$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa File: 225c70bf-4322-3691-bda9-5b4b15a20e82.roa (raw, json) Hash identifier: sryrYbKP8UzDWH05MusQPjtE/msZSOeMNxHZOWkTuwA= Subject key identifier: E2:4F:60:89:A8:78:48:C5:D7:91:4A:7D:CA:63:9C:40:B6:3C:CE:6A Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F4328584AFC1BF8926B58A77FB9839500 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 36103 IP address blocks: 23.88.160.0/20 maxlen: 20 64.77.208.0/23 maxlen: 23 68.70.232.0/22 maxlen: 22 68.70.236.0/24 maxlen: 24 68.70.247.0/24 maxlen: 24 68.70.253.0/24 maxlen: 24 68.70.254.0/24 maxlen: 24 74.50.216.0/21 maxlen: 21 97.75.224.0/23 maxlen: 23 198.135.172.0/22 maxlen: 22 204.225.16.0/20 maxlen: 20 208.101.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f8:92:6b:58:a7:7f:b9:83:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=48e28edf-1ef9-4192-b5a9-9961539323fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:e4:6d:e4:69:9c:34:ab:a9:e6:90:21:03: 44:09:b4:9e:a4:5c:74:e6:52:b9:39:4b:05:e4:84: 08:19:77:9e:24:62:89:b5:e7:bd:94:ed:f2:02:df: 4f:78:2a:ac:53:c2:65:3c:59:27:c5:91:9a:66:ae: b5:9d:f4:57:2d:72:6c:23:ec:0b:ed:44:db:46:f7: ca:1f:04:4c:57:6e:ff:ba:44:99:35:40:f9:f3:14: f9:d9:35:41:16:51:d0:75:cb:17:d6:3a:4e:4c:fd: 32:04:9b:c3:6f:17:96:31:d0:9f:d0:60:97:3b:b5: 3f:7f:c1:44:46:cd:9d:63:27:fe:5b:de:e2:ec:fe: c7:0a:a4:50:be:ca:f5:4b:76:6f:0f:05:8f:ce:f0: 2d:45:52:fe:9c:01:5b:f8:f3:c4:79:36:cc:24:65: ee:b9:35:ce:b5:fc:1a:42:19:1b:72:c3:2d:35:5d: 97:ad:62:b0:c5:d5:22:c5:69:1d:3b:38:c9:c7:2d: 20:d9:71:48:fb:61:9c:2f:74:54:01:cb:1a:c6:52: 5b:d6:76:44:63:7e:7f:4c:39:62:ed:a3:af:04:90: 7d:5f:ca:80:49:93:5a:34:44:b9:8e:df:55:3a:9a: fe:6a:53:47:34:88:90:ac:ce:70:f5:1f:88:83:ed: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4F:60:89:A8:78:48:C5:D7:91:4A:7D:CA:63:9C:40:B6:3C:CE:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 23.88.160.0/20 64.77.208.0/23 68.70.232.0-68.70.236.255 68.70.247.0/24 68.70.253.0-68.70.254.255 74.50.216.0/21 97.75.224.0/23 198.135.172.0/22 204.225.16.0/20 208.101.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f6:b6:18:ee:77:af:63:49:af:fa:06:a2:87:ba:b0:dc:ad: 0f:96:ab:80:eb:03:b4:a7:d4:27:74:5a:87:9c:d2:4f:5c:f3: c4:48:91:c1:df:67:19:26:83:32:66:3d:77:21:97:d9:34:81: 6b:14:a2:86:dd:64:3d:8a:84:e9:12:0b:b1:ed:61:e8:c0:40: 6e:09:aa:96:f8:d3:21:7d:45:c5:74:39:9e:e1:29:e9:b8:8d: 26:34:c8:1f:99:85:0d:28:46:c6:2e:ce:50:6c:f8:bb:f9:93: 45:94:7b:eb:46:20:a4:c7:40:03:65:cd:c8:c2:90:b5:00:be: c2:67:b2:8b:92:3c:ed:28:3c:45:03:87:f3:ca:52:d1:4d:15: be:61:fa:5a:d2:8d:83:ac:11:8d:a8:4b:40:27:4c:f9:ca:d3: 69:b5:a5:ed:d8:ae:60:7c:9f:cc:9b:4f:75:db:f1:71:59:47: 21:d3:85:67:51:d1:c9:23:5d:94:db:81:09:1e:87:83:0e:fe: 99:c0:36:80:35:78:ba:0e:c4:55:b4:0f:13:7f:02:eb:71:9c: 12:c7:a8:53:ba:4d:12:56:81:d2:21:ad:6e:a9:10:3c:00:f8: d5:3a:f7:8c:66:ae:21:72:e0:ef:c5:c5:0d:5b:c0:10:b8:8d: d5:52:17:ce -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUAQ0Mn0MoWEr8G/iSa1inf7mDlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDhlMjhlZGYtMWVmOS00MTkyLWI1YTktOTk2MTUzOTMyM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWbkbeRpnDSrqeaQIQNECbSepFx05lK5OUsF 5IQIGXeeJGKJtee9lO3yAt9PeCqsU8JlPFknxZGaZq61nfRXLXJsI+wL7UTbRvfK HwRMV27/ukSZNUD58xT52TVBFlHQdcsX1jpOTP0yBJvDbxeWMdCf0GCXO7U/f8FE Rs2dYyf+W97i7P7HCqRQvsr1S3ZvDwWPzvAtRVL+nAFb+PPEeTbMJGXuuTXOtfwa QhkbcsMtNV2XrWKwxdUixWkdOzjJxy0g2XFI+2GcL3RUAcsaxlJb1nZEY35/TDli 7aOvBJB9X8qASZNaNES5jt9VOpr+alNHNIiQrM5w9R+Ig+0XGQIDAQABo4IDmzCC A5cwHQYDVR0OBBYEFOJPYImoeEjF15FKfcpjnEC2PM5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvMjI1YzcwYmYtNDMyMi0z NjkxLWJkYTktNWI0YjE1YTIwZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQEF1igAwQB QE3QMAwDBANERugDBABERuwDBABERvcwDAMEAERG/QMEAERG/gMEA0oy2AMEAWFL 4AMEAsaHrAMEBMzhEAMEAdBl0jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBH9rYY7nevY0mv+gaih7qw3K0P lquA6wO0p9QndFqHnNJPXPPESJHB32cZJoMyZj13IZfZNIFrFKKG3WQ9ioTpEgux 7WHowEBuCaqW+NMhfUXFdDme4SnpuI0mNMgfmYUNKEbGLs5QbPi7+ZNFlHvrRiCk x0ADZc3IwpC1AL7CZ7KLkjztKDxFA4fzylLRTRW+Yfpa0o2DrBGNqEtAJ0z5ytNp taXt2K5gfJ/Mm0912/FxWUch04VnUdHJI12U24EJHoeDDv6ZwDaANXi6DsRVtA8T fwLrcZwSx6hTuk0SVoHSIa1uqRA8APjVOveMZq4hcuDvxcUNW8AQuI3VUhfO -----END CERTIFICATE-----Generated at Sat Oct 11 07:34:13 2025 by rpki-client