$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa File: b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa (raw, json) Hash identifier: 3LvioKizMI4xtl5Wzy2pb2LuyPF3HDpO+Z8w9SkBcXM= Subject key identifier: A4:A5:97:5F:B6:F0:A2:E4:4A:C8:91:58:10:B6:F1:3E:25:E8:DC:00 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584AC8764496988AF5E151E46B00 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 3214 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:44:96:98:8a:f5:e1:51:e4:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=24bcfe2f-93c7-4d61-af7a-fd238ebfd549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:3d:58:54:2f:1a:33:09:1c:90:19:ac:5a: 79:c5:6e:14:64:29:2c:f9:c7:0b:82:87:ad:99:bf: 98:6b:ae:e0:63:7b:3a:bb:d3:d9:7c:b0:30:45:08: 11:e8:cd:2a:de:e6:75:fe:f5:06:35:81:e8:5a:88: 22:ea:ef:42:0f:75:14:89:79:08:0a:c7:38:73:cf: 9f:89:c2:f2:8f:71:0e:1e:70:21:a2:d9:dd:b2:ab: df:3b:3f:ab:76:14:3a:83:9e:62:5b:07:7f:d7:93: db:b8:f6:b6:24:bb:d0:64:2a:85:c7:25:41:bf:f0: be:50:fc:f1:14:31:48:14:2d:84:2f:3a:e8:ab:c2: 3b:0e:be:a2:51:e6:a4:ff:38:ae:e6:30:93:6b:03: 37:39:c8:1d:e1:de:85:85:f9:b0:5b:7f:20:08:74: ae:50:81:f4:d6:93:54:4d:04:0e:52:f3:4b:e6:2e: f8:fd:38:55:d9:cc:22:67:98:78:1a:a7:3f:f3:cd: 00:43:3d:2e:80:2c:66:ef:5b:90:97:f3:2b:bb:cd: 71:21:a2:94:e7:8c:86:01:d7:cd:3d:28:be:80:a3: 26:99:25:9d:73:ae:45:00:49:d2:20:b6:b7:e4:fa: f2:9f:9e:43:c3:9c:23:ff:78:97:9c:33:30:2e:6e: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A5:97:5F:B6:F0:A2:E4:4A:C8:91:58:10:B6:F1:3E:25:E8:DC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7d:4f:2d:6d:8d:af:9b:55:0a:49:27:0e:c7:d4:2e:67:5a: 17:39:5a:0a:1e:f2:f6:cf:2a:d2:9e:a4:f9:9e:a2:7b:dc:b5: ff:69:de:5d:07:2b:81:0c:84:76:a2:53:da:04:8c:7f:b7:3b: a8:a1:e8:e7:4e:60:5d:99:47:5c:16:44:7f:59:1c:20:03:7d: 91:64:ba:12:01:b0:4b:c0:27:f5:4b:0c:84:03:bc:fb:a9:72: 12:a3:8e:7f:e3:50:2e:08:df:f2:5a:f4:14:5d:1d:e8:d8:85: 10:40:b2:69:93:66:01:66:ef:1e:81:ca:5b:75:8f:12:a2:a1: ca:ea:4f:83:4c:a7:ee:a7:b0:62:3b:49:16:48:51:f9:e2:3e: 53:7b:03:81:79:80:ef:12:ea:b7:26:f0:3d:76:66:fc:6d:7d: 45:c2:2f:74:5f:65:c7:bb:fb:bf:bc:48:6f:5c:16:e5:d7:d7: a6:ed:1c:71:93:9d:6a:7e:f2:ad:30:4c:9f:b7:25:ca:f0:cc: 78:f2:ad:a6:35:7b:5d:a4:15:bb:63:5a:37:96:9a:69:69:27: 74:72:f3:07:ed:8b:61:a4:95:a6:c8:79:e4:74:39:b1:59:fb: b5:81:67:72:e4:72:34:52:06:aa:31:3d:82:41:1f:db:c6:6d: 35:b6:4d:0a -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWErIdkSWmIr14VHkawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjRiY2ZlMmYtOTNjNy00ZDYxLWFmN2EtZmQyMzhlYmZkNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMA9WFQvGjMJHJAZrFp5xW4UZCks+ccLgoet mb+Ya67gY3s6u9PZfLAwRQgR6M0q3uZ1/vUGNYHoWogi6u9CD3UUiXkICsc4c8+f icLyj3EOHnAhotndsqvfOz+rdhQ6g55iWwd/15PbuPa2JLvQZCqFxyVBv/C+UPzx FDFIFC2ELzroq8I7Dr6iUeak/ziu5jCTawM3Ocgd4d6FhfmwW38gCHSuUIH01pNU TQQOUvNL5i74/ThV2cwiZ5h4Gqc/880AQz0ugCxm71uQl/Mru81xIaKU54yGAdfN PSi+gKMmmSWdc65FAEnSILa35Pryn55Dw5wj/3iXnDMwLm7TawIDAQABo4IDfzCC A3swHQYDVR0OBBYEFKSll1+28KLkSsiRWBC28T4l6NwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvYjYzZjBmZjctMTViMC0z ZTc0LWFmMGEtOWEwMDdmNTQ2ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHl9Ty1tja+bVQpJJw7H1C5nWhc5Wgoe8vbPKtKepPmeonvctf9p3l0HK4EMhHai U9oEjH+3O6ih6OdOYF2ZR1wWRH9ZHCADfZFkuhIBsEvAJ/VLDIQDvPupchKjjn/j UC4I3/Ja9BRdHejYhRBAsmmTZgFm7x6Bylt1jxKiocrqT4NMp+6nsGI7SRZIUfni PlN7A4F5gO8S6rcm8D12ZvxtfUXCL3RfZce7+7+8SG9cFuXX16btHHGTnWp+8q0w TJ+3JcrwzHjyraY1e12kFbtjWjeWmmlpJ3Ry8wfti2GklabIeeR0ObFZ+7WBZ3Lk cjRSBqoxPYJBH9vGbTW2TQo= -----END CERTIFICATE-----Generated at Mon Aug 25 06:18:54 2025 by rpki-client