQ1r0uOjm0Utv4VNjBPVpK3mWOwGrYxoVCgVumaxT24Hk 3Z5azljToCpLvpEsSO+IG5wjqVwAsfRMwxbO0Fy58UKXZqHatOwZbeMQcD9tLwhq uEHeSF09xu891ShvqPOZpslKs/sUy6reZvJnSP1rTAPb9g/YmtmhzZfRPfuQCC2r ot7VvPPhz39U/HP/yJrPLWS18PTNzPodeGmi1gcLCUGjcnwBEQIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFN+i2I90cDFQPA6pdjHgVbZCa3MhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMTllYWY3NjctM2U1Yy0z NTBjLThjNmItMTgzYTg4YzQ3YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQASPktAwQB SPlMAwQBSPloMAwDBABI+X0DBAdI+QADBAFI+ZADBAFI+aoDBAGuiAADBAGuiAQD BAHOe1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZelB4uSJpDJ4M/rJOFM48Yihu4pWiUQWo2Ds/QJCNGxF NA1Op+8EVHmLZEBtSyMMjvCwc/n+0RvM6hAj9Mezt9P/ycASyBgtyycsK8kAOWlw WpoO4tHd22P+F76EbJa8F1nXTzdvoBYFQ98RCWLwNgsqzdhhOwharFJ8xpJ6Dm7v tGxZES5zIHoiHkZ1Yg4JiOJgypB8NXoyOY8FiHM/OozBr53u1F0rMS19sO6+jJps fMiecLsPwh3TsNFPmzHQxHQGbbdoUl3rBsrcT8GqQBUTKqStLIQtexw4BgwWc829 5VilNxx/gdmIm9Q9emQsnGmvj7QcOUiGRPXHJfHJlQ== -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:47 2025 by rpki-client