$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa File: 4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa (raw, json) Hash identifier: a20ozumqcxor4cdDQM49RboAsP5WZ6kHG9c3ywFBmoA= Subject key identifier: 1F:6F:DE:2A:A2:F0:2E:CC:85:77:4D:33:41:F4:60:D4:74:62:4D:0E Certificate issuer: /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee Certificate serial: 010D0C9F4328584AC5AB89EFE4E1DC3345852340 Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 26946 IP address blocks: 207.28.238.0/24 maxlen: 24 207.165.60.0/24 maxlen: 24 207.165.200.0/24 maxlen: 24 207.165.223.0/24 maxlen: 24 207.165.224.0/23 maxlen: 24 209.56.112.0/23 maxlen: 24 209.56.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:89:ef:e4:e1:dc:33:45:85:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=fad52354-2a3f-46c0-b950-3f1602bddd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:ec:af:97:b0:8f:9b:f3:03:a4:1b:39:ad: 60:7d:bf:fe:1e:fe:0c:7a:43:c3:1e:b7:fe:87:e4: 1b:1c:d0:eb:c9:3c:e9:7a:f0:27:ef:49:08:b6:f9: 67:6c:d0:7e:09:c3:d3:cd:3e:85:ac:1b:05:8c:23: c1:cc:c2:6f:94:7e:3f:6a:fc:2d:e7:e9:10:b3:a6: 6a:a1:a3:d6:57:93:f9:02:68:75:63:4b:e6:3a:da: c2:dc:9a:df:0a:5d:52:c8:1a:5a:b7:28:a2:40:d0: 64:d1:01:21:eb:1a:cb:b8:8e:06:8f:40:4b:f5:54: fe:cb:97:b8:60:73:b8:38:06:e9:a2:a3:14:b6:aa: 83:f7:e9:86:08:46:a8:05:b9:36:5c:c1:1f:37:2a: a0:e8:0b:fa:2b:a8:a1:fd:b9:11:a7:65:15:e0:b1: ba:a8:f2:97:f2:dd:a8:c0:3e:14:85:cc:0f:72:7d: bf:3a:25:83:b0:62:8c:1f:31:88:69:2a:51:d4:9e: 0c:4a:36:92:45:c6:ee:6f:cb:cd:bb:93:8b:8b:db: 1e:ee:34:c1:00:b7:37:79:93:13:f9:1e:34:f4:22: 2d:91:72:01:77:cd:16:22:54:c7:c2:fc:af:2b:e5: 65:5b:1d:7a:b6:eb:46:77:15:18:b7:39:fc:5d:dc: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6F:DE:2A:A2:F0:2E:CC:85:77:4D:33:41:F4:60:D4:74:62:4D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl X509v3 Authority Key Identifier: keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer sbgp-ipAddrBlock: critical IPv4: 207.28.238.0/24 207.165.60.0/24 207.165.200.0/24 207.165.223.0-207.165.225.255 209.56.112.0/23 209.56.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c9:c0:9d:36:18:46:5a:e5:1a:4d:97:9e:14:48:13:03:16: d6:fb:78:e2:72:07:73:8a:c9:80:d1:74:73:8b:25:c6:3b:26: ec:d5:a5:a3:1b:ee:1e:c8:87:65:21:7b:55:b3:90:fe:02:a4: 68:85:5c:f8:18:29:49:00:6d:82:ec:fb:29:87:6e:52:32:50: 44:c8:f6:65:42:3b:4d:3c:de:e9:83:bd:be:3b:f2:95:aa:97: db:96:ae:3f:63:3b:f8:aa:6b:d1:2b:df:12:21:00:4b:4d:28: 8a:92:a5:25:de:e0:cc:27:d4:93:ac:b3:2b:5b:94:f5:f0:ea: 13:3d:f2:86:25:e6:7f:39:90:38:92:dd:6e:1d:5c:26:c6:c0: 2a:21:c3:16:8b:5b:02:f4:6f:4f:77:66:52:4e:b8:9e:fb:81: 3b:1a:5f:31:02:8e:32:02:68:b9:3b:30:18:40:a6:30:1c:8a: 06:84:18:fb:b6:89:93:62:38:9e:80:64:a0:c3:30:cc:50:53: 19:7f:b0:74:b3:4f:64:24:30:08:37:5f:23:24:91:d6:2c:13: ab:0f:7a:77:c4:49:4b:07:b5:0a:a0:32:0b:38:ea:3f:f0:00: 1f:a4:24:12:da:dd:f8:f2:89:fc:bb:d9:39:cc:86:83:b5:0a: 22:7a:2e:49 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWErFq4nv5OHcM0WFI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJlZjdjOWItYzc1Ni00MzlhLWFjNTktMGZiNWU1ZThj MWVlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZmFkNTIzNTQtMmEzZi00NmMwLWI5NTAtM2YxNjAyYmRkZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRnsr5ewj5vzA6QbOa1gfb/+Hv4MekPDHrf+ h+QbHNDryTzpevAn70kItvlnbNB+CcPTzT6FrBsFjCPBzMJvlH4/avwt5+kQs6Zq oaPWV5P5Amh1Y0vmOtrC3JrfCl1SyBpatyiiQNBk0QEh6xrLuI4Gj0BL9VT+y5e4 YHO4OAbpoqMUtqqD9+mGCEaoBbk2XMEfNyqg6Av6K6ih/bkRp2UV4LG6qPKX8t2o wD4UhcwPcn2/OiWDsGKMHzGIaSpR1J4MSjaSRcbub8vNu5OLi9se7jTBALc3eZMT +R409CItkXIBd80WIlTHwvyvK+VlWx16tutGdxUYtzn8XdzL5QIDAQABo4IDezCC A3cwHQYDVR0OBBYEFB9v3iqi8C7MhXdNM0H0YNR0Yk0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVm N2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1ZTVlOGMxZWUvNGU4YTZhNjAtMWQ5Mi0z N2Y2LTk5OTAtZmRlZGNlNWRkNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzJlZjdjOWItYzc1Ni00MzlhLWFj NTktMGZiNWU1ZThjMWVlLzcyZWY3YzliLWM3NTYtNDM5YS1hYzU5LTBmYjVlNWU4 YzFlZS5jcmwwHwYDVR0jBBgwFoAUJ7ij3Un12fMQU7ZDWsI4uCWn130wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVmN2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1 ZTVlOGMxZWUuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAzxzuAwQA z6U8AwQAz6XIMAwDBADPpd8DBAHPpeADBAHROHADBAHROJ4wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhcnA nTYYRlrlGk2XnhRIEwMW1vt44nIHc4rJgNF0c4slxjsm7NWloxvuHsiHZSF7VbOQ /gKkaIVc+BgpSQBtguz7KYduUjJQRMj2ZUI7TTze6YO9vjvylaqX25auP2M7+Kpr 0SvfEiEAS00oipKlJd7gzCfUk6yzK1uU9fDqEz3yhiXmfzmQOJLdbh1cJsbAKiHD FotbAvRvT3dmUk64nvuBOxpfMQKOMgJouTswGECmMByKBoQY+7aJk2I4noBkoMMw zFBTGX+wdLNPZCQwCDdfIySR1iwTqw96d8RJSwe1CqAyCzjqP/AAH6QkEtrd+PKJ /LvZOcyGg7UKInouSQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:19 2025 by rpki-client