$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa File: e736234e-dc90-3e59-9245-a6a07d759011.roa (raw, json) Hash identifier: KX9OEkZrlofzhpO2YJaB+iYtSOh3zPMp7iyk1yrqu38= Subject key identifier: AA:FA:E1:4F:EB:9B:8F:E6:5D:E3:3B:EA:74:26:36:82:56:D7:57:D8 Certificate issuer: /CN=78a35d59-5267-4ec6-965e-2346bd05cddd Certificate serial: 010D0C9F4328584B031694687968E78D28EB4880 Authority key identifier: 91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 10750 IP address blocks: 64.111.35.0/24 maxlen: 24 64.111.42.0/23 maxlen: 23 64.111.44.0/24 maxlen: 24 64.111.58.0/23 maxlen: 23 64.111.61.0/24 maxlen: 24 65.255.134.0/24 maxlen: 24 67.221.200.0/22 maxlen: 22 67.221.204.0/23 maxlen: 23 67.221.206.0/24 maxlen: 24 69.27.192.0/24 maxlen: 24 69.27.197.0/24 maxlen: 24 130.51.36.0/22 maxlen: 22 199.127.48.0/21 maxlen: 21 209.152.155.0/24 maxlen: 24 216.145.145.0/24 maxlen: 24 216.145.148.0/23 maxlen: 23 216.145.150.0/24 maxlen: 24 216.145.155.0/24 maxlen: 24 216.146.253.0/24 maxlen: 24 2605:2940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:94:68:79:68:e7:8d:28:eb:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a35d59-5267-4ec6-965e-2346bd05cddd Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=ad6fd785-f654-4a0e-85de-aa1256bd2d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:7b:8a:da:48:2c:58:38:ce:08:bd:f3:80: 00:bd:e7:9a:21:69:7e:6e:aa:f5:4e:a2:9c:d1:c6: 9a:65:35:33:dd:36:2d:77:7a:24:e9:85:3e:13:72: 78:2c:d8:20:25:ea:28:a6:7c:32:77:d5:ee:a9:ce: 97:e4:12:4e:19:92:56:fa:bb:c2:1d:4f:94:68:45: 5e:16:04:2a:d1:4b:22:95:4a:45:33:02:f8:55:59: ab:96:92:16:1e:cd:67:a6:98:22:ca:4b:42:6e:64: a9:67:47:38:5d:b7:f9:38:ca:43:19:b8:8d:93:0c: 29:f5:18:74:c3:34:83:77:30:74:de:ad:85:37:d8: 0d:1d:65:ac:b4:bc:93:8d:4f:17:fc:24:f5:7e:a2: 1d:7f:29:ce:bc:fd:96:db:25:e1:8e:e2:ba:56:97: a0:8b:66:77:10:b4:3f:b5:56:92:3a:24:f0:ca:a6: bd:d4:2f:71:30:37:35:37:09:de:6c:f7:e4:7f:d5: a3:e4:15:e4:90:c5:03:6b:8e:30:f3:16:ef:ba:e5: 6f:9f:b7:1e:b3:62:4f:a9:92:1c:e6:42:4a:6a:59: c0:83:af:50:aa:b8:2c:e5:fa:59:56:f8:ca:eb:1f: 72:d8:71:68:5c:41:f6:5f:57:88:e6:68:8e:7c:7c: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FA:E1:4F:EB:9B:8F:E6:5D:E3:3B:EA:74:26:36:82:56:D7:57:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl X509v3 Authority Key Identifier: keyid:91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer sbgp-ipAddrBlock: critical IPv4: 64.111.35.0/24 64.111.42.0-64.111.44.255 64.111.58.0/23 64.111.61.0/24 65.255.134.0/24 67.221.200.0-67.221.206.255 69.27.192.0/24 69.27.197.0/24 130.51.36.0/22 199.127.48.0/21 209.152.155.0/24 216.145.145.0/24 216.145.148.0-216.145.150.255 216.145.155.0/24 216.146.253.0/24 IPv6: 2605:2940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5d:1e:bb:f4:0e:55:85:fb:5a:8e:5d:b5:f4:cb:cb:40:b0: 15:07:2f:23:2f:de:92:a8:82:37:1f:39:16:90:f2:21:12:17: d3:ff:38:e6:e3:00:da:f2:a0:62:d7:95:a4:14:b0:75:f4:41: c6:fa:ec:6a:c7:96:22:6f:7d:78:de:70:d9:28:63:4c:69:c0: c0:de:f3:b7:e5:59:a2:07:83:43:11:10:17:1d:18:3e:b9:a2: 3b:e3:65:d0:49:85:ac:4a:0d:38:cf:d3:f0:34:33:87:13:60: 18:14:d2:54:10:de:3b:50:c6:4f:e4:e7:c8:b4:75:4a:af:9a: e6:c5:28:4d:9e:98:e7:e5:37:d3:45:aa:68:d1:74:cd:24:ce: 8e:c2:14:ee:aa:ef:ed:22:65:e5:2e:c3:ce:f4:37:e1:68:5a: 63:cb:6c:93:15:bc:ea:ac:df:2f:7d:92:01:9a:76:d3:d1:d2: 91:23:99:d5:9a:80:c5:d1:40:8c:2c:cb:36:63:77:09:61:56: ca:93:ee:51:a2:17:71:c6:87:d9:16:87:52:43:83:a6:6b:da: 2c:9e:c2:6c:35:f7:dc:3b:32:64:fc:d9:ea:68:a4:bb:f7:5e: 81:e3:b7:c9:63:15:4b:1a:ff:06:f5:25:e9:1a:09:26:bf:20: 8b:60:5f:cb -----BEGIN CERTIFICATE----- MIIGwTCCBamgAwIBAgIUAQ0Mn0MoWEsDFpRoeWjnjSjrSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhMzVkNTktNTI2Ny00ZWM2LTk2NWUtMjM0NmJkMDVj ZGRkMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk YWQ2ZmQ3ODUtZjY1NC00YTBlLTg1ZGUtYWExMjU2YmQyZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+R7itpILFg4zgi984AAveeaIWl+bqr1TqKc 0caaZTUz3TYtd3ok6YU+E3J4LNggJeoopnwyd9Xuqc6X5BJOGZJW+rvCHU+UaEVe FgQq0UsilUpFMwL4VVmrlpIWHs1nppgiyktCbmSpZ0c4Xbf5OMpDGbiNkwwp9Rh0 wzSDdzB03q2FN9gNHWWstLyTjU8X/CT1fqIdfynOvP2W2yXhjuK6Vpegi2Z3ELQ/ tVaSOiTwyqa91C9xMDc1NwnebPfkf9Wj5BXkkMUDa44w8xbvuuVvn7ces2JPqZIc 5kJKalnAg69Qqrgs5fpZVvjK6x9y2HFoXEH2X1eI5miOfHxa1QIDAQABo4ID0zCC A88wHQYDVR0OBBYEFKr64U/rm4/mXeM76nQmNoJW11fYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83OGEz NWQ1OS01MjY3LTRlYzYtOTY1ZS0yMzQ2YmQwNWNkZGQvZTczNjIzNGUtZGM5MC0z ZTU5LTkyNDUtYTZhMDdkNzU5MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzhhMzVkNTktNTI2Ny00ZWM2LTk2 NWUtMjM0NmJkMDVjZGRkLzc4YTM1ZDU5LTUyNjctNGVjNi05NjVlLTIzNDZiZDA1 Y2RkZC5jcmwwHwYDVR0jBBgwFoAUkSA7u9xrrCrm3xbMJ7RMMUQJnbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83OGEzNWQ1OS01MjY3LTRlYzYtOTY1ZS0yMzQ2 YmQwNWNkZGQuY2VyMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwQAQG8j MAwDBAFAbyoDBABAbywDBAFAbzoDBABAbz0DBABB/4YwDAMEA0PdyAMEAEPdzgME AEUbwAMEAEUbxQMEAoIzJAMEA8d/MAMEANGYmwMEANiRkTAMAwQC2JGUAwQA2JGW AwQA2JGbAwQA2JL9MA0EAgACMAcDBQAmBSlAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADJdHrv0DlWF+1qO XbX0y8tAsBUHLyMv3pKogjcfORaQ8iESF9P/OObjANryoGLXlaQUsHX0Qcb67GrH liJvfXjecNkoY0xpwMDe87flWaIHg0MREBcdGD65ojvjZdBJhaxKDTjP0/A0M4cT YBgU0lQQ3jtQxk/k58i0dUqvmubFKE2emOflN9NFqmjRdM0kzo7CFO6q7+0iZeUu w870N+FoWmPLbJMVvOqs3y99kgGadtPR0pEjmdWagMXRQIwsyzZjdwlhVsqT7lGi F3HGh9kWh1JDg6Zr2iyewmw199w7MmT82epopLv3XoHjt8ljFUsa/wb1JekaCSa/ IItgX8s= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:03 2025 by rpki-client