$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa File: f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa (raw, json) Hash identifier: O4JfFTHlim0J5U+PDpvJ3LWkq9apDQHF4xY+EI7to3c= Subject key identifier: 4A:7B:00:64:D3:6D:8A:A6:8D:14:26:CD:9F:61:EF:30:51:B7:5A:DC Certificate issuer: /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Certificate serial: 010D0C9F4328584AD7D15052823066D545577B60 Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1299 IP address blocks: 64.77.213.0/24 maxlen: 24 64.77.216.0/23 maxlen: 24 64.77.218.0/24 maxlen: 24 72.14.97.0/24 maxlen: 24 72.14.119.0/24 maxlen: 24 72.14.126.0/24 maxlen: 24 97.75.255.0/24 maxlen: 24 208.101.227.0/24 maxlen: 24 208.101.234.0/23 maxlen: 24 208.101.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:50:52:82:30:66:d5:45:57:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=52289c4e-9705-4001-b6da-f18e28f427a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:c8:d6:89:a1:a1:f8:22:25:a3:83:e5:c3: a9:6b:b7:58:bd:0e:55:d3:bf:95:9b:cb:5a:63:18: f3:4d:12:4a:4f:c6:92:df:a3:e1:3b:ae:aa:52:e8: 8e:82:57:bb:2a:16:b9:09:05:be:57:68:3b:e2:d1: 6c:1d:64:e2:a2:a8:d7:22:06:29:9d:b8:7e:04:69: 35:2a:ed:00:35:07:18:a3:ec:73:41:62:d3:99:a1: 1e:d6:bd:55:e7:18:dc:f9:90:ee:99:02:41:03:86: 52:ac:6d:4d:29:d3:fa:83:59:0c:03:eb:53:e3:52: 65:b7:d4:47:f2:c3:55:10:dd:db:ff:b9:e8:4e:c2: b7:44:ab:0c:db:8f:af:c6:9b:80:39:d5:47:23:82: 1b:84:d8:ce:30:60:85:7a:af:91:e8:81:5c:da:2c: 15:ee:23:47:dc:5d:20:62:a8:72:e0:9a:82:31:3d: 3d:e2:82:ff:6b:db:73:2d:ec:d6:0e:73:e5:3b:f7: ca:7b:c5:8b:02:74:54:c7:4b:f1:77:67:c3:2b:bb: 84:96:31:98:c5:fc:44:79:58:71:d6:41:8d:15:e8: fc:d7:8e:69:c4:d4:ac:43:ef:10:32:c0:ad:9d:af: 7f:42:07:2d:82:fa:45:4c:4c:34:51:12:40:19:85: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:00:64:D3:6D:8A:A6:8D:14:26:CD:9F:61:EF:30:51:B7:5A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl X509v3 Authority Key Identifier: keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer sbgp-ipAddrBlock: critical IPv4: 64.77.213.0/24 64.77.216.0-64.77.218.255 72.14.97.0/24 72.14.119.0/24 72.14.126.0/24 97.75.255.0/24 208.101.227.0/24 208.101.234.0-208.101.236.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5f:b3:6f:15:e7:43:07:ab:2e:be:2b:a7:e0:1f:cc:57:7c: 9b:37:f1:3b:67:d1:b0:39:2b:ec:6f:af:71:ab:fe:42:65:01: 1b:e1:95:04:be:59:8a:70:2a:60:ba:a1:03:75:36:ee:7f:4b: 2d:2b:84:1b:de:91:df:bc:bc:f9:a6:05:a9:df:76:63:c8:a6: e9:98:32:75:63:b8:b0:ba:80:5a:e1:f2:ba:a6:fe:70:46:c8: 81:e8:72:d5:9a:91:25:1b:17:82:85:9d:b7:80:93:b8:fa:d0: 08:2d:d7:d5:3c:19:24:7d:b1:df:f8:02:21:da:c1:d6:b2:d6: a4:95:87:3e:97:cb:a7:b7:f1:93:81:4b:2f:34:35:2b:83:e0: 3e:6f:d2:54:f2:5d:2f:9a:af:bc:ac:40:d9:3c:6b:97:a9:f3: c7:7d:f9:3b:99:ee:f4:9c:c0:6d:c9:a6:86:e7:ba:37:0b:d3: e3:be:ac:85:56:54:4e:44:02:30:6b:98:44:c6:5a:56:45:66: 8e:a3:10:ac:04:13:01:b0:98:37:f5:0f:d4:ca:d0:b6:eb:15: b9:c7:6d:97:70:ec:06:c6:11:e4:f1:d1:c3:ec:b3:c4:31:e9: 99:5c:01:28:e3:0a:51:3e:d0:bb:7a:3b:77:95:2a:ab:cc:c0: 76:8e:9e:a3 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWErX0VBSgjBm1UVXe2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3MDc0YzItN2M4Zi00MWFjLTgzMDctNzRlY2U0NGE0 NjBjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NTIyODljNGUtOTcwNS00MDAxLWI2ZGEtZjE4ZTI4ZjQyN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwnI1omhofgiJaOD5cOpa7dYvQ5V07+Vm8ta YxjzTRJKT8aS36PhO66qUuiOgle7Kha5CQW+V2g74tFsHWTioqjXIgYpnbh+BGk1 Ku0ANQcYo+xzQWLTmaEe1r1V5xjc+ZDumQJBA4ZSrG1NKdP6g1kMA+tT41Jlt9RH 8sNVEN3b/7noTsK3RKsM24+vxpuAOdVHI4IbhNjOMGCFeq+R6IFc2iwV7iNH3F0g Yqhy4JqCMT094oL/a9tzLezWDnPlO/fKe8WLAnRUx0vxd2fDK7uEljGYxfxEeVhx 1kGNFej8145pxNSsQ+8QMsCtna9/QgctgvpFTEw0URJAGYX0ZQIDAQABo4IDjzCC A4swHQYDVR0OBBYEFEp7AGTTbYqmjRQmzZ9h7zBRt1rcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjcw NzRjMi03YzhmLTQxYWMtODMwNy03NGVjZTQ0YTQ2MGMvZjNkZmU5NTktMWE2Yy0z YTFmLTljOTMtNGYwMTEwOTI1MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3MDc0YzItN2M4Zi00MWFjLTgz MDctNzRlY2U0NGE0NjBjLzhiNzA3NGMyLTdjOGYtNDFhYy04MzA3LTc0ZWNlNDRh NDYwYy5jcmwwHwYDVR0jBBgwFoAUwcyIvErACddhSMPRw7JSQGnVnwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YjcwNzRjMi03YzhmLTQxYWMtODMwNy03NGVj ZTQ0YTQ2MGMuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAQE3VMAwD BANATdgDBABATdoDBABIDmEDBABIDncDBABIDn4DBABhS/8DBADQZeMwDAMEAdBl 6gMEANBl7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAyX7NvFedDB6suviun4B/MV3ybN/E7Z9GwOSvsb69x q/5CZQEb4ZUEvlmKcCpguqEDdTbuf0stK4Qb3pHfvLz5pgWp33ZjyKbpmDJ1Y7iw uoBa4fK6pv5wRsiB6HLVmpElGxeChZ23gJO4+tAILdfVPBkkfbHf+AIh2sHWstak lYc+l8unt/GTgUsvNDUrg+A+b9JU8l0vmq+8rEDZPGuXqfPHffk7me70nMBtyaaG 57o3C9PjvqyFVlRORAIwa5hExlpWRWaOoxCsBBMBsJg39Q/UytC26xW5x22XcOwG xhHk8dHD7LPEMemZXAEo4wpRPtC7ejt3lSqrzMB2jp6j -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:12 2025 by rpki-client